Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/32342e3135322e36382e302f32322d3234203d3e20323730343835.roa
File:                     32342e3135322e36382e302f32322d3234203d3e20323730343835.roa (raw, json)
Hash identifier:          LpoB01UwtzC66Uj/px9l3WxGLqyAk3/BNxgRBk6T5MY=
Subject key identifier:   C9:82:1B:DB:36:9E:73:8D:5F:23:47:3A:23:C4:30:41:61:58:FD:08
Certificate issuer:       /CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
Certificate serial:       66A0F63D468B1D73188E137C157052F31421EA0B
Authority key identifier: CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/32342e3135322e36382e302f32322d3234203d3e20323730343835.roa
Signing time:             Thu 04 Apr 2024 19:00:00 +0000
ROA not before:           Thu 04 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270485
IP address blocks:        24.152.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a0:f6:3d:46:8b:1d:73:18:8e:13:7c:15:70:52:f3:14:21:ea:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
        Validity
            Not Before: Apr  4 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100D5CB7FCF10A84245A4B05F8734B9C016F69CC4BDE24074E6DA54918474510342F8FC26A371AF9CC6FED3E7FB12E74B0BEBF0E442F4D3830194C583C2A99DCB9AF4AA422FDB5BBADDA5C9C7F60D6D25A0E7D82C3DE238BE93E018540989F6BFE166E070B6FC5DACB005EBB647294A43D64DB0339BB8C005D80F138EF536FD18329CB10E6512D50A74C533E47B4BAC879DF0F47BB51EC005F8BBC8115FF41D50294CC80D7661530C84CD6AA7E9FCD42F406902077DAF44811390B87D4D57868831D1994F3004DD3775D2057576CAFFE7B32ECC098AE4B37658C8A81F734414D49A9A86E0E4F7FBC92C4BD5AD652800927C41FD0B14E2064CE0F3DA9DADADA00A3B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:7f:cf:10:a8:42:45:a4:b0:5f:87:34:b9:
                    c0:16:f6:9c:c4:bd:e2:40:74:e6:da:54:91:84:74:
                    51:03:42:f8:fc:26:a3:71:af:9c:c6:fe:d3:e7:fb:
                    12:e7:4b:0b:eb:f0:e4:42:f4:d3:83:01:94:c5:83:
                    c2:a9:9d:cb:9a:f4:aa:42:2f:db:5b:ba:dd:a5:c9:
                    c7:f6:0d:6d:25:a0:e7:d8:2c:3d:e2:38:be:93:e0:
                    18:54:09:89:f6:bf:e1:66:e0:70:b6:fc:5d:ac:b0:
                    05:eb:b6:47:29:4a:43:d6:4d:b0:33:9b:b8:c0:05:
                    d8:0f:13:8e:f5:36:fd:18:32:9c:b1:0e:65:12:d5:
                    0a:74:c5:33:e4:7b:4b:ac:87:9d:f0:f4:7b:b5:1e:
                    c0:05:f8:bb:c8:11:5f:f4:1d:50:29:4c:c8:0d:76:
                    61:53:0c:84:cd:6a:a7:e9:fc:d4:2f:40:69:02:07:
                    7d:af:44:81:13:90:b8:7d:4d:57:86:88:31:d1:99:
                    4f:30:04:dd:37:75:d2:05:75:76:ca:ff:e7:b3:2e:
                    cc:09:8a:e4:b3:76:58:c8:a8:1f:73:44:14:d4:9a:
                    9a:86:e0:e4:f7:fb:c9:2c:4b:d5:ad:65:28:00:92:
                    7c:41:fd:0b:14:e2:06:4c:e0:f3:da:9d:ad:ad:a0:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:82:1B:DB:36:9E:73:8D:5F:23:47:3A:23:C4:30:41:61:58:FD:08
            X509v3 Authority Key Identifier:
                keyid:CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/32342e3135322e36382e302f32322d3234203d3e20323730343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:a8:8c:b4:8e:e1:ac:f8:65:5a:09:de:82:c0:5c:62:1f:
         6b:b8:78:14:ed:e4:c6:8c:c5:36:f4:2b:08:e6:22:bd:83:f9:
         3f:ad:40:a2:e4:19:f8:a6:33:84:91:70:de:2d:3f:a3:4e:44:
         48:61:b8:8e:91:d0:87:00:43:e1:08:19:44:60:18:31:ac:39:
         1e:dc:f6:eb:bd:f8:a8:22:8d:f3:39:80:9a:16:03:a3:93:fb:
         60:a8:f5:d2:8c:2c:a5:40:ea:eb:33:3c:9e:12:3e:e8:49:0b:
         0b:8a:c4:71:16:73:a4:f6:1c:1a:c4:fd:20:3f:ea:9b:e0:31:
         c5:a0:0b:04:cb:dd:47:c1:25:1d:c6:99:27:3b:45:4a:dc:a7:
         c8:88:7d:76:1e:86:c4:ad:bc:a5:bd:0f:95:04:47:9e:dd:df:
         ab:90:87:6d:5a:a1:da:52:f6:7c:95:e4:c1:7d:2a:1b:41:5e:
         6e:45:dc:b9:36:56:09:57:12:8c:5a:26:e9:3a:55:08:89:23:
         b0:92:2b:26:ab:61:0e:99:9e:8b:0a:f3:92:d3:0e:fd:71:c3:
         79:ca:1c:7a:59:fe:33:04:29:d7:50:bd:da:e2:be:4b:ec:35:
         71:7f:fe:53:57:75:95:b2:82:b2:c4:8b:c5:c3:57:d6:83:cc:
         b6:04:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:14 2025 by rpki-client