Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa
File:                     3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (raw, json)
Hash identifier:          B7jNt1FGYUgMflo+0ZsY9hYhkRswxvyJpESyxoI6HXo=
Subject key identifier:   AB:8C:A0:A5:59:1A:6F:09:16:3E:7D:C3:69:38:5E:A4:F5:3F:20:E8
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       47829DB7E4FC99126ECB4729084E72936A71A18A
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     265938
IP address blocks:        164.163.44.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:9d:b7:e4:fc:99:12:6e:cb:47:29:08:4e:72:93:6a:71:a1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=AB8CA0A5591A6F09163E7DC369385EA4F53F20E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:c1:48:6c:85:ba:a6:d1:dd:27:2b:47:a3:
                    4c:b9:80:63:f5:e3:51:84:dd:ba:4c:a3:39:99:5f:
                    2f:4d:52:11:ec:57:2f:27:39:1b:cb:44:a3:49:d7:
                    a2:7d:d5:22:a0:cf:6d:5e:7c:27:5a:c7:1f:67:75:
                    1e:0e:91:f1:12:85:30:c1:71:a4:cb:a8:e5:3c:a2:
                    26:2e:ff:1e:39:4c:d9:8c:69:2a:4b:e1:3d:3a:03:
                    47:f2:61:2c:61:18:5f:e0:e7:6e:8a:4e:71:60:5f:
                    ed:26:32:56:fb:7a:b6:b2:57:60:f7:82:e6:bc:e3:
                    72:6b:44:84:62:e2:7e:51:c6:59:ad:3e:57:04:46:
                    7e:22:0f:e8:02:8d:f0:1e:82:3f:b3:41:cd:41:0a:
                    27:8e:e7:a0:a2:56:9e:02:a6:40:69:6e:ca:cf:6f:
                    77:cb:09:a1:ac:99:47:35:73:a6:23:81:5a:b9:5b:
                    97:8c:bc:02:cb:99:dc:12:77:d2:23:a8:07:c2:1e:
                    60:cf:7e:c3:ec:3d:8f:01:28:f9:b8:f4:a6:a4:40:
                    3c:c5:3b:1b:f8:e2:94:cc:e9:83:59:8e:0a:93:ef:
                    60:82:e5:41:90:4b:67:40:7d:ce:3c:6f:8b:b1:4c:
                    d0:8f:8d:b3:82:b4:5a:27:4a:7b:aa:5f:95:02:da:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:A0:A5:59:1A:6F:09:16:3E:7D:C3:69:38:5E:A4:F5:3F:20:E8
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:a6:d7:c8:29:13:64:4a:51:92:11:6c:de:c1:71:e0:5b:
         ba:e7:cd:e9:fd:26:9a:98:e7:02:a7:0b:3b:c4:1a:a4:8e:81:
         af:19:87:e5:79:be:62:1c:dd:3b:29:1b:bf:b1:a8:1f:eb:2a:
         bf:b1:38:f0:09:3f:d8:b6:4f:6d:ee:8a:8e:2e:43:a6:45:f8:
         f4:0c:a4:c2:15:50:b8:48:61:ae:df:d0:f6:79:24:d9:98:3b:
         1b:c5:c8:a8:2a:c4:34:68:88:3f:5c:95:8d:eb:6d:48:92:7c:
         b0:6e:99:f9:02:b5:27:0d:f4:f3:e3:cb:9d:57:b5:f6:03:e7:
         ef:b2:d2:c0:18:8d:4d:00:d1:a0:20:ef:6e:1a:f2:fc:a1:b2:
         86:f2:b1:ed:86:f4:9d:9b:9c:67:7b:cc:51:bc:16:1d:f8:23:
         7d:e1:9d:89:48:c6:41:91:bf:68:02:94:30:9e:f6:e4:29:e7:
         83:a6:8e:6a:ca:9f:36:a2:63:14:61:27:a4:f3:74:f2:c0:ba:
         ea:5e:1e:8c:d4:e7:85:56:0a:d3:ff:54:4b:19:71:27:89:9e:
         36:b7:7f:29:9f:0f:38:5e:51:39:d9:69:59:9a:81:dd:d5:f4:
         96:39:d8:dd:cf:2e:bf:0b:ad:67:f9:91:df:58:a5:03:c8:34:
         10:a2:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:36 2025 by rpki-client