Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
File:                     3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (raw, json)
Hash identifier:          oaeLvcnhSHjzPCTq7x5eU/FMoypv5orXLIr6xLBE8lY=
Subject key identifier:   99:08:F5:D5:15:2B:C2:C8:4E:A1:7B:32:AC:FF:70:9F:79:47:B8:E7
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       24D7CD809CA9DDFD8DED50E6DBC09BDC6896D5D3
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
Signing time:             Mon 20 Nov 2023 17:08:57 +0000
ROA not before:           Mon 20 Nov 2023 17:03:57 +0000
ROA not after:            Mon 18 Nov 2024 17:08:57 +0000
asID:                     52639
IP address blocks:        168.195.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d7:cd:80:9c:a9:dd:fd:8d:ed:50:e6:db:c0:9b:dc:68:96:d5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 20 17:03:57 2023 GMT
            Not After : Nov 18 17:08:57 2024 GMT
        Subject: CN=9908F5D5152BC2C84EA17B32ACFF709F7947B8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:c9:05:6f:3d:1d:29:cd:e9:39:2e:f8:d5:
                    4b:08:2f:c8:99:56:41:9e:26:67:d5:1b:ad:68:28:
                    0f:93:05:12:e0:bb:8e:6c:bb:be:39:02:52:3e:15:
                    a6:14:79:29:2f:7b:b0:60:cb:47:66:ec:04:ca:ed:
                    8a:75:26:9e:ad:f7:3b:b0:12:79:40:6b:63:49:05:
                    d4:33:22:45:11:a7:c1:be:02:50:af:70:46:5c:aa:
                    f4:b5:b7:90:15:c0:6c:7d:bd:43:d7:ea:03:5b:e1:
                    bc:9b:4d:47:67:dc:28:af:2a:5c:8a:e7:86:bf:8b:
                    dd:56:35:dd:00:ce:2c:c8:04:53:fc:b2:60:61:52:
                    30:96:e8:12:16:d2:f3:39:43:fc:e2:2f:45:19:30:
                    44:56:1f:2b:5b:38:c0:7f:c1:f7:48:8b:3f:07:c8:
                    8f:5d:15:b4:cb:db:8e:50:21:ac:e3:ab:ec:b3:c5:
                    ec:f4:ff:75:d9:03:fd:15:33:11:44:29:b0:c8:ed:
                    7c:a9:cf:a7:65:1d:8c:8c:5f:c6:be:50:57:fb:3f:
                    66:d5:5d:c7:8a:2c:38:40:3c:c4:f3:3a:8b:f6:f4:
                    d2:33:63:31:66:e1:56:6b:b3:1a:ab:aa:b9:83:a4:
                    29:ff:89:3e:fb:70:55:db:ad:3e:d6:87:01:7f:28:
                    3a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:08:F5:D5:15:2B:C2:C8:4E:A1:7B:32:AC:FF:70:9F:79:47:B8:E7
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:78:10:d3:1d:64:19:15:30:79:fc:f3:37:27:a0:f1:2a:f2:
         43:bb:bb:85:5d:ea:22:f2:93:24:0a:ae:3e:db:46:8e:a4:6c:
         1e:5d:a1:e5:05:a0:89:4d:10:03:bd:07:2e:dd:7c:78:14:44:
         5b:ef:71:3a:9e:f3:06:23:fa:9d:7f:5f:74:f6:eb:1b:40:0e:
         1f:ed:aa:c9:b0:33:82:e6:07:f8:e9:c7:c5:de:79:dd:4c:2a:
         d8:00:d4:c8:4c:0f:5c:03:c5:cd:4b:9a:41:9f:ea:b1:c9:5b:
         4c:63:ee:e8:21:c1:e1:1c:07:4d:a8:ba:e6:9e:28:83:57:88:
         ab:94:07:41:85:92:90:67:51:91:91:12:65:3d:24:3f:c0:c9:
         9d:76:ba:5c:50:32:3b:79:52:26:44:49:af:2f:77:5f:1b:8d:
         98:62:1e:b7:f8:7e:2b:7d:62:74:4d:1a:bb:8a:d0:de:84:fd:
         75:35:63:a0:59:7e:db:be:31:d8:35:91:94:b0:78:a9:d8:98:
         77:85:67:25:e7:2a:47:59:10:92:0d:0c:cd:d3:70:47:74:c4:
         62:da:84:df:79:66:d7:ea:d9:67:66:19:a5:09:fb:3c:c9:61:
         fb:44:57:42:54:8e:e0:f1:01:08:ac:2a:fb:3f:3d:1f:fc:8d:
         62:de:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:27 2025 by rpki-client