Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa
File:                     3138372e37332e3136302e302f32302d3234203d3e203238363534.roa (raw, json)
Hash identifier:          b4NHyCWVZjTfIPHAEG+OcuIHnDnhKVT0U0iSyC1ybvo=
Subject key identifier:   CE:DB:DE:E2:5B:D3:5C:5F:72:E2:F5:A4:66:CF:76:0E:01:E2:EE:14
Certificate issuer:       /CN=6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13
Certificate serial:       3F3E7E95D312A5D60314232B80665F184FD2D741
Authority key identifier: 6A:23:CA:B2:BE:FE:4D:19:6A:27:73:07:FF:D8:F5:BF:1D:E7:2C:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa
Signing time:             Thu 27 Feb 2025 23:11:31 +0000
ROA not before:           Thu 27 Feb 2025 23:06:31 +0000
ROA not after:            Thu 26 Feb 2026 23:11:31 +0000
asID:                     28654
IP address blocks:        187.73.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3e:7e:95:d3:12:a5:d6:03:14:23:2b:80:66:5f:18:4f:d2:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13
        Validity
            Not Before: Feb 27 23:06:31 2025 GMT
            Not After : Feb 26 23:11:31 2026 GMT
        Subject: CN=CEDBDEE25BD35C5F72E2F5A466CF760E01E2EE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:92:e1:47:44:a3:0a:50:74:8b:31:79:2c:
                    62:6d:fd:31:4e:90:9b:df:be:90:88:63:d5:79:fb:
                    39:6d:68:ca:23:2e:68:db:54:0f:24:90:47:f8:8f:
                    bc:0f:2d:ad:ef:40:b8:f6:60:05:a2:86:02:44:9c:
                    a6:d3:78:41:83:57:d2:00:5e:ed:05:19:c0:5e:6d:
                    c1:b4:4a:6c:ca:19:36:b2:d5:23:a2:d8:d5:6b:c8:
                    98:27:df:ed:a9:27:b8:46:33:8a:73:a4:dd:c5:b7:
                    78:0a:83:50:e8:0f:60:b9:29:59:0b:a7:00:03:87:
                    3b:eb:89:e3:79:86:a1:08:37:d1:03:b0:98:be:fb:
                    fb:07:db:7c:61:95:99:e3:3c:6e:71:3e:a8:f9:53:
                    f2:98:5a:8b:8d:68:f8:af:4b:19:b6:d5:94:3b:8f:
                    7e:94:0e:6f:15:4d:ee:5e:b3:88:77:f9:54:b3:2b:
                    21:2a:44:12:bc:1f:92:e2:31:71:be:ee:a9:e6:7f:
                    ed:40:2a:a3:06:9e:04:3b:39:39:6d:7b:c1:31:02:
                    d1:57:13:4c:fd:83:76:8c:64:e4:18:59:86:0d:4e:
                    62:f9:19:53:e2:b5:ee:cb:6b:c7:c7:44:d7:2c:0b:
                    1b:31:68:2a:45:83:16:c0:b6:b6:a7:6b:0c:32:9a:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:DE:E2:5B:D3:5C:5F:72:E2:F5:A4:66:CF:76:0E:01:E2:EE:14
            X509v3 Authority Key Identifier:
                keyid:6A:23:CA:B2:BE:FE:4D:19:6A:27:73:07:FF:D8:F5:BF:1D:E7:2C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:81:68:18:83:12:64:40:e4:38:7b:d6:02:a4:ab:b0:6d:
         24:a3:14:f3:9c:24:9e:eb:34:80:bf:ba:40:e6:e4:ea:68:72:
         a3:9a:35:9a:d8:af:46:8c:8c:72:c7:54:61:d9:e3:11:88:ac:
         6a:7f:90:8a:9d:1c:14:d2:20:fe:88:9f:50:b2:ea:0e:c5:e9:
         38:7c:31:5d:88:f4:4e:f4:7e:c4:7b:07:1d:f5:c4:c3:86:42:
         f5:cb:a7:d5:90:d7:a8:f1:7c:83:ae:ec:d2:15:dd:53:7d:aa:
         2a:ad:a0:79:0c:79:01:77:a4:2a:c3:94:ab:2a:14:b8:89:7d:
         0c:ee:cf:75:dc:76:79:e3:5d:08:9e:fe:da:72:4c:d6:ba:ec:
         54:57:db:e5:a5:ac:11:38:79:57:e6:6b:16:6a:fa:ad:1d:ee:
         65:41:1f:da:c6:80:2c:ef:5c:7d:b1:ce:b5:3d:95:77:7b:d2:
         91:db:3c:e8:ad:86:98:53:c3:01:cc:64:5d:89:fb:a0:56:fd:
         9b:db:3b:56:14:9b:29:86:46:d0:b8:23:ec:f4:87:27:e9:77:
         9b:36:0c:11:ee:cd:95:fe:c6:f4:e0:1b:f9:29:29:31:87:42:
         26:4a:cc:13:aa:06:91:d4:e3:59:a9:34:ab:af:ee:69:69:3c:
         52:a7:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:03:24 2025 by rpki-client