Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32332d3233203d3e203532383938.roa
File:                     3136382e3232372e3135362e302f32332d3233203d3e203532383938.roa (raw, json)
Hash identifier:          EasokTdUFBDNrzc3ALWg1UwENtcNGoKjvQFOamOtwaU=
Subject key identifier:   03:0A:2D:C2:4D:12:12:08:BC:91:F2:66:F3:4B:DA:F8:E8:12:91:53
Certificate issuer:       /CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
Certificate serial:       0DF4D11A083D6C459370B6D51EEE847CC4DCC6B9
Authority key identifier: B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32332d3233203d3e203532383938.roa
Signing time:             Thu 29 Aug 2024 14:51:00 +0000
ROA not before:           Thu 29 Aug 2024 14:46:00 +0000
ROA not after:            Thu 28 Aug 2025 14:51:00 +0000
asID:                     52898
IP address blocks:        168.227.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:d1:1a:08:3d:6c:45:93:70:b6:d5:1e:ee:84:7c:c4:dc:c6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9282FDD0A2B602C0F1723614F0309733B8C6B71
        Validity
            Not Before: Aug 29 14:46:00 2024 GMT
            Not After : Aug 28 14:51:00 2025 GMT
        Subject: CN=030A2DC24D121208BC91F266F34BDAF8E8129153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:93:e7:45:eb:81:c1:ce:0e:7f:c1:72:72:78:
                    a9:88:8f:a6:a3:e4:e4:5d:bc:27:4b:c9:70:ed:d5:
                    a3:8e:fe:c8:43:a7:8f:08:21:af:19:eb:ed:5c:fa:
                    c7:90:cc:cd:93:f9:c8:77:0b:a7:d1:0e:d4:69:33:
                    3f:9c:6b:af:bf:bb:aa:a7:ce:18:db:d7:cb:27:73:
                    22:44:34:77:0d:7b:33:a2:05:58:5a:b3:dc:26:dd:
                    08:49:a3:40:9c:26:47:21:7f:ef:5a:1e:01:c1:97:
                    0b:02:4e:92:73:4b:2c:ea:aa:08:65:0c:3f:f1:b4:
                    0f:04:ac:ed:1c:e1:b9:bb:3a:8d:1a:a6:97:84:04:
                    34:76:eb:3a:05:72:1b:35:7b:97:34:77:3a:fa:a6:
                    31:f4:2a:88:3d:20:e1:78:c3:ea:27:aa:3d:58:33:
                    84:42:e3:46:92:dc:a8:4a:de:77:af:9c:22:c8:ec:
                    b1:26:df:7f:96:da:ea:74:df:9f:f6:7b:16:01:86:
                    36:0b:1a:73:0c:73:0d:68:e7:82:0e:ec:78:f4:f9:
                    d1:40:cf:39:1d:9f:07:de:0b:45:51:f6:8e:e7:db:
                    77:fe:31:d9:57:b0:22:36:71:5d:e9:24:67:c3:b7:
                    c4:bf:9b:10:e4:bf:77:45:5d:88:3a:65:28:7b:6b:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0A:2D:C2:4D:12:12:08:BC:91:F2:66:F3:4B:DA:F8:E8:12:91:53
            X509v3 Authority Key Identifier:
                keyid:B9:28:2F:DD:0A:2B:60:2C:0F:17:23:61:4F:03:09:73:3B:8C:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/B9282FDD0A2B602C0F1723614F0309733B8C6B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9282FDD0A2B602C0F1723614F0309733B8C6B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32332d3233203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:26:be:84:e5:86:0c:bb:29:60:1f:8b:b5:dc:bc:94:85:
         93:ee:92:31:58:9c:5f:19:75:24:e5:d8:e0:a5:cb:52:2f:a9:
         77:6c:2f:a0:db:96:7c:99:0b:70:67:b0:b9:e9:fe:a0:d8:15:
         0c:aa:86:fa:bf:74:e7:a1:81:4d:ee:56:fe:9e:65:82:7e:ab:
         93:48:bd:20:1a:8c:ff:0f:0d:69:fc:46:79:b8:b0:92:a6:8a:
         9a:71:cc:83:1b:cb:20:88:41:c8:8c:58:31:db:b5:8c:f4:73:
         6c:c8:b0:a7:b8:60:8f:e9:9e:a6:e8:72:d6:88:85:49:5a:fa:
         01:6a:67:27:ca:95:98:b7:f6:49:d9:d6:bc:ff:be:c9:2b:da:
         1b:f1:be:c5:d8:63:f0:43:47:23:fb:c7:79:c5:88:7e:b1:ba:
         59:51:a1:12:6a:71:f0:01:4a:d3:cd:63:ab:9f:ef:3e:81:56:
         95:48:a5:98:44:fa:5b:28:9b:81:06:f5:1c:a4:2c:81:41:ca:
         13:f3:a8:f7:42:92:50:fb:04:a0:c0:ac:ff:d2:ad:79:d0:1c:
         9b:a5:a8:3b:d6:d4:b5:6c:c3:16:e5:81:00:53:ac:ae:bb:24:
         db:d1:4c:98:5d:87:1e:db:fe:ed:86:1b:a8:cf:8d:4b:c7:ba:
         9d:21:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:37 2025 by rpki-client