Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32342d3236203d3e20323634303039.roa
File:                     3136382e3232372e3133322e302f32342d3236203d3e20323634303039.roa (raw, json)
Hash identifier:          6ln4PQYNkOu7ItpxukkdMVEngDEFjFoDNwPc4Q/mFw8=
Subject key identifier:   4F:41:D8:4C:89:34:55:61:3B:22:0E:01:4D:38:4E:9D:F8:AB:54:77
Certificate issuer:       /CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Certificate serial:       26C7311C070813B28D972582D20114B191B3A0AA
Authority key identifier: 17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32342d3236203d3e20323634303039.roa
Signing time:             Wed 07 Aug 2024 17:22:56 +0000
ROA not before:           Wed 07 Aug 2024 17:17:56 +0000
ROA not after:            Wed 06 Aug 2025 17:22:56 +0000
asID:                     264009
IP address blocks:        168.227.132.0/24 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:31:1c:07:08:13:b2:8d:97:25:82:d2:01:14:b1:91:b3:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
        Validity
            Not Before: Aug  7 17:17:56 2024 GMT
            Not After : Aug  6 17:22:56 2025 GMT
        Subject: CN=4F41D84C893455613B220E014D384E9DF8AB5477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:30:9a:b7:3d:9a:d3:f3:b1:a3:f5:6d:7f:45:
                    89:51:b4:6c:8a:35:8f:51:33:98:9d:aa:62:fa:a6:
                    5a:d3:59:da:7f:9e:9e:1d:94:89:d8:42:de:de:dd:
                    5b:43:76:c7:b0:76:15:46:86:87:17:c3:fa:13:c7:
                    72:dc:68:4d:c5:2b:bd:c4:ef:d4:e0:6d:f1:cb:a2:
                    3f:19:86:7a:36:0f:5a:87:ca:bc:17:0d:65:d0:c4:
                    a3:a7:63:a5:ca:86:da:36:9e:63:e4:71:a4:22:dc:
                    e7:db:89:b7:d4:f1:7d:77:76:13:22:28:7d:50:91:
                    99:3a:39:9f:2a:1c:03:b7:be:c3:1e:32:dc:c1:d7:
                    5f:59:5b:6b:8c:22:5b:49:da:e2:be:de:73:99:19:
                    4b:3c:f8:42:a2:88:c9:0f:d9:9a:7d:fb:2f:81:63:
                    48:65:dd:4b:93:74:fa:47:75:75:46:9c:11:89:d4:
                    88:f1:b6:37:f4:42:a3:3a:61:d0:de:a7:d0:65:e7:
                    ad:10:79:6b:6f:ff:cf:83:f8:3f:11:b8:84:60:15:
                    70:5e:d8:ba:5d:d5:2e:fc:19:0d:bc:b7:5f:ea:cd:
                    20:64:c5:a8:78:1d:7c:73:40:7d:7f:22:07:87:16:
                    b7:d2:e8:93:f1:9d:0b:82:7e:a1:dd:94:c0:2f:7c:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:D8:4C:89:34:55:61:3B:22:0E:01:4D:38:4E:9D:F8:AB:54:77
            X509v3 Authority Key Identifier:
                keyid:17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32342d3236203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b1:39:61:79:da:85:36:71:c5:c9:39:4f:32:c9:8c:da:78:
         72:7a:78:f4:ef:fc:c1:b1:a4:e8:55:ed:46:a4:f9:0c:b0:35:
         0d:19:30:a5:42:52:f7:dc:14:54:ac:10:f0:a1:eb:38:f1:c6:
         45:d3:f1:56:ce:80:29:66:92:13:b9:a7:4d:c1:28:d5:d2:5d:
         35:4e:cc:dc:ed:ac:83:5b:62:fe:30:6d:4f:dd:e8:ba:63:e4:
         24:91:69:e5:26:ee:b6:16:a5:e8:75:f1:da:30:f9:1b:4a:15:
         5e:38:af:cf:1b:b7:b6:b9:6f:e5:87:1a:f9:9b:83:0b:40:53:
         16:9a:95:59:63:a4:53:1f:ae:c7:27:86:d7:ec:dc:e7:64:21:
         ec:7c:5a:db:ab:2f:79:69:07:ee:92:3b:59:3c:ac:d3:a9:24:
         90:bc:40:fa:5f:b0:97:e9:a1:45:3e:3f:71:3c:09:28:09:03:
         9b:b2:fc:8d:7e:2c:dd:1f:31:37:55:60:28:09:c9:50:49:13:
         80:cf:cc:89:0b:14:fb:f4:c1:ed:84:86:40:ac:c1:3e:61:8e:
         f9:3a:ef:24:6e:1d:5d:0c:9e:26:9e:13:83:ea:9c:ad:9b:9f:
         71:4e:a9:08:ee:d7:fa:d1:39:63:a7:4a:41:26:24:f3:05:b8:
         f3:12:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:55:57 2025 by rpki-client