Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          2BAkKvtC79rAlASHdYT+txWp6FWouKKjM34k1LRmS6c=
Subject key identifier:   3F:A6:30:EA:02:C7:CE:9E:47:60:97:DA:69:BD:E5:12:23:28:FE:F7
Certificate issuer:       /CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Certificate serial:       5EA4A02C3678570247B33B95F042F5CD8A5B7C7A
Authority key identifier: F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa
Signing time:             Thu 06 Mar 2025 08:03:53 +0000
ROA not before:           Thu 06 Mar 2025 07:58:53 +0000
ROA not after:            Thu 05 Mar 2026 08:03:53 +0000
asID:                     265066
IP address blocks:        168.121.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a4:a0:2c:36:78:57:02:47:b3:3b:95:f0:42:f5:cd:8a:5b:7c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Validity
            Not Before: Mar  6 07:58:53 2025 GMT
            Not After : Mar  5 08:03:53 2026 GMT
        Subject: CN=3FA630EA02C7CE9E476097DA69BDE5122328FEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:3c:56:47:52:60:f2:b5:ad:2f:af:bb:fb:
                    40:b8:6e:bc:20:67:3a:d6:c9:05:6e:ef:90:ae:ff:
                    ca:4c:dc:22:9b:a4:ee:bd:a2:41:4e:d9:dc:ae:5a:
                    6c:c7:ca:dd:dc:b7:f9:df:2f:46:bd:7c:d8:64:f6:
                    dc:a6:27:8b:dc:b1:76:9b:11:00:8d:56:81:ad:8c:
                    76:54:65:7e:b1:9e:8d:bc:c4:60:d3:12:ed:ea:a9:
                    c6:6b:21:29:91:b4:c0:e8:95:51:ff:1c:30:d9:a0:
                    37:f4:88:d2:98:ab:91:49:cc:0a:71:9e:9b:8d:f7:
                    09:b9:e6:e1:75:1f:2a:b5:b5:50:fd:49:83:4f:ec:
                    a4:ee:22:98:b8:bd:c3:8f:28:52:77:40:fc:7c:c0:
                    7b:46:50:17:1f:62:ab:a4:2e:19:1e:b3:e2:13:ab:
                    db:71:2f:e1:b0:67:27:60:f4:34:cf:67:d5:4e:52:
                    1c:7d:34:0c:6e:04:1b:78:8d:c7:eb:0a:1d:7d:41:
                    4b:d4:ec:d3:76:dd:57:7e:d0:ef:63:d9:35:b2:71:
                    89:e0:53:cf:b9:73:c4:3f:17:0f:f2:61:69:91:db:
                    bc:97:7c:16:7c:1a:62:38:d4:1d:ec:db:7d:50:05:
                    92:0f:74:b2:0b:22:d3:3f:2a:09:e5:31:0d:a6:a6:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A6:30:EA:02:C7:CE:9E:47:60:97:DA:69:BD:E5:12:23:28:FE:F7
            X509v3 Authority Key Identifier:
                keyid:F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:28:de:de:38:26:68:90:08:dc:ae:43:4d:d6:25:f9:73:f0:
         72:f1:4b:73:01:81:6d:d2:d4:9c:8d:b1:06:eb:46:74:1f:c0:
         fe:69:27:88:85:ff:9b:72:4e:d4:71:19:43:a7:0c:6e:ef:a9:
         ea:11:5a:83:0f:d9:c7:ef:f4:f9:96:41:26:1d:18:b2:2b:8e:
         f5:40:31:a7:3e:0e:39:d1:fb:64:f1:63:da:d2:ef:9b:e4:5e:
         87:a6:42:d2:12:7c:96:41:3c:27:5e:fc:e8:42:19:3c:06:d5:
         73:48:37:d6:4c:3f:c9:b6:d8:1d:7d:5f:2c:7b:fc:31:53:5b:
         da:de:84:2b:bd:13:c4:4a:53:eb:ff:f2:b8:a4:4d:a2:1d:78:
         a1:92:1a:5f:33:60:6a:ab:43:ab:ce:12:ed:43:c0:47:d2:3c:
         58:11:8e:db:4a:4f:e5:79:b1:8b:67:52:b0:05:e2:0c:7d:1b:
         94:b6:f1:31:a1:b6:7c:0c:3b:89:d0:2c:01:2c:af:53:c9:3a:
         57:4c:20:92:a8:0a:85:7c:f1:cd:49:1a:ab:5b:64:89:c7:92:
         c0:17:9f:96:43:cd:69:55:9f:9f:94:96:72:5e:a8:f6:67:22:
         56:1b:03:21:01:36:ea:b7:bf:20:f0:50:d6:a7:3b:0a:cc:0d:
         3b:7b:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:24 2025 by rpki-client