Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e20323033.roa
File:                     3136382e3139352e3131322e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          2jvuV6ovpjV86QEAdwFQMBtZSZ1NeOR8PpmpewOT95U=
Subject key identifier:   16:34:25:3E:12:27:1C:95:C6:82:9D:F5:07:30:33:5B:35:7D:1A:BF
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       7D8C16FF7B1B18A6A57D6682862518859B1FCD65
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e20323033.roa
Signing time:             Mon 19 Dec 2022 18:54:00 +0000
ROA not before:           Mon 19 Dec 2022 18:49:00 +0000
ROA not after:            Mon 18 Dec 2023 18:54:00 +0000
asID:                     203
IP address blocks:        168.195.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8c:16:ff:7b:1b:18:a6:a5:7d:66:82:86:25:18:85:9b:1f:cd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Dec 19 18:49:00 2022 GMT
            Not After : Dec 18 18:54:00 2023 GMT
        Subject: CN=1634253E12271C95C6829DF50730335B357D1ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:0d:10:14:a3:6b:b3:fb:1d:85:de:09:ea:
                    c4:cb:49:b0:bb:be:f3:90:4f:db:87:c5:bf:53:bb:
                    32:1d:06:d0:25:81:b3:07:44:14:1a:3d:5e:85:08:
                    33:8a:01:d2:fc:89:c8:e2:0d:62:a9:84:1a:53:03:
                    28:c6:30:4b:03:aa:df:b1:7e:1f:45:4a:41:42:38:
                    c3:8e:18:a5:9a:10:3c:f4:54:2a:de:a0:e8:5c:49:
                    f1:3f:eb:9f:e6:06:75:14:cb:86:0a:0b:8b:ec:b5:
                    1f:3f:b6:21:c6:cf:ea:a2:f8:83:85:63:f9:d1:14:
                    97:57:b4:96:21:17:df:a4:63:7a:a7:40:65:67:57:
                    cf:fa:a2:b6:50:d1:46:e4:d6:c3:ae:87:b8:ee:bc:
                    d2:2a:a3:e1:c9:55:13:f3:fe:8b:50:91:b4:7b:37:
                    99:42:f1:2c:9a:a0:7f:77:24:f1:b0:a6:62:aa:bc:
                    bd:5e:a0:ce:3a:29:2c:0a:dc:89:d1:4e:8a:42:fd:
                    f2:31:4b:f0:f5:51:30:60:4a:40:7a:a7:43:1d:40:
                    c2:a2:29:d3:44:dd:bf:de:dc:95:59:bc:ee:9d:7b:
                    5b:df:d9:89:89:f1:8e:fb:79:06:f0:ad:eb:c7:a9:
                    ea:f8:f2:9a:d2:25:5c:58:4d:89:f9:bf:bc:f4:1a:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:34:25:3E:12:27:1C:95:C6:82:9D:F5:07:30:33:5B:35:7D:1A:BF
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:08:a5:e4:3d:9e:67:00:dc:18:f8:f7:96:c4:d1:a4:0e:
         f7:6e:c3:ac:e0:ae:93:a7:e2:45:82:e9:11:f8:ef:05:e1:62:
         cd:1b:87:d9:59:29:5f:7a:6e:78:8e:05:38:53:c9:ac:6f:67:
         11:3f:ba:1c:d0:e9:e9:19:9f:d0:c9:21:fd:c5:13:6c:f2:e8:
         55:bb:c9:cc:32:57:ef:68:af:50:ec:d8:84:21:08:c8:5a:56:
         1c:94:60:9b:46:7b:c2:39:76:fc:dd:67:09:d1:c5:8d:15:2b:
         5d:a0:5b:fb:0f:67:ad:dc:41:0f:ef:a6:e2:41:5c:7e:d8:b8:
         0d:de:45:e0:43:d7:14:e2:62:ff:d9:10:ba:75:6c:ab:8b:72:
         5e:f7:54:fd:7c:8d:f3:e1:0f:d1:fc:06:9a:aa:ca:ee:bd:b7:
         af:d8:ec:12:3e:34:99:24:8a:9f:93:fc:e5:73:6c:ed:21:e0:
         7a:14:68:3c:36:e5:fd:6a:46:10:fd:ec:a5:fc:ad:3d:11:b7:
         76:c3:2b:72:01:df:08:39:88:42:33:13:3e:9f:6a:d9:5b:82:
         10:2e:77:19:8e:62:7d:de:2d:b8:58:3f:7e:0c:0c:28:ed:08:
         9c:4c:85:62:19:9e:4e:eb:14:ef:2e:f6:af:f7:22:4a:74:18:
         c1:45:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:51 2025 by rpki-client