Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/3136382e3139362e3230342e302f32322d3332203d3e20323635343730.roa
File:                     3136382e3139362e3230342e302f32322d3332203d3e20323635343730.roa (raw, json)
Hash identifier:          MeVuiUb9EFXXnVDUMfWcVFcUFxMcQOPBxfD0VrJIDPU=
Subject key identifier:   19:25:84:C6:30:7C:13:AF:C9:24:0A:C1:D2:E3:29:EE:42:F2:34:AA
Certificate issuer:       /CN=B143098A1B44489C70A871CE36309BA60CDA855D
Certificate serial:       1FAEBCFB12DD38D1BF8DB9BCA037562C455F4445
Authority key identifier: B1:43:09:8A:1B:44:48:9C:70:A8:71:CE:36:30:9B:A6:0C:DA:85:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B143098A1B44489C70A871CE36309BA60CDA855D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/3136382e3139362e3230342e302f32322d3332203d3e20323635343730.roa
Signing time:             Wed 05 Jun 2024 12:59:56 +0000
ROA not before:           Wed 05 Jun 2024 12:54:56 +0000
ROA not after:            Wed 04 Jun 2025 12:59:56 +0000
asID:                     265470
IP address blocks:        168.196.204.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ae:bc:fb:12:dd:38:d1:bf:8d:b9:bc:a0:37:56:2c:45:5f:44:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B143098A1B44489C70A871CE36309BA60CDA855D
        Validity
            Not Before: Jun  5 12:54:56 2024 GMT
            Not After : Jun  4 12:59:56 2025 GMT
        Subject: CN=192584C6307C13AFC9240AC1D2E329EE42F234AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:cb:c1:45:34:69:96:2e:07:3b:b3:6a:61:
                    80:76:4e:2f:8e:23:62:23:93:a9:2c:1e:4b:9f:1e:
                    ad:9e:f2:45:62:8f:d2:29:e1:69:bd:8c:3a:82:26:
                    18:1b:6b:bf:9c:00:aa:35:eb:97:78:50:f7:47:0a:
                    e4:f9:b3:2a:be:9b:71:bd:26:4f:a6:3c:c0:1f:bf:
                    74:c0:cd:85:a5:f3:5d:30:5d:1d:9f:60:a9:e4:21:
                    76:63:71:c7:6f:bf:c2:bb:7b:3d:09:d9:1b:a4:24:
                    67:3e:06:37:2d:1c:15:88:75:d5:40:ae:03:8e:b9:
                    96:77:c0:f1:76:2f:e3:67:0b:ef:fe:7f:ac:b6:e9:
                    bd:ab:17:22:87:a3:07:ab:24:d9:b2:d8:b0:4f:3f:
                    50:66:e1:09:9d:e4:0c:c3:fb:bf:97:64:fb:15:18:
                    5e:0a:90:a5:75:a7:49:61:e4:02:c4:d9:37:93:8b:
                    83:00:93:d5:3d:46:88:a3:fa:6d:52:db:a4:ec:7d:
                    8c:7c:be:b7:57:6f:d9:c4:48:6c:04:e5:45:8f:28:
                    6c:c6:eb:76:72:3b:d5:2f:26:26:a5:da:1c:25:5a:
                    7f:f0:b1:50:e0:b9:04:fb:e5:7c:3e:63:48:75:a5:
                    30:36:5e:be:ee:b1:ef:73:55:e0:05:76:2f:c7:f0:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:84:C6:30:7C:13:AF:C9:24:0A:C1:D2:E3:29:EE:42:F2:34:AA
            X509v3 Authority Key Identifier:
                keyid:B1:43:09:8A:1B:44:48:9C:70:A8:71:CE:36:30:9B:A6:0C:DA:85:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B143098A1B44489C70A871CE36309BA60CDA855D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/3136382e3139362e3230342e302f32322d3332203d3e20323635343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:c3:34:bf:a6:1c:44:8a:cb:8a:b4:39:a8:0c:16:de:62:
         c4:ca:fd:6e:2a:9f:73:16:53:05:dd:d6:e3:31:cc:28:e1:6a:
         19:5b:0c:d5:b5:ce:fb:a9:1a:5b:d1:62:9d:36:07:ce:6b:36:
         b2:ac:d6:6d:aa:16:09:08:13:41:15:63:5f:81:3c:4d:12:fd:
         9c:ba:60:29:84:15:3b:e5:2d:2e:cc:24:f5:16:b6:e6:b9:6f:
         3d:b1:ca:10:64:60:fa:d7:58:bf:ce:e8:c2:cb:f1:81:02:29:
         f3:55:a4:e4:32:33:98:36:7a:21:95:e9:44:d1:07:d8:42:c2:
         af:29:2f:89:de:20:6b:b0:74:f9:32:71:27:28:4a:02:5f:a7:
         6d:cd:d0:27:d4:a6:f6:c9:dc:5b:ef:e9:a7:12:61:a6:cc:d8:
         eb:25:0d:17:62:a5:df:2a:08:26:91:1c:8d:1a:02:07:fc:3b:
         a5:ad:2c:df:a0:ec:10:a0:48:b7:e9:0e:de:c3:c3:39:95:1b:
         69:7b:98:99:56:3b:ee:56:4f:e4:1a:2a:fa:46:1e:e2:ef:f2:
         8d:99:c3:28:88:b4:b0:00:f7:f9:eb:7e:c0:c0:72:47:ea:5e:
         c3:21:60:f8:98:69:fa:5a:6c:80:1f:60:21:39:72:99:6b:4e:
         36:01:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:59 2025 by rpki-client