Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          T5Finb3cuQxuj1hgmyeZAPGukxCXuFujvMdkO5qz2Qk=
Subject key identifier:   5F:87:4C:BD:51:E9:DA:64:B8:76:18:02:75:43:F9:9E:15:4D:D3:2B
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       35BFE0CDFAF85F526AE3D368EE442D28759D6347
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 14:00:00 +0000
ROA not before:           Mon 09 Oct 2023 13:55:00 +0000
ROA not after:            Wed 09 Oct 2024 14:00:00 +0000
asID:                     262494
IP address blocks:        168.205.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:e0:cd:fa:f8:5f:52:6a:e3:d3:68:ee:44:2d:28:75:9d:63:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 13:55:00 2023 GMT
            Not After : Oct  9 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:17:9a:8a:25:8d:84:eb:3c:15:2d:4f:36:
                    0d:09:03:07:51:54:c1:76:0b:7a:d9:0f:e0:29:4a:
                    2c:3d:c3:b7:f9:81:77:3a:cf:06:32:29:e0:eb:8f:
                    64:2b:05:ed:ee:a9:55:c1:6a:64:33:84:26:b3:d9:
                    8f:7f:54:4a:08:71:89:d9:45:6f:50:6c:6d:c5:cc:
                    40:3b:54:1b:9c:13:96:86:7f:1f:2e:67:69:ba:d4:
                    e9:1e:f3:d3:d1:26:f5:18:86:90:59:66:34:f3:a7:
                    31:e4:e5:4e:77:2f:0d:b1:6f:e6:d9:1f:16:2b:db:
                    cc:e2:53:fd:b1:3d:57:50:0f:7f:4a:52:c7:5e:16:
                    73:b0:8d:cb:a1:47:f5:56:51:d8:13:10:d4:97:cc:
                    5f:35:a2:f4:66:8a:1a:1f:f6:c6:bb:a9:29:4a:7b:
                    bd:fa:bf:13:bb:43:b4:fb:62:e8:9a:a1:fe:ac:18:
                    58:ef:61:74:6b:1e:de:9a:cc:38:02:ec:c4:5a:cd:
                    f1:30:96:1c:9d:25:8a:81:a6:9e:f1:59:32:bf:ae:
                    2a:16:c3:1c:63:7c:fe:c0:b9:15:8d:bf:76:91:43:
                    d5:f6:63:b7:e8:07:1b:fc:01:b9:13:e4:d4:82:2b:
                    2f:b2:eb:4c:03:76:e7:c5:b4:aa:41:3f:27:e0:eb:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:4C:BD:51:E9:DA:64:B8:76:18:02:75:43:F9:9E:15:4D:D3:2B
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:69:36:a6:2a:8f:ac:f7:ed:b7:fa:f7:61:29:1b:a7:8a:
         3c:f6:0f:df:95:2a:05:d4:58:66:2f:64:0b:99:03:16:8e:ce:
         9f:b9:42:d5:a3:83:fe:ab:05:85:72:b5:55:ed:27:65:d5:f7:
         ca:41:e7:04:5d:c2:6f:56:46:de:af:80:f7:ee:a5:02:ad:78:
         7d:cf:7f:0e:c1:45:41:9f:79:5d:ee:a0:17:7f:7d:a6:97:af:
         a1:55:33:52:4d:5d:71:09:76:86:bd:03:56:1d:0b:bd:4b:d7:
         95:31:2b:6b:54:e8:74:0a:ba:34:da:0c:ca:29:b7:07:8d:d4:
         3d:59:3a:5c:60:38:b6:7d:f9:ec:cf:3b:1c:be:7b:6c:ca:6c:
         84:52:db:7e:2f:42:91:ad:1f:55:84:64:05:c3:01:cd:2a:e1:
         f1:b2:e1:0e:a1:e6:82:e2:cf:c4:51:bb:77:0d:4d:b7:17:a5:
         5a:f9:68:c7:14:ce:02:0f:aa:b7:56:2f:0e:03:15:23:b9:19:
         e9:4d:30:10:b5:2a:8d:6c:66:5d:26:9b:38:2c:06:5a:e8:7f:
         f9:42:b2:ff:38:39:85:4c:0a:03:56:03:48:12:45:43:48:2a:
         9c:a4:ba:8a:d8:7c:54:33:ee:40:a7:10:ae:d3:ee:12:93:ad:
         e2:99:5a:82
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUNb/gzfr4X1Jq49No7kQtKHWdY0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzEwMDkxMzU1MDBaFw0yNDEwMDkxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ0MjE3OUE4QTI1OEQ4NEVC
M0MxNTJENEYzNjBEMDkwMzA3NTE1NEMxNzYwQjdBRDkwRkUwMjk0QTJDM0RDM0I3
Rjk4MTc3M0FDRjA2MzIyOUUwRUI4RjY0MkIwNUVERUVBOTU1QzE2QTY0MzM4NDI2
QjNEOThGN0Y1NDRBMDg3MTg5RDk0NTZGNTA2QzZEQzVDQzQwM0I1NDFCOUMxMzk2
ODY3RjFGMkU2NzY5QkFENEU5MUVGM0QzRDEyNkY1MTg4NjkwNTk2NjM0RjNBNzMx
RTRFNTRFNzcyRjBEQjE2RkU2RDkxRjE2MkJEQkNDRTI1M0ZEQjEzRDU3NTAwRjdG
NEE1MkM3NUUxNjczQjA4RENCQTE0N0Y1NTY1MUQ4MTMxMEQ0OTdDQzVGMzVBMkY0
NjY4QTFBMUZGNkM2QkJBOTI5NEE3QkJERkFCRjEzQkI0M0I0RkI2MkU4OUFBMUZF
QUMxODU4RUY2MTc0NkIxRURFOUFDQzM4MDJFQ0M0NUFDREYxMzA5NjFDOUQyNThB
ODFBNjlFRjE1OTMyQkZBRTJBMTZDMzFDNjM3Q0ZFQzBCOTE1OERCRjc2OTE0M0Q1
RjY2M0I3RTgwNzFCRkMwMUI5MTNFNEQ0ODIyQjJGQjJFQjRDMDM3NkU3QzVCNEFB
NDEzRjI3RTBFQjk1RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtEIXmooljYTrPBUtTzYNCQMHUVTBdgt62Q/gKUosPcO3+YF3Os8G
Ming649kKwXt7qlVwWpkM4Qms9mPf1RKCHGJ2UVvUGxtxcxAO1QbnBOWhn8fLmdp
utTpHvPT0Sb1GIaQWWY086cx5OVOdy8NsW/m2R8WK9vM4lP9sT1XUA9/SlLHXhZz
sI3LoUf1VlHYExDUl8xfNaL0ZooaH/bGu6kpSnu9+r8Tu0O0+2LomqH+rBhY72F0
ax7emsw4AuzEWs3xMJYcnSWKgaae8Vkyv64qFsMcY3z+wLkVjb92kUPV9mO36Acb
/AG5E+TUgisvsutMA3bnxbSqQT8n4OuV0QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FF+HTL1R6dpkuHYYAnVD+Z4VTdMrMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMxMzYzODJlMzIzMDM1MmUzMjM0
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKozfAwDQYJKoZIhvcNAQELBQADggEBAGNaaTamKo+s9+23+vdhKRunijz2D9+V
KgXUWGYvZAuZAxaOzp+5QtWjg/6rBYVytVXtJ2XV98pB5wRdwm9WRt6vgPfupQKt
eH3Pfw7BRUGfeV3uoBd/faaXr6FVM1JNXXEJdoa9A1YdC71L15UxK2tU6HQKujTa
DMoptweN1D1ZOlxgOLZ9+ezPOxy+e2zKbIRS234vQpGtH1WEZAXDAc0q4fGy4Q6h
5oLiz8RRu3cNTbcXpVr5aMcUzgIPqrdWLw4DFSO5GelNMBC1Ko1sZl0mmzgsBlro
f/lCsv84OYVMCgNWA0gSRUNIKpykuorYfFQz7kCnEK7T7hKTreKZWoI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:09:16 2025 by rpki-client