Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e20323731323935.roa
File:                     3139302e35322e37322e302f32322d3332203d3e20323731323935.roa (raw, json)
Hash identifier:          PvZrdKby9WxX03zK8JtPwwn/hi+LYmYy6wqJt5zyVFU=
Subject key identifier:   2F:1E:D7:FE:AA:65:E2:D0:66:69:CF:57:D3:44:25:83:90:4E:05:86
Certificate issuer:       /CN=A7A8D14EA58F9876B2C166868B5830DF9709F7C1
Certificate serial:       12161DDA8569501DF9C2FE068E6160CADDE0170F
Authority key identifier: A7:A8:D1:4E:A5:8F:98:76:B2:C1:66:86:8B:58:30:DF:97:09:F7:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A8D14EA58F9876B2C166868B5830DF9709F7C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e20323731323935.roa
Signing time:             Sun 26 Mar 2023 20:48:15 +0000
ROA not before:           Sun 26 Mar 2023 20:43:15 +0000
ROA not after:            Sun 24 Mar 2024 20:48:15 +0000
asID:                     271295
IP address blocks:        190.52.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:1d:da:85:69:50:1d:f9:c2:fe:06:8e:61:60:ca:dd:e0:17:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A8D14EA58F9876B2C166868B5830DF9709F7C1
        Validity
            Not Before: Mar 26 20:43:15 2023 GMT
            Not After : Mar 24 20:48:15 2024 GMT
        Subject: CN=2F1ED7FEAA65E2D06669CF57D3442583904E0586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:c0:7e:e2:2e:17:25:b4:85:f4:db:f7:fa:
                    c4:a9:89:99:78:82:3e:df:69:85:df:91:ac:37:58:
                    0d:2f:86:90:df:b0:f1:22:b9:14:ad:5c:1c:46:08:
                    42:88:a6:33:1e:7b:1e:7a:88:81:cf:aa:af:07:14:
                    ee:ec:3f:f7:72:e7:8f:5e:dd:de:f0:78:32:5a:a8:
                    dc:31:5f:77:6a:5f:7d:91:e2:73:5c:e2:de:11:5b:
                    77:b6:cf:f8:a5:03:09:cb:0c:46:fc:57:34:41:80:
                    f5:cf:a8:3d:3f:bc:d3:ae:56:ae:32:ff:67:69:ce:
                    44:02:04:3e:c7:de:af:cb:ec:2b:c0:e9:de:a2:33:
                    fb:93:aa:99:ec:d5:99:43:56:1f:29:c1:66:e1:b6:
                    2f:83:e4:42:e2:04:c8:00:96:b6:cd:4e:81:e9:25:
                    8b:48:51:a9:43:b0:f5:12:e0:af:68:a5:42:a4:9b:
                    5f:42:87:db:92:b5:16:7d:68:c0:d5:46:f3:f3:41:
                    30:ff:2b:1e:40:0f:d0:cf:96:e0:e7:8b:22:db:14:
                    38:b3:68:66:c3:b1:9b:48:fe:b2:b3:3e:3b:b8:49:
                    a7:b9:4a:cd:6d:f1:bd:fd:d2:c4:3b:ef:69:dd:c9:
                    99:f6:52:f1:c1:db:07:23:ee:a2:6d:fd:42:0b:b7:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:D7:FE:AA:65:E2:D0:66:69:CF:57:D3:44:25:83:90:4E:05:86
            X509v3 Authority Key Identifier:
                keyid:A7:A8:D1:4E:A5:8F:98:76:B2:C1:66:86:8B:58:30:DF:97:09:F7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/A7A8D14EA58F9876B2C166868B5830DF9709F7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A8D14EA58F9876B2C166868B5830DF9709F7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37322e302f32322d3332203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:c1:09:15:18:f5:d6:7c:43:e5:1e:61:ae:52:c2:63:4e:bc:
         af:ab:e0:77:eb:ef:02:d6:75:1f:3f:57:3f:6e:a6:3e:6a:a1:
         57:86:b2:d8:b8:44:ab:5f:4a:ef:40:20:3e:3f:ef:02:87:98:
         63:be:5f:66:d5:55:89:05:dc:01:3d:4d:16:3b:41:55:da:78:
         57:e1:c7:b6:78:c8:10:ba:57:26:d3:9c:22:32:a8:be:3a:d0:
         1f:26:3a:55:13:09:4d:60:6a:2e:25:f3:50:5a:73:51:dc:af:
         2b:c7:24:bc:16:03:37:a0:e9:41:d3:6c:c6:64:70:c2:3c:cd:
         72:9d:31:44:57:4b:dd:59:51:95:12:fb:7c:d4:36:a3:8b:8b:
         d8:a7:af:04:b6:8c:ca:de:df:3f:fe:29:c8:f9:5a:15:22:69:
         d5:7b:a7:e4:dd:af:69:aa:b1:73:fc:c3:fb:53:4f:c6:f3:b8:
         81:76:51:de:d7:03:92:94:5e:87:b0:f2:4d:55:9f:37:28:96:
         91:ab:6e:77:ac:f8:4a:62:fd:23:8c:4e:74:31:0b:2c:31:e3:
         33:60:18:6c:8e:a5:ee:aa:94:b8:f8:2a:2b:da:3b:f2:99:bb:
         78:80:22:f5:4b:15:de:e6:f2:56:ef:01:ce:13:5a:49:ff:89:
         a7:3a:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:18:47 2025 by rpki-client