Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa
File:                     3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa (raw, json)
Hash identifier:          djLdiQGINMHBoSSFSWfspIstgZz8eFh+2uw7Xh/AIzQ=
Subject key identifier:   51:3F:30:30:22:A8:C3:C8:E6:77:E6:1C:00:D3:B7:97:EB:73:63:9B
Certificate issuer:       /CN=6EE352017F3C95F6353FF40315BF724F7B4E226D
Certificate serial:       1DBDD98D2C8B93D3D0A8E01547E283090707309A
Authority key identifier: 6E:E3:52:01:7F:3C:95:F6:35:3F:F4:03:15:BF:72:4F:7B:4E:22:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE352017F3C95F6353FF40315BF724F7B4E226D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa
Signing time:             Wed 29 Jan 2025 14:52:38 +0000
ROA not before:           Wed 29 Jan 2025 14:47:38 +0000
ROA not after:            Wed 28 Jan 2026 14:52:38 +0000
asID:                     265961
IP address blocks:        164.163.116.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bd:d9:8d:2c:8b:93:d3:d0:a8:e0:15:47:e2:83:09:07:07:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE352017F3C95F6353FF40315BF724F7B4E226D
        Validity
            Not Before: Jan 29 14:47:38 2025 GMT
            Not After : Jan 28 14:52:38 2026 GMT
        Subject: CN=513F303022A8C3C8E677E61C00D3B797EB73639B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:8b:ca:39:c4:6e:aa:1e:84:4f:eb:08:24:
                    eb:d8:40:06:99:95:36:c0:47:43:25:6e:b9:e8:47:
                    c0:91:55:ae:04:d2:3f:31:25:20:3d:dc:08:9a:21:
                    12:20:68:fa:84:68:d0:ef:e1:36:0f:04:0e:bb:0b:
                    d1:25:f7:a1:cb:6e:ce:f5:73:c0:bc:75:ba:c8:2b:
                    c2:c0:32:c8:b6:35:68:b7:a5:76:65:5a:a6:f2:2c:
                    af:9d:31:7b:5f:00:38:e4:43:91:db:65:c5:06:c0:
                    e6:17:3d:a3:0f:7f:b3:8f:a8:ad:66:ab:a9:1d:b9:
                    d2:e5:99:5f:d9:9e:c8:b4:14:db:54:58:4e:32:e5:
                    04:ed:91:bf:5b:91:3b:98:cd:29:a5:24:0d:c2:00:
                    d0:a7:1f:a9:5a:69:08:7b:81:eb:04:da:e4:47:b5:
                    10:3f:34:14:e7:91:20:ad:f9:f6:d6:98:91:3a:43:
                    ce:71:ad:89:f8:51:80:1e:18:f7:87:f5:54:08:c4:
                    59:e9:76:ea:2f:e5:eb:8a:5c:f7:ef:9e:85:98:94:
                    06:aa:69:a7:b7:5b:2e:1f:33:c2:d7:b1:d0:23:fb:
                    91:6b:4d:25:6c:a1:cc:cc:6c:86:59:b4:4e:02:8f:
                    58:73:cb:68:12:bb:3e:9b:b8:c3:48:18:4c:2a:f0:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3F:30:30:22:A8:C3:C8:E6:77:E6:1C:00:D3:B7:97:EB:73:63:9B
            X509v3 Authority Key Identifier:
                keyid:6E:E3:52:01:7F:3C:95:F6:35:3F:F4:03:15:BF:72:4F:7B:4E:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/6EE352017F3C95F6353FF40315BF724F7B4E226D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE352017F3C95F6353FF40315BF724F7B4E226D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:1f:f9:17:af:c6:97:c7:ef:96:41:65:d9:20:7f:78:73:
         3d:fe:a1:47:91:72:e0:d5:bf:df:7e:23:ed:66:d5:70:cf:7f:
         18:5b:71:56:2d:e4:83:3e:92:90:c1:36:65:cf:ed:a6:00:f9:
         35:93:ff:6f:e6:67:24:0b:11:29:7d:5e:55:ed:66:45:6e:c6:
         0d:6c:9e:e2:13:04:33:4a:51:ef:23:19:1a:5c:37:1b:c0:83:
         79:41:ee:c2:5d:f6:81:2c:bc:b8:67:cb:62:23:42:38:f0:2d:
         0d:94:fa:6f:7b:2b:8b:c9:f2:f7:1e:4a:13:ad:ed:cb:de:59:
         61:c7:41:ae:ca:5d:bb:36:df:a3:ba:45:47:1e:fc:af:d0:c2:
         e2:b9:70:a4:8e:40:8e:99:6a:ad:c1:1a:60:5d:64:56:17:72:
         10:1b:de:1f:5e:82:16:e3:77:e1:ef:9e:a3:d4:e1:b6:e6:20:
         ef:6f:59:64:2b:b9:f3:91:10:91:d4:ba:04:90:c3:ff:d6:61:
         14:cd:4b:eb:95:1a:90:4c:8e:12:93:5b:c2:45:1c:e5:58:62:
         48:9b:c7:ad:24:54:dd:00:df:4f:d4:88:56:a6:e4:46:95:64:
         36:a1:a5:1a:f6:ee:3a:7d:38:b5:ec:11:fd:96:b1:ba:aa:45:
         cd:7e:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:39 2025 by rpki-client