Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138362e302f32332d3233203d3e20323634353130.roa
File:                     3133322e3235352e3138362e302f32332d3233203d3e20323634353130.roa (raw, json)
Hash identifier:          BVS2vl4wnpneTQ54Xqg4qc5HXSb9PbY7QM8CM2JI6YI=
Subject key identifier:   F4:DA:47:2D:BA:9F:CA:B5:D1:66:80:40:27:0F:E6:73:C8:52:E1:66
Certificate issuer:       /CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
Certificate serial:       491227E80AA6ADC6B4D9ED62CCEA435409A45397
Authority key identifier: 67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138362e302f32332d3233203d3e20323634353130.roa
Signing time:             Sun 29 Oct 2023 04:56:32 +0000
ROA not before:           Sun 29 Oct 2023 04:51:32 +0000
ROA not after:            Sun 27 Oct 2024 04:56:32 +0000
asID:                     264510
IP address blocks:        132.255.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:12:27:e8:0a:a6:ad:c6:b4:d9:ed:62:cc:ea:43:54:09:a4:53:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E19ECE95F8080219ADF0EBA93A317A18815FBF
        Validity
            Not Before: Oct 29 04:51:32 2023 GMT
            Not After : Oct 27 04:56:32 2024 GMT
        Subject: CN=F4DA472DBA9FCAB5D1668040270FE673C852E166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:42:b9:1a:59:e1:b2:c5:ed:84:6c:e4:8c:
                    78:b9:18:1b:ba:22:b2:46:f3:e8:ab:1e:ab:1e:88:
                    93:0e:2c:7a:f9:e1:4e:ad:ae:2f:43:b2:3a:59:58:
                    c4:69:e9:ab:f1:2a:da:1c:14:c2:7b:3e:66:f9:c4:
                    51:a7:24:f5:eb:bc:4e:ca:86:fa:62:27:15:2a:ec:
                    18:ae:b7:50:e7:9c:9e:6c:0b:21:61:15:2e:fa:17:
                    77:07:36:ca:66:b3:a8:4e:f4:51:f6:63:44:81:c2:
                    e0:f1:ac:55:ac:c1:d6:61:b8:fa:14:56:14:43:b0:
                    90:22:e6:f1:ab:21:ff:e1:0e:ff:2d:6c:37:6d:d1:
                    2f:13:5d:74:96:29:2e:2c:35:e2:d0:a2:28:a4:75:
                    84:e4:5b:30:0f:77:31:a8:9f:6c:a5:12:0c:53:ad:
                    d0:a2:94:a6:6a:39:7d:e9:ce:68:18:bc:ab:a2:4c:
                    c1:98:fc:85:a8:05:8a:4d:0f:6c:a2:11:52:a9:94:
                    8f:e8:8f:a6:43:88:b1:d0:12:3d:ea:a8:fd:b3:b1:
                    4d:e3:12:98:dd:25:f8:16:54:dc:78:f4:a7:8f:d4:
                    3e:1a:cf:88:2f:9a:4f:4e:52:06:7b:93:52:d6:d6:
                    5f:54:0a:c2:e1:f0:80:ae:ba:b8:39:f0:b8:5a:6d:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:47:2D:BA:9F:CA:B5:D1:66:80:40:27:0F:E6:73:C8:52:E1:66
            X509v3 Authority Key Identifier:
                keyid:67:E1:9E:CE:95:F8:08:02:19:AD:F0:EB:A9:3A:31:7A:18:81:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/67E19ECE95F8080219ADF0EBA93A317A18815FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E19ECE95F8080219ADF0EBA93A317A18815FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/1/3133322e3235352e3138362e302f32332d3233203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:1e:5a:c1:e9:13:38:74:3b:1c:6e:9d:8a:08:c6:36:9d:
         b0:bc:b7:fa:84:0a:77:fe:77:fb:5a:85:34:6b:bc:6f:1b:af:
         b0:ad:a8:3d:6c:7a:0c:fa:b3:1f:fc:31:e6:18:c6:1b:8b:ae:
         97:b3:ad:ff:7e:8a:03:f6:87:01:0e:bc:4c:d8:0b:6d:b7:ca:
         5f:10:0c:b0:62:6d:fb:28:e6:39:69:49:fa:53:59:d0:c1:b8:
         b4:9f:a4:64:f5:ff:40:8f:85:5a:15:7e:78:fd:37:e4:24:3c:
         b7:f5:50:aa:52:de:56:47:08:ee:b4:0e:c2:d2:c3:13:c7:17:
         97:21:d8:99:cf:15:5b:1c:4a:54:6f:95:0b:83:f6:ea:d1:b1:
         e0:a6:58:d2:c9:3a:f1:d8:8c:67:27:92:38:73:51:35:f8:02:
         cd:f0:9b:4c:84:9e:e8:18:b0:60:54:5c:fe:a0:e7:91:23:c3:
         0d:a9:56:3b:5a:67:7d:53:4e:cd:bd:dc:ac:fc:82:26:a1:46:
         c5:65:ad:82:ea:3c:eb:f6:2d:2f:97:54:2e:7b:9f:ce:4b:30:
         f0:de:dd:c4:07:a0:ff:68:60:e4:d5:0f:49:3a:ba:b1:d1:d1:
         ad:c9:ff:d2:04:69:af:ab:0b:27:48:19:aa:4e:a2:8e:b7:02:
         b1:7a:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:30 2025 by rpki-client