Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32342d3234203d3e20323634383634.roa
File:                     3136382e3230352e3136382e302f32342d3234203d3e20323634383634.roa (raw, json)
Hash identifier:          t5l/6Mzny5JqxniJxhsGQF219CDEqIwKnRW4KQ28/6c=
Subject key identifier:   87:9A:C9:FC:45:5E:94:58:7E:35:5C:85:80:31:22:D0:31:71:7F:A1
Certificate issuer:       /CN=196672F2128DCF75573CC0EC85F8A0F5B9D7784E
Certificate serial:       2D6DAD2B6567B3C5FA3B0ED7C1920DE9B811FBAD
Authority key identifier: 19:66:72:F2:12:8D:CF:75:57:3C:C0:EC:85:F8:A0:F5:B9:D7:78:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/196672F2128DCF75573CC0EC85F8A0F5B9D7784E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32342d3234203d3e20323634383634.roa
Signing time:             Mon 10 Oct 2022 15:06:42 +0000
ROA not before:           Mon 10 Oct 2022 15:01:42 +0000
ROA not after:            Mon 09 Oct 2023 15:06:42 +0000
asID:                     264864
IP address blocks:        168.205.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6d:ad:2b:65:67:b3:c5:fa:3b:0e:d7:c1:92:0d:e9:b8:11:fb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196672F2128DCF75573CC0EC85F8A0F5B9D7784E
        Validity
            Not Before: Oct 10 15:01:42 2022 GMT
            Not After : Oct  9 15:06:42 2023 GMT
        Subject: CN=879AC9FC455E94587E355C85803122D031717FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:48:75:d2:d3:ea:51:90:20:8e:28:11:b5:
                    80:87:ac:f0:50:62:a3:d9:72:2c:ef:6f:04:c4:31:
                    de:36:67:fd:99:1b:de:29:67:d1:fe:0b:0d:e8:85:
                    f3:52:bd:76:c5:3e:7f:29:16:44:5c:d4:48:89:2b:
                    26:f8:35:9a:e6:7a:5b:ef:6d:f7:32:f5:ec:f1:32:
                    77:65:33:82:cc:28:e3:6a:87:ed:01:29:a7:96:f3:
                    72:4f:f5:90:c6:47:1a:f6:c3:c2:5a:e9:22:97:63:
                    b8:5a:d5:28:fc:35:65:5a:4f:9d:dc:e5:9e:08:b5:
                    3a:7b:e9:3e:92:c1:33:ed:e2:a7:d2:f8:20:05:c5:
                    49:c8:4a:6d:3a:9c:9b:ea:08:bf:5a:93:37:fc:61:
                    53:9c:05:fd:8a:77:6f:ee:9d:f7:d8:28:b3:78:cf:
                    8b:36:43:21:ec:e0:96:7b:19:f2:5c:62:76:d6:bd:
                    73:e2:b4:27:54:3c:f5:96:60:9f:ee:ed:54:67:7d:
                    5f:4a:70:ca:45:08:27:48:d3:b8:73:07:78:f5:b8:
                    2b:71:5a:f3:31:46:cd:d7:e5:73:78:fb:1e:d2:53:
                    86:83:b7:25:01:2b:e5:8b:24:a6:78:a3:c6:57:7c:
                    ef:80:cc:11:a6:52:7b:a3:11:cd:d8:30:13:30:0b:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9A:C9:FC:45:5E:94:58:7E:35:5C:85:80:31:22:D0:31:71:7F:A1
            X509v3 Authority Key Identifier:
                keyid:19:66:72:F2:12:8D:CF:75:57:3C:C0:EC:85:F8:A0:F5:B9:D7:78:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/196672F2128DCF75573CC0EC85F8A0F5B9D7784E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/196672F2128DCF75573CC0EC85F8A0F5B9D7784E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32342d3234203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c3:59:23:f6:57:cd:59:68:a4:87:a7:45:97:7b:a0:d4:c9:
         49:8c:72:7e:48:52:25:eb:29:32:92:e5:90:88:5b:30:31:e2:
         c1:56:68:83:e5:cf:f8:16:db:ed:d9:0b:43:4d:d8:0c:a9:f3:
         c1:13:76:88:83:25:78:57:c5:f7:e3:69:3e:ba:fd:46:ca:a0:
         79:33:6b:f7:32:d8:f2:17:70:9d:05:a7:d3:d2:55:89:76:b7:
         2f:86:6b:2a:f3:69:fb:b7:38:01:fc:8b:64:83:9e:c6:ff:e3:
         17:48:43:68:7d:a2:fc:ab:02:b9:6b:d1:ff:83:bf:0e:08:6d:
         19:93:0f:a5:20:23:36:a9:ab:9e:0d:02:25:6c:ee:fe:18:61:
         00:aa:64:11:77:06:07:6b:1d:b5:4c:81:5c:04:87:43:b1:f2:
         7c:45:bf:69:b0:a5:51:82:ca:99:07:5c:01:11:f4:9a:f8:b7:
         6a:0b:be:3a:8f:a3:38:9b:62:95:4c:b3:27:59:08:67:f1:ca:
         d1:cd:8c:d5:1a:42:42:27:55:8a:ce:89:47:3e:6b:6e:10:88:
         8e:2d:f0:94:09:d7:fb:b5:e5:8f:1d:81:6c:d2:c8:e2:fa:81:
         a8:b2:b7:41:cb:0d:35:09:aa:2e:4c:93:a6:04:ca:ef:e1:d3:
         bc:4e:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:13:19 2025 by rpki-client