Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/3134332e3230382e3132342e302f32322d3234203d3e20323635313236.roa
File:                     3134332e3230382e3132342e302f32322d3234203d3e20323635313236.roa (raw, json)
Hash identifier:          uG9IFRvA0YZsrsgdnGbubEnRAJLadfa0k5eXbMgOG0s=
Subject key identifier:   E8:C7:17:CD:23:B3:7B:0B:93:BA:5D:14:FB:9E:56:6C:AA:40:62:AF
Certificate issuer:       /CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
Certificate serial:       5F3C4B56C15F9F7083EBDBEC6201226D3E854F97
Authority key identifier: 35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/3134332e3230382e3132342e302f32322d3234203d3e20323635313236.roa
Signing time:             Fri 21 Apr 2023 14:31:02 +0000
ROA not before:           Fri 21 Apr 2023 14:26:02 +0000
ROA not after:            Fri 19 Apr 2024 14:31:02 +0000
asID:                     265126
IP address blocks:        143.208.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:4b:56:c1:5f:9f:70:83:eb:db:ec:62:01:22:6d:3e:85:4f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
        Validity
            Not Before: Apr 21 14:26:02 2023 GMT
            Not After : Apr 19 14:31:02 2024 GMT
        Subject: CN=E8C717CD23B37B0B93BA5D14FB9E566CAA4062AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:d2:cc:7e:9a:83:60:c7:8f:83:fc:2d:30:
                    66:2d:a6:d4:f1:55:2e:7b:e9:e7:75:c2:7e:ed:4b:
                    46:be:e5:20:c4:a1:fc:57:44:aa:21:02:7b:ea:8c:
                    e6:da:d9:55:cc:4a:f6:02:9f:2d:ea:08:2d:30:df:
                    ff:c7:45:2d:ea:b0:0d:28:b3:24:0c:1e:54:0d:73:
                    00:48:4a:d3:26:a9:58:bc:12:55:0b:24:e9:2e:01:
                    fd:38:aa:dd:f8:ac:f5:b7:4e:60:54:af:55:f7:a2:
                    8c:1a:36:1d:8c:bc:b0:a1:84:d2:c2:37:ec:fa:ec:
                    12:c3:59:95:d5:51:fd:97:9d:cb:f2:b9:29:14:d7:
                    4e:df:b0:f3:95:e4:b2:d3:32:c0:3e:28:00:bc:9e:
                    3b:f9:fc:cc:11:78:32:d6:f2:ce:73:a4:58:51:99:
                    15:ae:f8:c7:e2:2b:28:e3:4b:52:c1:99:40:8d:52:
                    47:17:2a:9b:0c:fa:32:52:4d:53:23:68:ea:2b:ba:
                    5a:5f:7f:99:a9:f1:48:7a:62:e5:05:db:8b:68:11:
                    1f:aa:8b:5d:fa:d6:7c:b3:83:a1:30:9c:35:76:be:
                    1e:36:60:e2:10:6f:e9:83:ac:23:e1:30:1d:61:94:
                    a9:60:b2:47:bb:67:03:64:23:db:fa:cd:18:53:9d:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:17:CD:23:B3:7B:0B:93:BA:5D:14:FB:9E:56:6C:AA:40:62:AF
            X509v3 Authority Key Identifier:
                keyid:35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/3134332e3230382e3132342e302f32322d3234203d3e20323635313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:dd:05:ff:f6:6e:49:58:d7:84:1a:50:d5:b4:42:9f:32:
         2d:a2:14:6e:ca:11:3e:78:ea:dc:70:da:6e:45:9c:96:b2:69:
         cb:2d:8a:71:af:ec:87:e8:66:00:41:cb:5e:b8:8a:75:ab:fd:
         44:83:ef:50:c1:e4:d0:d3:87:66:0d:c1:e5:e3:64:db:41:5b:
         3a:8d:6c:27:5d:b0:23:64:e1:97:2d:74:c1:05:f2:be:95:53:
         0e:ef:b7:91:2d:ba:59:2c:bd:3a:66:a7:88:7a:48:26:e0:e6:
         74:72:6a:31:96:c6:0f:29:32:a4:36:08:c7:67:72:31:d2:7a:
         38:ae:c8:f5:27:f9:0f:76:da:89:fa:05:93:14:4a:f7:15:44:
         36:ac:22:8a:07:6a:6f:a1:37:de:76:37:4f:37:81:0a:52:1b:
         44:7f:0b:c2:5a:7c:f5:57:50:77:22:be:79:2c:41:6a:68:44:
         dd:f1:d1:ca:bd:2c:31:4b:d5:21:71:de:ee:e1:53:b0:3b:c7:
         61:ea:34:9e:a2:97:02:c2:6b:1e:cb:28:6a:f1:24:fd:eb:72:
         7e:a0:86:bb:34:e3:29:12:bd:39:ba:d6:12:80:1b:97:e3:e4:
         02:4a:fc:79:34:76:1c:ae:71:18:6c:a1:75:ac:1e:41:75:2e:
         25:99:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:17 2025 by rpki-client