Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa
File:                     3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa (raw, json)
Hash identifier:          cXEX+Jm6YQgpJXNPO5wcta8r4xYzmcUCqrnxL1Er9s4=
Subject key identifier:   73:CD:66:EC:96:CD:4C:38:AA:30:51:80:C8:45:1F:9E:69:20:B0:B6
Certificate issuer:       /CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Certificate serial:       68458A038BB78ADD73B6918391B5964DBA4EA50B
Authority key identifier: 78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa
Signing time:             Wed 21 Feb 2024 19:46:21 +0000
ROA not before:           Wed 21 Feb 2024 19:41:21 +0000
ROA not after:            Wed 19 Feb 2025 19:46:21 +0000
asID:                     265935
IP address blocks:        164.163.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:45:8a:03:8b:b7:8a:dd:73:b6:91:83:91:b5:96:4d:ba:4e:a5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
        Validity
            Not Before: Feb 21 19:41:21 2024 GMT
            Not After : Feb 19 19:46:21 2025 GMT
        Subject: CN=73CD66EC96CD4C38AA305180C8451F9E6920B0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:b5:9d:6b:d3:c8:bc:c3:79:a1:06:69:9a:
                    98:60:f7:5c:fc:d4:de:3f:67:f4:5e:74:50:76:7b:
                    cf:fe:ea:64:94:eb:c9:21:72:77:d3:aa:d5:fc:52:
                    6b:c3:96:b0:d8:98:d5:8d:64:23:ec:2e:e2:f4:d0:
                    34:2f:b9:6e:67:cb:d2:06:9e:ba:a4:50:a6:d0:06:
                    25:c6:f0:5b:6a:5d:a0:01:d7:95:d8:4a:d3:2d:91:
                    a5:47:69:5f:5b:66:9b:af:bc:a1:d3:1c:ef:55:97:
                    80:0f:48:4d:75:65:77:4e:29:16:fe:6c:01:2d:c9:
                    47:7c:39:ba:8b:70:1f:7e:ae:4f:f1:6a:ef:2a:14:
                    64:8c:29:43:92:7a:10:39:2c:ae:82:0a:9a:7c:e9:
                    3f:2e:20:41:ed:d8:ba:5f:4c:ce:bf:32:f3:a3:9b:
                    f2:8e:34:01:25:4b:d9:5a:2f:b7:84:28:3d:cf:4d:
                    02:f5:4b:06:b6:25:fc:f5:57:76:66:2b:77:30:91:
                    b8:ac:6b:db:00:a1:7b:cf:94:dd:0b:fd:c0:ed:58:
                    2e:8c:f4:93:fa:9c:4e:f5:e1:d7:56:f8:a7:5a:c0:
                    59:e6:7a:91:54:2f:49:f6:b6:48:c7:44:4e:0d:90:
                    14:da:1f:b2:15:8e:18:21:f0:e1:d2:4b:59:93:ae:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:66:EC:96:CD:4C:38:AA:30:51:80:C8:45:1F:9E:69:20:B0:B6
            X509v3 Authority Key Identifier:
                keyid:78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:f4:02:15:bf:27:bb:ff:e6:f4:c5:18:cf:a3:ab:77:4c:
         99:2e:8e:dd:e6:9a:e8:d0:c3:7c:b3:cf:61:af:88:93:1a:49:
         ac:96:c1:94:fd:e3:f0:a0:08:f2:e2:88:55:d5:ce:24:e4:ac:
         53:a4:73:f6:11:44:60:6b:ee:4d:c7:7e:30:0a:63:b1:c2:36:
         b8:62:58:06:4f:89:45:9c:8e:8f:c8:cd:54:fa:05:1f:0f:a2:
         40:94:93:06:61:85:53:37:64:d3:1a:5e:e4:cf:7d:f8:8a:8e:
         88:e9:b1:40:d4:17:93:96:c3:d5:61:5b:b7:a4:9b:41:56:a5:
         c0:ec:9c:bd:d1:85:fd:f6:39:c6:5b:6a:e2:47:d6:6d:b7:cf:
         3f:5a:71:02:7c:0f:91:3c:6d:a1:51:ee:8a:ba:54:05:99:de:
         ff:d2:55:6a:91:12:49:98:91:bf:87:69:f8:32:26:6b:fa:fb:
         b6:2c:d7:58:14:5b:ab:78:a2:e1:5d:37:f7:c1:40:6c:22:fa:
         5e:7d:23:d9:5d:cf:41:59:6f:32:49:61:5b:8e:27:83:16:5a:
         bf:f5:09:16:92:25:14:fb:3c:1f:e0:28:94:04:a4:9d:85:f2:
         ba:ef:a6:29:42:31:5c:43:95:8c:60:a0:34:55:38:e7:95:3d:
         79:3a:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:14 2025 by rpki-client