Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          mkKxy5uKJSAWWLOnwmTQrJX3mTge2dfLLAIAbK2Krww=
Subject key identifier:   CA:03:A7:A5:B2:32:15:61:63:E6:97:BE:9D:26:28:95:AF:86:CF:AA
Certificate issuer:       /CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
Certificate serial:       40C9FBDF154FBD091DDB67F19B148995D2A35FF2
Authority key identifier: 0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa
Signing time:             Mon 27 Dec 2021 18:05:08 +0000
ROA not before:           Mon 27 Dec 2021 18:00:08 +0000
ROA not after:            Mon 26 Dec 2022 18:05:08 +0000
asID:                     266353
IP address blocks:        170.239.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:fb:df:15:4f:bd:09:1d:db:67:f1:9b:14:89:95:d2:a3:5f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E568A521D9BB239CE1691093572B8FCA9B6DA87
        Validity
            Not Before: Dec 27 18:00:08 2021 GMT
            Not After : Dec 26 18:05:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:df:1b:13:a5:62:8f:74:ca:1f:45:36:0a:
                    93:1d:29:ab:ac:67:84:c3:ab:f6:d3:fe:1d:41:71:
                    c6:08:da:74:db:62:16:79:ba:dd:b9:f4:73:44:37:
                    2d:b0:de:53:56:15:52:dc:75:64:43:62:34:ad:96:
                    6a:70:ea:b5:73:d0:18:27:bd:35:68:64:9b:61:a1:
                    cd:2f:b9:1f:8a:7a:e2:de:3f:35:57:3a:f6:9c:85:
                    02:83:6b:74:20:46:20:ec:11:d3:d8:3e:b8:de:f6:
                    3f:12:02:a2:4a:8a:3e:a6:7d:28:fd:a1:f2:f0:53:
                    a8:81:05:df:89:fb:2c:d1:f9:7e:b9:44:06:4a:00:
                    b7:ff:9f:0e:8f:9e:3c:1d:cf:37:13:fd:e8:66:8f:
                    65:89:96:0a:54:68:62:e2:38:e4:cb:7e:01:5f:a3:
                    b1:ae:97:5e:ed:0d:26:53:3d:a7:55:0a:6c:85:05:
                    7c:04:b1:67:03:0c:57:3c:62:c0:bc:eb:d9:87:86:
                    7b:2a:78:e8:f4:95:dd:bd:29:17:df:d4:81:20:9e:
                    92:ac:ee:a8:71:c9:cd:28:37:79:60:10:60:1b:09:
                    41:ff:97:e7:91:a1:7d:63:a1:dd:e1:11:48:b6:c5:
                    ea:07:ef:82:61:90:46:a2:dc:b0:aa:e6:4b:aa:65:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:A7:A5:B2:32:15:61:63:E6:97:BE:9D:26:28:95:AF:86:CF:AA
            X509v3 Authority Key Identifier:
                keyid:0E:56:8A:52:1D:9B:B2:39:CE:16:91:09:35:72:B8:FC:A9:B6:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/0E568A521D9BB239CE1691093572B8FCA9B6DA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E568A521D9BB239CE1691093572B8FCA9B6DA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/1/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:cf:57:f5:2a:bb:32:d1:d6:23:bf:ca:1a:9b:68:34:80:
         3b:23:43:8c:1d:e6:a8:76:c9:ac:dd:de:ec:68:21:c9:d6:4f:
         6a:7d:2f:38:8c:0d:45:64:e8:42:86:48:55:a5:1d:0b:22:c0:
         3f:28:94:ed:80:df:ee:bf:b6:29:f1:57:2f:42:ff:4c:c8:7f:
         dd:af:44:4f:5e:fa:cb:e8:5e:5a:e3:9f:07:3b:c3:6f:60:a3:
         f1:c8:47:7c:49:8e:91:f0:5a:ad:16:c8:eb:45:ad:98:81:1b:
         80:cc:ba:df:f7:3c:8e:24:88:93:4e:88:de:21:f3:8f:33:5d:
         99:54:ea:3e:67:fa:56:35:c9:31:ed:70:14:c8:22:a3:42:42:
         4a:ef:bd:47:39:f6:20:ab:83:9d:7b:ac:0e:e8:32:71:00:f1:
         eb:f8:b0:ee:d5:02:17:08:03:9a:6c:16:ce:a4:d7:78:67:52:
         4b:d5:09:33:fe:e1:e0:12:49:a1:00:f3:49:ab:07:83:fe:71:
         fa:33:15:f0:75:4c:ab:73:eb:5a:43:50:a1:a6:c1:f0:07:7f:
         65:0a:10:9d:69:36:48:ee:f5:31:17:ca:de:73:29:6b:03:9e:
         63:54:5b:64:1b:29:5f:fa:a5:a2:91:85:ea:b6:33:4a:e3:59:
         6f:ad:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:32 2025 by rpki-client