Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232352e302f32342d3234203d3e20323634383637.roa
File:                     3136382e3230352e3232352e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier:          YXPkD6VgKk7Ehlp8aPmgms//GeZTWO47S8g6xGNfMDY=
Subject key identifier:   F9:DD:2E:7F:B9:92:36:B1:AE:9D:05:81:67:B1:68:1C:B7:9E:E4:CD
Certificate issuer:       /CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
Certificate serial:       244E14973D889EF81C0AA6C6E189425140846019
Authority key identifier: A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232352e302f32342d3234203d3e20323634383637.roa
Signing time:             Fri 29 Dec 2023 13:31:22 +0000
ROA not before:           Fri 29 Dec 2023 13:26:22 +0000
ROA not after:            Fri 27 Dec 2024 13:31:22 +0000
asID:                     264867
IP address blocks:        168.205.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4e:14:97:3d:88:9e:f8:1c:0a:a6:c6:e1:89:42:51:40:84:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A81080075593D65A04DB9FC78CAC8CA9E1EE8246
        Validity
            Not Before: Dec 29 13:26:22 2023 GMT
            Not After : Dec 27 13:31:22 2024 GMT
        Subject: CN=F9DD2E7FB99236B1AE9D058167B1681CB79EE4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:f7:7c:ff:d7:eb:8c:1d:ce:76:13:fe:3e:
                    2d:23:e2:e4:14:89:a3:0b:d3:fd:55:05:2d:fc:8e:
                    51:80:98:8e:4b:0f:eb:e4:ea:e6:4e:08:a9:50:39:
                    28:b6:d7:67:7e:0b:28:c0:10:eb:69:de:a7:99:6b:
                    a1:82:c9:dd:49:33:19:29:02:d7:30:38:e9:4b:21:
                    6d:46:d4:b0:3c:03:3e:12:50:67:9b:77:fb:a9:07:
                    b4:f2:cd:a7:b8:39:65:99:bc:a1:8d:94:69:ad:19:
                    fa:4b:48:62:ec:aa:0c:44:50:05:ca:ed:cb:8f:fe:
                    4b:13:cb:56:45:59:9f:e5:81:21:ed:04:4c:e9:b0:
                    f6:9f:e3:5c:bb:99:96:bb:c1:af:2f:44:13:72:a5:
                    01:2f:33:88:03:1a:97:d9:c9:f3:63:84:39:ca:43:
                    42:51:57:86:c2:50:8e:0d:66:3b:52:4b:d7:28:23:
                    88:fe:80:f6:79:b5:52:3d:ad:c3:a7:42:92:10:a8:
                    e8:8d:d5:3a:2d:61:1d:19:07:59:00:d5:3c:92:3c:
                    a4:00:54:6f:64:b8:3e:e2:0d:7d:6d:b3:f5:cc:c1:
                    e4:5c:a6:0b:a2:a6:26:e4:aa:b2:e1:61:ac:0b:e9:
                    4c:09:14:80:5d:d8:25:75:94:2c:45:5b:6f:ce:80:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DD:2E:7F:B9:92:36:B1:AE:9D:05:81:67:B1:68:1C:B7:9E:E4:CD
            X509v3 Authority Key Identifier:
                keyid:A8:10:80:07:55:93:D6:5A:04:DB:9F:C7:8C:AC:8C:A9:E1:EE:82:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A81080075593D65A04DB9FC78CAC8CA9E1EE8246.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/0/3136382e3230352e3232352e302f32342d3234203d3e20323634383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:62:99:25:20:e4:fd:0c:49:b7:60:73:50:09:a9:45:6c:
         46:cb:2a:74:68:81:81:23:10:b8:48:98:f2:78:cd:0a:8a:ae:
         a8:5f:1b:ea:3a:3d:31:9e:e8:96:06:7e:30:6e:07:37:ad:62:
         86:9d:d0:84:e2:90:ed:cd:4a:cc:ca:29:1a:0b:84:a1:dc:35:
         e1:11:3c:75:62:3e:9d:45:2a:d4:da:36:6c:a9:1e:e5:22:dd:
         84:b9:14:da:f4:6c:92:bb:b9:77:e6:9c:71:bb:55:d2:e7:f4:
         fa:46:e6:2b:3c:c6:f8:ce:c3:31:18:57:d0:9a:c3:b8:08:da:
         cd:37:9c:27:fe:e2:35:df:46:31:f2:87:16:41:e9:48:94:8c:
         94:60:5a:50:6a:b4:0a:05:cb:94:d8:c6:2b:15:ad:28:17:5f:
         cb:bc:06:21:5d:3f:da:a2:40:57:1c:1d:fd:ed:8e:35:d6:1b:
         12:bd:0e:72:c1:36:a4:94:32:26:f8:1d:89:7d:13:dc:19:3a:
         b6:ad:c2:67:77:d2:28:9e:12:8d:e9:a4:35:bb:24:38:95:2b:
         e5:c2:12:9c:e2:b6:66:58:2a:65:34:7d:88:55:cb:26:6e:e4:
         42:78:4a:67:33:c4:9d:5b:dc:a0:b9:98:15:cb:28:e1:f3:45:
         ee:fb:62:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:25 2025 by rpki-client