Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131362e302f32322d3232203d3e20323634393130.roa
File:                     3136382e3232372e3131362e302f32322d3232203d3e20323634393130.roa (raw, json)
Hash identifier:          G7Gp9Zr9NBZSUboRd/5BfYOB6Uz5JzkcsFaf0AgOwio=
Subject key identifier:   46:DD:47:E9:92:E0:0D:F4:B3:77:17:58:32:8F:EB:C1:85:AE:4F:7C
Certificate issuer:       /CN=100D641D9246825DB5F200B9152379E6B866AE90
Certificate serial:       5290119DDA16705A3C8CE88DF5D0A2CC17180D31
Authority key identifier: 10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131362e302f32322d3232203d3e20323634393130.roa
Signing time:             Sat 13 May 2023 19:16:31 +0000
ROA not before:           Sat 13 May 2023 19:11:31 +0000
ROA not after:            Sat 11 May 2024 19:16:31 +0000
asID:                     264910
IP address blocks:        168.227.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:90:11:9d:da:16:70:5a:3c:8c:e8:8d:f5:d0:a2:cc:17:18:0d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100D641D9246825DB5F200B9152379E6B866AE90
        Validity
            Not Before: May 13 19:11:31 2023 GMT
            Not After : May 11 19:16:31 2024 GMT
        Subject: CN=46DD47E992E00DF4B3771758328FEBC185AE4F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:f1:e6:d1:ca:f4:ea:e4:ed:50:c7:f6:3b:
                    86:8c:c1:42:4f:93:5c:2f:67:5f:00:0c:c7:98:35:
                    31:7c:21:3d:34:76:ee:3e:51:e5:53:94:37:00:89:
                    eb:ee:2f:79:42:cb:f8:f0:fa:13:86:58:ee:6d:f9:
                    b1:1a:e6:89:76:ff:79:15:7b:fc:53:8f:15:0b:2c:
                    9f:83:ff:de:8a:8e:cb:06:f2:31:27:68:2b:08:94:
                    51:9e:10:ef:bb:fe:d0:30:5a:33:8b:5f:15:6f:7d:
                    bc:b3:fa:fe:99:bc:73:be:79:8d:8b:87:1f:df:4a:
                    78:0e:c5:a1:1d:3a:18:6a:8a:12:17:92:7d:69:d2:
                    cd:e8:06:c7:ab:25:ee:03:60:20:76:87:b4:86:56:
                    b7:4b:2b:97:17:f5:57:ec:8a:2e:d7:82:0e:b9:a0:
                    8b:63:9c:21:67:c9:b5:69:6f:18:e7:82:4a:0a:e0:
                    14:9b:81:01:fa:4b:6a:e5:26:7a:92:bd:07:77:40:
                    64:b2:3b:1d:55:01:95:96:d5:33:8d:a7:cc:0a:16:
                    3b:4a:22:98:92:5c:e5:d9:0f:ac:59:1d:a9:85:eb:
                    8e:aa:11:1c:7d:9d:be:71:c6:2f:6d:da:0a:62:c4:
                    95:e5:c1:50:b3:cb:2a:a5:47:fd:ab:61:32:9d:fe:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:47:E9:92:E0:0D:F4:B3:77:17:58:32:8F:EB:C1:85:AE:4F:7C
            X509v3 Authority Key Identifier:
                keyid:10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131362e302f32322d3232203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:16:7e:0d:f8:47:f2:2a:54:1a:9f:c2:5a:92:e5:3b:c7:
         77:fd:73:c8:d8:c3:cc:75:8e:6b:5f:31:ec:9b:b0:de:89:6a:
         51:50:87:7b:a9:e2:d5:ee:12:62:7c:7a:77:90:02:4a:96:6f:
         e9:3c:12:ca:b0:40:b4:a9:fd:d1:c9:c4:69:f8:64:8b:4f:70:
         d9:b9:20:e5:fe:36:e9:28:34:83:8a:e9:0c:09:26:0e:d1:d3:
         18:cd:3b:6f:23:86:78:bd:d0:28:da:7b:ef:ac:c0:ae:74:e2:
         16:dc:c2:45:ba:be:b5:fc:22:ed:e4:1c:07:98:ef:fb:45:31:
         4f:bb:31:62:24:20:f1:ef:ff:3c:97:e7:dd:24:7d:ad:f8:11:
         11:70:6f:70:c9:0e:01:d6:d8:88:7d:0b:d5:d7:e5:74:7d:5c:
         6f:71:ee:19:85:3b:c1:29:3b:e8:1f:cf:a4:8c:1f:63:fe:62:
         0b:6e:97:3d:c1:60:16:ee:84:f9:cc:17:1c:9f:88:5f:d1:6b:
         55:0b:fb:06:56:4b:60:eb:7b:3d:df:c1:50:5a:3f:65:40:05:
         aa:b1:e9:18:a2:74:2d:a6:a3:49:95:49:41:e8:c4:3c:97:2d:
         39:3b:23:8f:e2:e2:52:51:2e:19:83:dc:86:c3:8a:d0:ff:2c:
         ea:8c:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:42 2025 by rpki-client