Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          na5Qz7kYJjtGUekuRtRDmEYs3dkFaeJsdwcyx8RlFcw=
Subject key identifier:   A9:39:C2:C7:D4:44:C3:E0:15:7A:53:E1:17:E1:55:D7:0E:2A:6B:FB
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       5CDD85D8D30DDFDCBA4A409D37DD3AC5873AC305
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa
Signing time:             Fri 15 Sep 2023 18:21:40 +0000
ROA not before:           Fri 15 Sep 2023 18:16:40 +0000
ROA not after:            Fri 13 Sep 2024 18:21:40 +0000
asID:                     61614
IP address blocks:        168.227.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:85:d8:d3:0d:df:dc:ba:4a:40:9d:37:dd:3a:c5:87:3a:c3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 15 18:16:40 2023 GMT
            Not After : Sep 13 18:21:40 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:f7:96:ef:d0:89:4a:6e:ce:21:e3:74:74:
                    81:c1:e1:27:86:c0:20:3f:a2:ff:15:6d:2e:de:1f:
                    80:22:ef:66:fc:62:61:73:b2:b3:73:3a:45:c7:29:
                    c9:ec:3f:32:4e:fb:80:a9:c1:43:47:1d:d3:29:93:
                    f3:e2:28:92:37:79:f1:4c:f1:27:b0:7f:72:39:15:
                    61:b3:0c:08:06:56:94:0e:bc:b8:1b:a4:95:fe:fa:
                    56:3e:19:8d:3d:5a:93:89:ca:00:a4:b4:5a:65:67:
                    df:3b:41:2d:fb:68:ae:72:da:cc:51:aa:0c:e1:23:
                    72:f0:4f:dc:23:bd:18:a3:4d:60:54:1d:c9:5d:9f:
                    c1:8e:44:03:8b:a6:af:28:2f:0d:03:6e:21:09:7c:
                    e6:9a:5c:35:4c:26:54:f7:8c:c2:d8:a3:b6:bf:35:
                    4e:86:a8:f8:e4:36:12:07:f8:44:c7:34:97:fd:01:
                    a5:66:ca:59:27:c0:60:b6:30:37:77:d9:3c:a0:5a:
                    e3:bb:ad:c5:34:d1:cc:c2:81:05:46:bb:af:a7:a1:
                    e9:fb:e9:7a:ea:22:a2:e1:81:82:22:84:2f:7c:b7:
                    2c:c7:6c:33:d4:0f:0e:c0:8a:04:2d:a9:21:4a:32:
                    a1:78:c3:12:47:9b:ff:9e:e8:bd:15:f2:65:71:03:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:C2:C7:D4:44:C3:E0:15:7A:53:E1:17:E1:55:D7:0E:2A:6B:FB
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:42:12:b2:e5:28:f0:4c:0d:ea:37:9a:6d:1b:98:3f:2a:45:
         6d:06:3d:4a:95:60:59:bb:28:0e:61:f3:09:5b:17:d1:54:9a:
         12:b0:ee:d7:6a:cf:9a:ac:5e:d5:e8:5a:15:ba:47:24:a9:ed:
         43:78:49:e1:54:f1:9f:19:a7:31:d5:7a:81:20:b7:ef:67:04:
         2d:cd:83:1e:2a:6b:3b:63:f7:8e:99:80:49:00:70:5c:0d:40:
         58:9c:83:c4:19:4a:42:a3:15:48:4d:b3:9b:4c:3b:6c:32:11:
         97:86:a9:99:8e:38:c2:28:65:8e:e9:c1:cc:b4:c6:20:16:7f:
         71:73:09:57:dc:52:5b:56:17:9f:00:8a:4b:fa:ec:f9:d4:e4:
         0a:85:30:6b:6c:6f:02:89:71:ed:6c:f9:a1:8b:cb:ee:be:40:
         7a:28:12:b5:6c:06:92:cd:74:53:27:9e:ad:76:02:2a:9b:6c:
         16:40:17:73:89:06:a3:2b:e4:cc:72:c2:5a:02:e1:b7:6e:4e:
         64:2d:53:92:26:90:dc:c3:06:ae:dc:da:1b:f1:a6:fd:6a:8f:
         14:6b:f9:0f:0a:a1:7f:c9:6b:fd:c5:06:4d:c0:8f:12:62:31:
         9e:3d:49:3e:e9:94:f4:4c:af:ce:18:8e:9b:6a:f8:6b:49:1f:
         e5:d3:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:40 2025 by rpki-client