Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135372e302f32342d3234203d3e203533313831.roa
File:                     3136382e3232372e3135372e302f32342d3234203d3e203533313831.roa (raw, json)
Hash identifier:          lg0EktH2VFNx8+9xfAlVezumFl+x+RNadPYOIdtS/PE=
Subject key identifier:   72:A7:75:0A:D1:E3:B2:9B:B1:90:58:59:03:8E:6E:F0:28:CF:CE:04
Certificate issuer:       /CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
Certificate serial:       394617972358E56FEC2F8E02D55811F58AF9CB2B
Authority key identifier: 56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135372e302f32342d3234203d3e203533313831.roa
Signing time:             Mon 06 Nov 2023 01:44:56 +0000
ROA not before:           Mon 06 Nov 2023 01:39:56 +0000
ROA not after:            Mon 04 Nov 2024 01:44:56 +0000
asID:                     53181
IP address blocks:        168.227.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:17:97:23:58:e5:6f:ec:2f:8e:02:d5:58:11:f5:8a:f9:cb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
        Validity
            Not Before: Nov  6 01:39:56 2023 GMT
            Not After : Nov  4 01:44:56 2024 GMT
        Subject: CN=72A7750AD1E3B29BB1905859038E6EF028CFCE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:df:1e:d6:ee:a6:0c:86:26:01:02:71:13:
                    cc:88:8e:70:e7:ac:e3:38:a5:c2:ef:2e:2f:4e:e3:
                    fe:73:22:27:93:34:29:96:54:0f:13:2f:3d:03:95:
                    a9:f6:11:68:bb:b4:b8:c8:0a:1c:b6:71:a5:d2:5d:
                    e6:53:82:70:01:aa:25:ae:85:36:4c:43:6e:97:3f:
                    69:e3:b5:8f:52:40:ba:cf:9d:c7:d1:ee:f1:85:f1:
                    38:4f:80:7b:3d:50:6d:43:01:aa:7c:e1:11:b4:eb:
                    b2:95:8b:63:b3:91:17:2b:96:fa:d7:b0:56:ee:bd:
                    49:1c:4f:58:0b:37:3d:16:4e:c4:45:65:b8:94:dd:
                    5d:ea:a3:cd:b6:be:4b:ef:79:30:a2:8a:f3:14:de:
                    81:38:c7:33:0b:ce:d2:0b:83:63:38:4d:d3:0f:ca:
                    84:dc:86:c1:a2:74:18:87:b2:1b:78:4c:0f:e9:01:
                    b7:15:d3:a5:80:e7:0f:a4:54:50:1d:99:50:44:b0:
                    3b:f6:87:62:20:60:e2:c5:21:eb:54:92:e8:1a:e4:
                    5c:5a:10:bb:07:b5:87:5d:df:5b:b1:bf:11:51:26:
                    c8:25:79:5f:a4:db:02:a7:0a:69:73:29:66:e9:39:
                    cb:8f:e6:5b:77:9c:e3:48:36:7e:65:93:ce:bc:54:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:75:0A:D1:E3:B2:9B:B1:90:58:59:03:8E:6E:F0:28:CF:CE:04
            X509v3 Authority Key Identifier:
                keyid:56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135372e302f32342d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:44:63:f9:f9:66:e9:cb:ed:1c:2b:97:1b:78:4b:19:f8:44:
         9a:67:67:6a:bc:eb:69:fe:77:80:aa:2e:27:36:b0:96:53:e3:
         a9:2d:6a:78:fe:66:34:d4:e2:d9:24:0a:21:cf:0a:e7:07:9a:
         05:dd:d0:2f:5c:23:03:10:88:5a:da:bf:b5:b0:46:83:b3:5d:
         f6:b1:b3:13:9b:46:06:3a:af:83:48:a2:f6:de:75:8f:11:a6:
         87:cf:55:e5:c0:47:7c:40:73:5f:fd:6d:d2:c1:f5:9b:2a:31:
         54:ab:c1:33:00:ea:8a:0d:aa:34:98:ce:95:93:ea:f3:be:bc:
         0c:2c:91:53:ce:a4:86:43:77:d8:19:8e:90:0a:f7:bc:c7:99:
         b1:da:b3:25:54:bf:62:d8:02:db:d8:cc:78:e1:9f:76:0e:2f:
         89:1e:66:94:b0:bf:28:c4:0b:eb:78:54:8a:5e:80:ff:0d:4b:
         22:00:0b:15:64:71:4f:27:04:02:53:27:d9:fe:59:f2:8b:6d:
         00:50:16:66:25:91:19:05:34:86:e0:14:cb:1e:1c:17:f7:88:
         3b:36:89:78:19:25:99:32:04:dd:40:0d:8f:10:33:27:1a:43:
         8c:5c:f7:50:54:4a:66:bc:f4:7a:b9:cb:37:ec:ae:b1:61:18:
         17:cc:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:50 2025 by rpki-client