Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139312e302f32342d3234203d3e20323634303236.roa
File:                     3134332e302e3139312e302f32342d3234203d3e20323634303236.roa (raw, json)
Hash identifier:          M6gFgDNaj3bqaySz1T6BRurr0tzUqTwOXhiGCGDPgfM=
Subject key identifier:   62:B4:90:84:1F:2B:15:D9:9F:FF:95:0B:D9:B1:D3:E1:3F:17:24:24
Certificate issuer:       /CN=40E329E137ACE9C947E72E009F44D35DDC786723
Certificate serial:       54CC6FE9E2B0E7564A3F89902093A8B5E71DCA8F
Authority key identifier: 40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139312e302f32342d3234203d3e20323634303236.roa
Signing time:             Sun 20 Nov 2022 13:30:32 +0000
ROA not before:           Sun 20 Nov 2022 13:25:32 +0000
ROA not after:            Sun 19 Nov 2023 13:30:32 +0000
asID:                     264026
IP address blocks:        143.0.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cc:6f:e9:e2:b0:e7:56:4a:3f:89:90:20:93:a8:b5:e7:1d:ca:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E329E137ACE9C947E72E009F44D35DDC786723
        Validity
            Not Before: Nov 20 13:25:32 2022 GMT
            Not After : Nov 19 13:30:32 2023 GMT
        Subject: CN=62B490841F2B15D99FFF950BD9B1D3E13F172424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:3c:3b:65:4a:06:61:55:39:f6:83:80:a8:
                    eb:16:da:54:97:ad:bf:64:23:85:c6:1e:0d:e2:3f:
                    62:e0:3d:1f:44:68:4b:6b:99:a4:81:a6:74:2d:e7:
                    7b:83:56:7e:6f:bc:23:b8:2c:50:b5:43:f4:39:77:
                    62:cd:b3:af:b9:27:05:c3:d3:ee:3f:8c:e1:7f:cd:
                    5b:ee:43:45:99:dc:bf:70:41:d3:69:42:80:11:57:
                    00:10:ea:34:0a:68:e4:66:97:e5:fa:6d:f4:25:b8:
                    69:06:27:d2:8f:9e:35:72:f5:e0:ab:d5:fc:fb:27:
                    f0:2e:72:00:17:30:c9:81:f9:bd:4b:25:e4:07:46:
                    1a:68:76:90:f1:ad:b8:23:c9:2e:e6:e6:64:c3:5d:
                    74:9c:86:9a:4c:76:a7:6e:29:ed:80:c0:fa:57:58:
                    75:00:8d:40:22:15:01:29:8a:39:d4:43:86:9e:19:
                    6d:87:dc:e0:1d:13:eb:06:56:4d:55:5c:05:4b:e9:
                    2c:66:1f:f3:11:9f:db:c8:53:66:b3:ab:21:06:53:
                    d3:48:0e:b0:cf:72:e6:02:3b:50:5f:84:52:bb:d1:
                    b1:3e:39:de:ae:84:5f:b8:a0:1b:95:e9:17:99:17:
                    b6:f9:28:a5:a7:6e:65:89:50:47:8f:85:c6:81:cf:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:90:84:1F:2B:15:D9:9F:FF:95:0B:D9:B1:D3:E1:3F:17:24:24
            X509v3 Authority Key Identifier:
                keyid:40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139312e302f32342d3234203d3e20323634303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:83:d8:af:b9:f3:c7:96:a5:e5:5b:53:ab:77:c7:0d:31:
         32:e6:c1:e8:a6:02:3f:13:37:13:af:a0:31:8a:54:39:50:dc:
         2b:c9:8c:9d:b7:7c:a8:ef:fa:85:5f:68:5b:05:2d:e2:fd:13:
         c6:54:bb:0d:64:47:bb:57:45:82:72:78:6e:81:7f:2e:f9:57:
         3e:5d:f9:ee:4b:e3:02:45:ee:2b:41:8a:75:57:88:57:11:a9:
         0d:50:b1:a4:7c:40:e7:85:3f:16:28:f4:5e:85:9d:f7:5d:e0:
         6b:0e:d3:e5:cf:be:72:2f:4e:e9:1d:c5:cf:9e:d7:1f:d0:3a:
         20:e3:30:3f:32:bc:bf:91:8a:21:7c:10:d5:28:ad:a2:a7:bf:
         db:a6:a3:a9:60:ac:f5:eb:9d:15:76:6f:1d:c6:68:cc:aa:3d:
         25:0e:d2:90:ab:67:40:cb:03:3e:4a:ea:69:ef:8a:73:7d:81:
         b4:98:22:38:07:bd:34:08:79:2d:7b:57:bf:1d:97:f7:27:cb:
         11:dd:4f:d3:07:62:07:74:a5:3f:c7:ea:e0:3e:f0:91:63:ed:
         65:c4:96:04:28:c3:7f:f2:86:0c:eb:21:e2:0d:04:0a:57:d4:
         d2:0e:93:e4:36:a6:29:f4:bb:72:87:83:1f:47:bf:2c:d3:8a:
         b7:a2:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:17:03 2025 by rpki-client