Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/3230312e3134382e3136302e302f32322d3234203d3e203631383634.roa
File:                     3230312e3134382e3136302e302f32322d3234203d3e203631383634.roa (raw, json)
Hash identifier:          mtvwwg5Y8rZKDkF3BTD9R18o/94mcmxbOU0RS+h0na4=
Subject key identifier:   F5:D5:8A:89:E8:E1:ED:44:1D:89:10:0F:E0:58:86:16:E7:17:BB:8B
Certificate issuer:       /CN=42F558F853DE46F55030097C19294E709CC04ECD
Certificate serial:       08C3EA1563844049239E9AF31E42E36C46186EA2
Authority key identifier: 42:F5:58:F8:53:DE:46:F5:50:30:09:7C:19:29:4E:70:9C:C0:4E:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42F558F853DE46F55030097C19294E709CC04ECD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/3230312e3134382e3136302e302f32322d3234203d3e203631383634.roa
Signing time:             Tue 19 Jul 2022 18:34:46 +0000
ROA not before:           Tue 19 Jul 2022 18:29:46 +0000
ROA not after:            Tue 18 Jul 2023 18:34:46 +0000
asID:                     61864
IP address blocks:        201.148.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:ea:15:63:84:40:49:23:9e:9a:f3:1e:42:e3:6c:46:18:6e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F558F853DE46F55030097C19294E709CC04ECD
        Validity
            Not Before: Jul 19 18:29:46 2022 GMT
            Not After : Jul 18 18:34:46 2023 GMT
        Subject: CN=F5D58A89E8E1ED441D89100FE0588616E717BB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:31:b0:f5:fa:96:1d:1e:20:bf:64:a3:db:
                    ef:60:2e:e3:d7:c0:be:e8:fc:27:af:6a:c9:7b:a4:
                    5c:8d:c5:f5:5c:c1:c0:4a:40:64:88:06:c9:5e:81:
                    d9:e7:b8:b9:96:c1:2a:5c:93:9c:87:c8:dc:14:2f:
                    f7:ab:c8:a0:52:49:70:df:fd:18:5f:71:54:ea:a1:
                    f4:4a:62:8f:d0:c5:77:07:76:58:dd:a2:ae:e6:c9:
                    4a:3b:7f:1e:88:a0:f3:6b:33:08:6c:27:67:60:2c:
                    55:f1:23:52:13:8c:de:93:b1:19:b7:3e:1e:b6:67:
                    99:7d:9a:e5:ee:8f:f7:8b:a3:2c:e0:b7:41:9f:57:
                    88:ce:82:48:d7:d6:9c:af:ea:ff:2c:73:39:84:b1:
                    29:ce:26:46:dd:d5:4a:e7:a8:da:33:03:27:36:60:
                    f7:99:62:ad:19:cb:e0:57:a9:3b:30:4f:69:d6:7b:
                    c4:d9:8f:2c:f6:ee:8a:1a:6b:b3:21:dc:42:8c:e9:
                    f6:c4:cd:cc:e0:2d:ea:88:ba:20:ac:44:7d:98:33:
                    3a:4e:0c:79:0f:f2:98:cf:ea:d3:76:ca:3b:3f:1e:
                    d1:e5:b4:87:f6:90:e9:d7:fd:76:db:70:41:00:2b:
                    c5:3d:39:9f:a8:39:63:e3:49:0b:b1:e8:e5:ed:b5:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:8A:89:E8:E1:ED:44:1D:89:10:0F:E0:58:86:16:E7:17:BB:8B
            X509v3 Authority Key Identifier:
                keyid:42:F5:58:F8:53:DE:46:F5:50:30:09:7C:19:29:4E:70:9C:C0:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42F558F853DE46F55030097C19294E709CC04ECD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/3230312e3134382e3136302e302f32322d3234203d3e203631383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:70:fb:9d:46:c2:e2:9e:3c:f3:5c:69:44:fc:6a:79:83:99:
         09:e4:f4:dc:34:87:3e:ee:11:12:f2:41:9e:cd:5a:78:72:47:
         a6:5d:15:b0:83:23:6b:d3:cd:f4:92:4c:76:09:41:81:d2:e0:
         f9:5e:cf:da:42:28:f2:3f:6d:90:49:05:38:db:bb:bf:15:b9:
         9a:5a:35:db:3d:47:4d:d8:43:9d:14:29:1f:5d:6a:6b:f9:dc:
         90:6d:3d:f0:cc:e4:21:e1:97:db:06:84:a5:48:11:7b:5e:61:
         85:56:6d:51:cc:09:de:d8:b5:72:34:3d:cf:af:2a:79:fa:89:
         03:1b:1a:41:b6:9e:12:e4:e5:ba:bf:07:f9:90:80:bb:0e:99:
         f4:b8:72:6f:2c:7f:2f:aa:4a:a5:42:88:12:ba:94:98:a3:11:
         ed:ed:68:35:23:4b:3b:3a:44:09:d0:d2:98:49:b4:a1:9f:6c:
         20:82:ac:11:fd:f7:59:16:2d:1b:55:8c:c1:8d:5a:f8:0a:75:
         00:4b:3d:e0:35:5c:2b:26:db:e3:30:86:c9:7b:8e:42:c2:2d:
         20:3c:da:df:b0:d9:9c:ba:0d:ce:67:a1:03:43:47:e4:7d:38:
         bc:d0:03:1d:f0:b1:75:12:d5:ce:8e:13:f5:cb:e3:30:6a:79:
         8b:42:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:22:40 2025 by rpki-client