Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa
File:                     3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          8I0gMDxBtosdKzpSeJxTLu+CYOuH8H834XI+rYaTMGw=
Subject key identifier:   C6:40:C8:37:36:6B:75:E3:E1:D8:54:C4:32:8C:6D:80:A1:D3:F2:75
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       48E72E63E0FA725D046AE892C0ADA7410FF0A269
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 26 Mar 2025 14:49:37 +0000
ROA not before:           Wed 26 Mar 2025 14:44:37 +0000
ROA not after:            Wed 25 Mar 2026 14:49:37 +0000
asID:                     61684
IP address blocks:        168.228.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e7:2e:63:e0:fa:72:5d:04:6a:e8:92:c0:ad:a7:41:0f:f0:a2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Mar 26 14:44:37 2025 GMT
            Not After : Mar 25 14:49:37 2026 GMT
        Subject: CN=C640C837366B75E3E1D854C4328C6D80A1D3F275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:d9:bc:0f:b0:04:61:47:26:a7:7e:f3:ca:
                    6d:c4:0d:98:81:07:19:25:cb:6f:a9:b8:80:62:13:
                    f5:61:3d:70:2b:dd:46:c8:cd:7d:e9:fa:b1:32:7f:
                    3c:dc:62:e5:1e:cf:c1:2d:bc:e8:ab:84:22:18:f5:
                    3e:c9:ce:76:9f:58:57:63:f2:85:68:11:45:83:73:
                    a7:03:87:15:c0:bd:ab:c3:52:c9:c0:74:c3:a9:83:
                    05:fc:ce:61:1d:3c:f1:0c:c6:94:bd:23:f1:3a:a1:
                    f4:c5:86:25:b9:2b:12:02:37:ac:dc:04:85:41:2c:
                    c5:20:39:cc:cd:bc:f1:a4:ef:9b:f0:ff:e5:8e:2b:
                    5d:bd:59:b5:fc:a5:ab:04:2d:cf:81:4d:fd:f9:80:
                    10:47:17:ba:a3:6d:48:83:c2:ee:2b:f7:c6:2d:d7:
                    7b:17:c1:19:b6:c4:09:0c:3b:30:53:d6:14:b9:03:
                    90:28:f5:67:ec:98:de:b2:c7:28:ee:2f:d9:20:4e:
                    9b:06:6a:7a:8b:61:59:5b:06:ba:66:b3:97:f8:81:
                    6f:a8:1d:17:a8:fc:8a:b4:26:c6:5a:76:1a:44:71:
                    c6:01:70:41:f9:ed:34:ac:e2:14:c2:bb:22:99:93:
                    51:d8:e7:cd:98:ac:8e:4f:2b:71:d9:55:d6:ca:bf:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:40:C8:37:36:6B:75:E3:E1:D8:54:C4:32:8C:6D:80:A1:D3:F2:75
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1d:6d:f5:40:7e:3c:5f:c2:2e:11:e4:4f:c5:98:36:7d:b1:
         80:0f:de:3a:52:f7:aa:dc:fc:f0:ed:42:19:0f:ce:8b:56:cf:
         b8:2a:6d:13:4f:7c:aa:9e:68:24:40:2b:cb:be:42:ec:c8:a2:
         7a:a7:7b:5a:da:f5:de:8a:4e:68:3f:88:dd:af:c5:ee:99:9d:
         f6:08:56:ea:42:04:ea:72:0f:76:53:5c:42:95:43:ad:fc:14:
         ed:d9:92:ac:88:38:4d:cf:c8:76:bf:11:f0:aa:0a:02:cb:e7:
         59:ea:c7:a4:44:99:a9:91:59:c1:3a:2c:3c:a7:26:e1:98:f0:
         fd:87:ef:3e:f7:f7:2b:b8:58:63:96:6c:8a:7c:0d:a3:45:b6:
         be:ff:0e:77:7f:c5:08:3a:33:23:5a:f7:35:79:64:a0:ac:bd:
         9a:b6:d7:85:ae:2d:73:dd:68:02:fb:3c:2a:0d:47:74:f1:8a:
         c0:dd:0a:c9:f3:78:69:ed:5a:04:93:0f:1e:57:af:40:be:9f:
         f9:19:c7:85:5f:f8:f5:67:65:cd:e5:46:11:cf:87:dd:3c:29:
         ce:8a:9a:c5:2d:e6:2f:ff:37:01:05:45:96:9e:d2:5d:ac:75:
         ad:91:ee:b3:af:a2:45:d4:94:64:78:a1:7b:e0:10:d2:6b:4f:
         9d:78:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:11:01 2025 by rpki-client