Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130342e302f32322d3234203d3e20323635393534.roa
File:                     3136342e3136332e3130342e302f32322d3234203d3e20323635393534.roa (raw, json)
Hash identifier:          mCxTFU53Kg1SiJr8VYzmfAcJaB6mmBf4QuJexo4EeYk=
Subject key identifier:   CB:65:98:02:D5:8E:99:16:CE:3C:38:4C:28:B0:13:55:07:DF:DC:1E
Certificate issuer:       /CN=292B3551658387A06B4D370FC9E211E696A15EB4
Certificate serial:       48226F2A98178084DB4BD1C2E240FC171D00F2BB
Authority key identifier: 29:2B:35:51:65:83:87:A0:6B:4D:37:0F:C9:E2:11:E6:96:A1:5E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/292B3551658387A06B4D370FC9E211E696A15EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130342e302f32322d3234203d3e20323635393534.roa
Signing time:             Fri 29 Nov 2024 13:05:31 +0000
ROA not before:           Fri 29 Nov 2024 13:00:31 +0000
ROA not after:            Fri 28 Nov 2025 13:05:31 +0000
asID:                     265954
IP address blocks:        164.163.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:22:6f:2a:98:17:80:84:db:4b:d1:c2:e2:40:fc:17:1d:00:f2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292B3551658387A06B4D370FC9E211E696A15EB4
        Validity
            Not Before: Nov 29 13:00:31 2024 GMT
            Not After : Nov 28 13:05:31 2025 GMT
        Subject: CN=CB659802D58E9916CE3C384C28B0135507DFDC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:b8:d0:3b:b6:59:b6:ca:c0:e5:ce:63:21:
                    1d:de:c5:36:6e:4a:59:f9:53:82:fe:da:c5:61:5e:
                    fe:74:f3:71:4f:5d:6f:71:3f:9c:5f:b2:b1:7a:74:
                    e1:e8:59:17:88:71:c6:e0:c0:0e:0c:65:40:40:2c:
                    4d:b2:9c:12:a4:f3:bb:1c:b3:3b:c7:b0:e2:fc:d1:
                    fc:55:95:b5:9a:ed:24:98:d9:14:ff:8d:85:87:47:
                    08:5e:3d:9e:f6:eb:75:32:f1:4c:8d:3c:da:30:e2:
                    17:47:90:70:0e:12:2e:a2:37:22:4b:35:21:da:ef:
                    83:d8:4a:42:32:bf:0d:33:ec:e4:f6:b0:8d:51:1c:
                    94:b9:1d:b7:f7:f1:5a:8b:56:a9:52:1a:e4:c5:b1:
                    54:31:9b:2d:e7:ff:3b:74:bc:a5:96:47:c3:44:b8:
                    bf:ce:87:62:8e:9d:b0:5c:b3:c1:f4:1e:27:08:5e:
                    b5:ad:86:43:b3:8b:52:38:2d:18:d1:0a:89:00:a0:
                    60:62:7f:0f:3b:3c:4e:af:48:83:2d:83:99:a6:60:
                    00:24:d4:fb:21:62:e7:94:c4:4a:9c:8f:4d:11:7a:
                    9f:33:9c:fe:27:68:16:b6:60:9c:d2:5b:45:76:b6:
                    fa:9d:ad:67:83:74:07:41:e3:02:54:7f:14:41:66:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:98:02:D5:8E:99:16:CE:3C:38:4C:28:B0:13:55:07:DF:DC:1E
            X509v3 Authority Key Identifier:
                keyid:29:2B:35:51:65:83:87:A0:6B:4D:37:0F:C9:E2:11:E6:96:A1:5E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/292B3551658387A06B4D370FC9E211E696A15EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/292B3551658387A06B4D370FC9E211E696A15EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/3136342e3136332e3130342e302f32322d3234203d3e20323635393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:91:c5:f8:6c:59:a3:1b:0d:29:77:34:a2:a2:40:f9:17:60:
         13:40:a0:28:0a:bf:e9:c0:8f:f8:76:6a:2a:28:5a:d1:24:77:
         f6:2b:08:c2:34:7e:d5:15:c5:26:3a:d6:4c:7d:a1:bf:24:81:
         79:65:3c:fc:cc:c5:fd:ab:1e:0b:0a:e8:97:b3:7b:38:3c:78:
         8c:f3:af:18:9d:87:e1:f8:37:d6:a6:17:92:88:6f:18:59:1c:
         ba:38:bb:47:c9:b5:2d:19:57:b8:60:3f:74:a5:39:2f:46:01:
         df:8f:cb:db:ef:af:8f:ad:90:16:ab:34:15:9b:9a:47:86:9e:
         3a:56:f8:55:44:00:0a:76:b4:81:44:11:ab:54:6f:37:44:a8:
         d8:de:70:22:a9:a1:83:61:8b:85:62:b5:db:f5:a1:02:aa:d9:
         52:8b:02:38:bd:62:4e:63:a8:82:ee:c3:82:0d:56:6d:77:bc:
         e3:81:0a:bf:27:be:f6:74:19:17:21:0a:f7:2a:a5:09:dd:39:
         30:ad:10:e1:13:f6:e3:e7:d6:c8:e7:cd:58:61:a8:fa:c0:4f:
         6f:f6:8d:f0:2e:90:b2:eb:7e:34:30:8b:4b:05:e9:63:c4:fd:
         bb:45:56:37:9e:f3:53:3d:ef:c8:2c:f3:d6:7a:2a:13:8c:99:
         a2:e3:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:13 2025 by rpki-client