Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32332d3233203d3e20323635333131.roa
File:                     3136382e3132312e3131322e302f32332d3233203d3e20323635333131.roa (raw, json)
Hash identifier:          JZkwteNrqw+UNK0gqhCaC1fiZ0Dw1l71fI4vYMdsFeI=
Subject key identifier:   F3:BE:21:50:39:21:4A:33:96:65:0B:EC:C2:C4:30:60:82:5B:CA:8A
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       741BBAB6AABC964713205C583E1A51FE0CCCCC86
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32332d3233203d3e20323635333131.roa
Signing time:             Thu 06 Mar 2025 16:47:34 +0000
ROA not before:           Thu 06 Mar 2025 16:42:34 +0000
ROA not after:            Thu 05 Mar 2026 16:47:34 +0000
asID:                     265311
IP address blocks:        168.121.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1b:ba:b6:aa:bc:96:47:13:20:5c:58:3e:1a:51:fe:0c:cc:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Mar  6 16:42:34 2025 GMT
            Not After : Mar  5 16:47:34 2026 GMT
        Subject: CN=F3BE215039214A3396650BECC2C43060825BCA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:9a:6f:79:5a:76:55:57:26:6c:73:53:75:
                    c0:f5:27:8e:35:c0:2e:69:aa:ee:9d:87:18:26:20:
                    48:06:d4:34:f6:7d:e9:02:fd:f4:9f:27:f1:0e:33:
                    ff:6e:02:2f:55:7b:7c:e0:df:39:0a:00:8c:fa:86:
                    43:9b:19:52:cf:82:21:26:c0:62:8d:e7:d3:1a:f3:
                    40:72:16:44:c6:62:b3:02:46:e8:5b:dd:fe:dd:9e:
                    3a:68:b8:74:4d:44:17:cc:2f:be:ea:b7:e1:15:a9:
                    92:59:3a:b0:02:ba:af:e7:38:6f:81:52:b5:e1:96:
                    f2:c0:ce:9b:3f:0f:d0:db:26:5f:db:d5:7e:55:32:
                    54:d9:94:44:1f:aa:f8:3d:44:1d:d4:55:5d:60:de:
                    48:36:d1:11:e0:a9:9b:91:87:34:06:fb:4c:6a:5b:
                    ee:f9:18:76:46:c4:dc:1e:54:ca:31:49:aa:47:fb:
                    65:ca:5c:e1:f4:a0:5a:85:30:6d:1b:78:84:27:3a:
                    18:c3:06:2e:1a:3d:ea:05:12:ce:4c:43:e6:22:8d:
                    a1:44:8d:26:35:a5:df:aa:19:12:09:aa:9a:81:3f:
                    b0:03:ca:cd:7d:a5:d6:2f:f8:67:37:05:7f:00:40:
                    fe:57:6b:4b:2b:54:66:f2:99:31:c8:39:03:f7:e9:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BE:21:50:39:21:4A:33:96:65:0B:EC:C2:C4:30:60:82:5B:CA:8A
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131322e302f32332d3233203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:2d:eb:3b:bf:82:fd:fe:95:86:ba:73:a5:6b:29:2d:6f:
         bc:8e:b1:a2:01:28:48:57:c7:e6:7d:97:97:f2:ed:d7:95:50:
         b4:23:6c:95:ab:c3:ba:21:dd:6c:4f:4e:99:27:8a:0c:7d:88:
         3d:9b:a8:58:79:b8:d0:09:2f:6b:92:cf:cd:89:09:eb:8c:90:
         39:66:42:d5:6a:ea:f3:46:49:07:94:01:ae:9f:01:27:af:7e:
         d2:69:f4:9c:4a:ea:b6:1f:4f:38:57:d4:39:6d:8c:dd:96:45:
         c3:c4:68:83:97:48:f1:7c:3e:05:96:22:24:09:05:d7:7b:d5:
         37:c7:04:6a:90:bc:e5:ee:38:12:7b:67:6a:10:a0:39:9c:85:
         c9:fd:de:c8:2b:a8:8d:35:f4:ad:98:48:0f:01:aa:6d:b5:62:
         9f:67:bc:b7:c2:41:66:5b:c0:0f:79:a1:5a:d0:7f:16:c2:98:
         e5:d4:be:a9:03:b4:f2:0c:8f:ef:bc:8f:17:34:d5:e8:2a:31:
         47:4a:7c:53:d2:89:bc:43:9e:07:8d:c0:af:51:a2:1a:28:ce:
         72:e1:f2:6e:70:05:c5:67:a9:82:5e:65:0f:c2:9b:0b:1b:64:
         11:80:7b:2c:38:d9:49:55:84:ab:82:61:2b:dd:22:46:85:d9:
         42:1d:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:45 2025 by rpki-client