Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/3136382e3139342e3132382e302f32322d3234203d3e20323635343034.roa
File:                     3136382e3139342e3132382e302f32322d3234203d3e20323635343034.roa (raw, json)
Hash identifier:          MpSUAEuosZsDHKLJxaP8SCr4OX2wtQSTZZ6zatS0ZNA=
Subject key identifier:   6E:DF:55:4A:94:CF:A5:A4:2B:71:C1:A3:F9:C7:2F:18:BA:BF:30:EA
Certificate issuer:       /CN=502D57718548660D155175A249B0597C56E1D390
Certificate serial:       6D451B86F4ACF1DD4770EBEB12880FB4903B9699
Authority key identifier: 50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/3136382e3139342e3132382e302f32322d3234203d3e20323635343034.roa
Signing time:             Mon 06 Jan 2025 15:11:27 +0000
ROA not before:           Mon 06 Jan 2025 15:06:27 +0000
ROA not after:            Mon 05 Jan 2026 15:11:27 +0000
asID:                     265404
IP address blocks:        168.194.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:45:1b:86:f4:ac:f1:dd:47:70:eb:eb:12:88:0f:b4:90:3b:96:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502D57718548660D155175A249B0597C56E1D390
        Validity
            Not Before: Jan  6 15:06:27 2025 GMT
            Not After : Jan  5 15:11:27 2026 GMT
        Subject: CN=6EDF554A94CFA5A42B71C1A3F9C72F18BABF30EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:91:fc:b5:5d:e0:da:42:90:28:37:c8:99:
                    1e:b4:88:08:cf:f0:1d:20:2a:fb:fb:ef:f4:39:f2:
                    cc:13:be:62:68:18:12:b2:64:ff:6f:3c:d4:67:3c:
                    14:36:e1:90:23:a4:d1:59:73:5f:6f:9b:ec:fa:d1:
                    f7:79:eb:cb:55:91:f8:4f:e9:6b:3d:e4:d5:a2:cf:
                    59:de:27:29:57:81:86:87:ff:eb:1a:8e:af:61:72:
                    5e:e7:d0:2c:66:be:85:35:2a:c4:be:9f:04:f1:9e:
                    0a:0c:45:aa:5f:03:8c:f5:07:a0:91:40:f8:f2:8d:
                    a7:c9:2d:b3:3c:c2:4e:2e:2c:35:74:0c:89:db:a7:
                    92:06:22:ff:18:69:8f:55:d4:4c:44:c7:6c:76:fd:
                    e5:87:0a:f3:ff:bd:1c:cd:95:10:61:26:a5:d3:45:
                    18:9b:28:ab:86:4f:a1:ef:06:2a:77:08:4b:dd:22:
                    5b:37:b2:e2:71:19:1f:cc:4c:1d:7a:b1:4b:44:40:
                    63:3d:38:2d:eb:03:ff:a2:78:76:e7:7b:9a:f3:69:
                    b2:1c:74:f5:44:10:05:82:27:8c:1c:66:1c:6a:cf:
                    b9:04:5b:51:53:2d:56:b3:7c:4d:3f:7c:72:39:97:
                    25:45:0c:c6:f2:49:14:97:e2:05:98:8e:36:0a:bb:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:55:4A:94:CF:A5:A4:2B:71:C1:A3:F9:C7:2F:18:BA:BF:30:EA
            X509v3 Authority Key Identifier:
                keyid:50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/3136382e3139342e3132382e302f32322d3234203d3e20323635343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:a2:c5:3c:69:35:cd:5e:fa:89:bd:74:39:a0:3c:ce:8d:
         7f:b3:36:fa:dd:a9:6c:52:09:2c:c3:9f:c3:52:50:c0:c2:db:
         b1:3f:6b:3a:8f:71:d2:ff:9a:9a:b9:3c:17:46:a6:f9:b7:66:
         47:43:af:54:8b:cf:4c:b4:5c:a2:1b:d9:be:54:9f:e6:68:54:
         c8:f4:db:0d:10:24:3c:fc:58:4a:d3:24:35:a6:b4:7b:73:f7:
         96:e4:9c:9d:31:fd:97:a5:7f:54:1d:6b:12:5b:f1:92:49:d2:
         b3:c0:74:0c:49:b5:ba:c3:a8:60:c3:3c:c6:5c:9f:7f:b8:48:
         93:dc:33:38:45:c5:a4:c6:3d:30:24:9d:26:4b:48:41:9f:03:
         44:27:26:4a:9f:40:04:90:b0:39:9a:85:8c:46:49:20:09:7e:
         3e:9f:73:a6:31:c4:20:20:77:8e:61:f4:bd:47:ab:e2:cc:90:
         fd:47:1b:91:aa:9c:f2:33:b2:14:f8:35:97:dd:5d:06:d3:b2:
         74:fd:ac:fd:1d:15:2a:4e:f0:7a:ff:41:74:cd:e9:0e:25:8b:
         1e:a8:93:ec:fd:d7:b3:01:d1:b2:3f:0c:e3:0c:39:d3:3a:14:
         8c:ef:58:4c:0f:54:e6:df:3d:dc:b0:67:57:e6:df:03:6c:03:
         b8:be:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:51 2025 by rpki-client