Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          DKg9spDUCCfAQavTyg+p44CyRwgD1XIxEcik3pow5rI=
Subject key identifier:   03:03:C4:61:61:16:4F:5C:85:30:4F:55:F7:CB:F5:66:1A:82:73:9F
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       7B7B7CA3E6EBF732A2D2138CC37387F5F5E2AC7F
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:45:38 +0000
ROA not before:           Mon 23 Jan 2023 21:40:38 +0000
ROA not after:            Mon 22 Jan 2024 21:45:38 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7b:7c:a3:e6:eb:f7:32:a2:d2:13:8c:c3:73:87:f5:f5:e2:ac:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:40:38 2023 GMT
            Not After : Jan 22 21:45:38 2024 GMT
        Subject: CN=0303C46161164F5C85304F55F7CBF5661A82739F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:d5:c0:ca:3c:a1:ba:d8:30:bf:d2:fc:e7:
                    31:1e:1c:4d:26:21:4e:b0:e3:1b:d8:c7:52:80:ff:
                    a8:a3:ea:ee:00:b5:90:f0:a9:c3:a8:6c:d7:a3:c2:
                    d4:78:8e:06:d2:ff:b4:d5:e6:c1:e5:2c:80:8d:18:
                    71:04:e1:0a:ea:8f:a0:3b:f3:db:56:79:59:fc:c6:
                    48:f7:12:a9:85:8d:27:34:36:34:89:05:ba:6f:96:
                    5a:0d:f9:4e:00:e7:7e:5c:8b:a0:00:75:d2:e9:3d:
                    d0:97:b4:44:29:db:ab:c7:f6:e2:67:ca:63:33:72:
                    f5:6d:5d:78:c5:10:05:a9:14:99:1c:66:a3:b6:c0:
                    11:a6:f7:3a:73:36:e0:3a:a0:48:b9:75:b7:0f:9a:
                    94:22:46:53:ef:ec:57:7e:0a:3a:fc:08:aa:e7:52:
                    cb:4a:6b:bb:4f:70:f5:9b:7a:fd:07:14:67:c0:a4:
                    42:d4:c9:56:d3:e8:1f:86:b0:f2:d4:c6:04:26:11:
                    82:85:4e:b7:70:2d:21:b9:0f:d0:82:4a:06:e5:e9:
                    a1:56:a2:66:6e:c5:3c:ea:23:57:7c:e1:15:ca:ee:
                    2a:1a:76:36:54:d0:cd:d9:ba:d0:98:8c:0b:85:f9:
                    01:a5:2a:25:03:79:0e:a6:1f:f5:4e:bc:22:c7:58:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:03:C4:61:61:16:4F:5C:85:30:4F:55:F7:CB:F5:66:1A:82:73:9F
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:5d:10:9d:d3:8a:d3:13:1c:15:e5:71:c1:ea:f3:38:dd:48:
         53:95:03:cc:ec:4c:0b:3b:9c:58:a8:81:6c:54:e2:9f:15:44:
         b1:f5:9f:c8:fa:2a:84:ba:6d:42:00:85:e7:10:fc:59:72:2c:
         e1:97:62:ad:67:c2:3b:d9:ea:71:17:39:82:b5:0f:36:71:79:
         fd:50:b4:e6:f9:1b:38:b8:73:9f:c8:2c:ec:b8:60:c6:d1:c2:
         25:94:0f:d8:d1:c6:91:a3:4c:1f:db:78:3d:6b:e0:5e:56:e9:
         c5:e2:5d:f8:eb:3a:d7:65:6b:f1:23:4f:40:77:46:e5:0e:b2:
         bb:1a:59:1a:51:2f:46:b7:bc:e2:01:76:f2:c9:5d:30:71:9e:
         06:0e:d3:bd:c3:9b:7c:e8:85:79:dd:d9:07:62:89:b6:76:d1:
         72:1f:23:d0:c4:03:c2:0b:34:cf:17:ee:30:c9:12:36:6e:c5:
         a3:3f:c0:88:61:f2:5a:55:87:7f:38:e8:31:02:f4:0d:95:df:
         b3:66:fa:f9:72:27:e3:20:b8:bd:93:09:f7:19:3c:40:5c:f0:
         42:48:55:62:dc:b0:08:6c:09:47:a1:e1:93:b1:e9:6c:47:2e:
         55:bd:36:95:29:02:2e:ca:dd:49:39:53:0d:5e:50:9e:da:fa:
         2b:e4:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:44:34 2025 by rpki-client