Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232352e302f32342d3234203d3e20323634313030.roa
File:                     3136382e3132312e3232352e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          +omVLUAG/U7AYmaRPdAiNkDyPeLuWK3kekS/I63FM/g=
Subject key identifier:   3F:80:52:ED:1F:C7:0D:A8:AF:D3:B6:98:1A:4E:09:BB:E5:9A:52:96
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       7834C878230788DF43B0FB0E8227EC474DF53202
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232352e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:07:32 +0000
ROA not before:           Mon 02 Dec 2024 12:02:32 +0000
ROA not after:            Mon 01 Dec 2025 12:07:32 +0000
asID:                     264100
IP address blocks:        168.121.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:c8:78:23:07:88:df:43:b0:fb:0e:82:27:ec:47:4d:f5:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:02:32 2024 GMT
            Not After : Dec  1 12:07:32 2025 GMT
        Subject: CN=3F8052ED1FC70DA8AFD3B6981A4E09BBE59A5296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:70:a2:81:83:22:ca:c4:6b:6a:13:a9:61:
                    6a:f4:3d:bb:50:1a:a5:47:cb:9c:f1:0a:db:d6:f8:
                    c0:07:1d:4e:d5:56:60:97:bb:38:1e:af:ae:60:ee:
                    c6:7a:5e:4f:a2:60:fb:52:6b:16:50:78:3b:ad:3b:
                    cb:f3:24:a1:91:3c:dc:06:7b:4f:d2:1e:04:f7:a1:
                    44:e2:d9:07:37:6b:6a:0a:41:3c:e3:08:bf:08:fb:
                    ff:99:dc:39:73:4b:37:01:9e:df:40:f8:0c:2b:08:
                    cd:a0:b8:f9:87:30:98:c0:95:6a:c6:ce:20:d1:24:
                    0d:fe:b2:f0:d1:98:63:af:a8:2d:e7:ca:85:71:f9:
                    97:3a:fe:8a:80:fa:b6:71:ab:da:5d:b7:84:d8:ce:
                    c8:e9:a6:d8:d0:2f:c1:1d:8a:bc:f2:7c:b7:a3:ef:
                    5c:fc:1b:2d:f9:37:9f:79:53:9a:25:84:ed:2e:57:
                    50:52:83:cd:2b:c4:a3:41:f4:bc:fa:c6:df:93:6f:
                    73:18:9a:f6:38:96:3b:d0:b6:a0:b3:7c:7d:c4:7a:
                    62:1a:74:8b:e2:fb:1a:4e:94:02:f2:89:6b:6e:be:
                    fd:eb:4e:23:d6:47:bc:ee:39:ba:c8:07:7f:02:6d:
                    0c:f7:9f:4c:ef:22:b7:53:9f:aa:c6:88:56:25:32:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:52:ED:1F:C7:0D:A8:AF:D3:B6:98:1A:4E:09:BB:E5:9A:52:96
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232352e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:7c:fb:a2:4e:db:5d:86:0b:f4:15:a2:6e:77:65:75:d3:
         f4:52:28:93:a1:15:46:e7:25:a2:b0:96:40:e0:7e:85:00:71:
         27:54:68:c4:d5:51:88:a4:f9:60:df:62:38:72:b1:db:52:26:
         c3:16:ff:7f:6c:60:5b:d7:89:8f:d9:80:c5:49:eb:76:e8:81:
         9f:be:cf:02:dc:79:76:3e:2a:18:66:80:86:9b:0d:96:fc:4a:
         04:11:31:a5:98:7f:2e:48:38:d7:c2:33:df:c9:b4:78:1c:69:
         9a:12:71:99:1a:be:96:71:d5:97:e9:7e:4c:f6:e9:3d:4b:42:
         cc:98:1a:20:8f:86:02:5c:72:66:4a:75:cb:a4:92:fd:b2:1c:
         c6:82:bb:53:9a:2f:c5:e6:41:5c:40:ed:0e:17:d6:13:5d:71:
         8a:69:de:95:16:58:d0:e5:f1:37:64:cd:73:61:4b:0b:e3:06:
         c3:63:af:06:83:5e:85:bf:f5:de:19:a4:55:52:41:1f:28:55:
         76:61:c4:75:2c:d1:8b:a8:9d:04:ce:88:aa:b4:56:9c:f6:a5:
         6c:a8:e1:bc:cd:c8:d2:7a:ab:4b:8c:53:09:5d:7c:22:da:2c:
         95:6f:eb:68:d0:1a:ff:bc:cc:c1:60:ab:f0:de:9f:40:48:07:
         17:8f:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:27 2025 by rpki-client