Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32342d3234203d3e20323637333838.roa
File:                     3133322e3235352e34342e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          E9okUcAedgWeatp1gjpa2TCCKpChm/HyhAB77rrqt4g=
Subject key identifier:   36:EE:5F:4C:21:D5:F7:1F:E7:DB:27:84:1D:15:C5:3F:74:07:B3:E5
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       2050A8C483FD81A3400D62FE107ADD1B7553B69A
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:59 +0000
ROA not before:           Mon 28 Oct 2024 14:35:59 +0000
ROA not after:            Mon 27 Oct 2025 14:40:59 +0000
asID:                     267388
IP address blocks:        132.255.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:50:a8:c4:83:fd:81:a3:40:0d:62:fe:10:7a:dd:1b:75:53:b6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:59 2024 GMT
            Not After : Oct 27 14:40:59 2025 GMT
        Subject: CN=36EE5F4C21D5F71FE7DB27841D15C53F7407B3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:06:49:a1:03:99:7e:92:b7:d5:e9:8d:8f:
                    10:ea:07:a0:63:ec:c6:d1:34:d7:f4:86:44:d9:37:
                    4b:cf:0a:16:30:c1:cc:5d:8e:a5:cd:90:86:e9:9d:
                    5a:0e:51:ff:a0:0e:dc:59:b6:fb:93:c8:b6:34:0e:
                    1b:cd:7d:43:7a:a0:13:92:00:98:60:92:ae:a8:e8:
                    19:af:27:e6:0b:50:e9:b4:ee:90:0b:05:e5:20:7c:
                    80:8e:82:29:ed:25:10:76:63:34:28:ec:7a:2c:d2:
                    06:ce:7e:e9:38:18:14:1b:71:f4:47:9d:84:d4:ab:
                    21:c0:0d:df:37:6e:9b:a3:48:5d:dc:cb:2e:5a:3a:
                    35:0a:2e:23:32:d3:10:21:94:15:40:89:b1:37:b6:
                    c1:c0:67:ba:0a:c8:8d:b3:21:fd:22:f4:c6:0c:72:
                    3a:2b:2a:c5:2a:08:94:f5:a3:5f:82:a6:f3:9d:71:
                    5f:56:68:ea:cb:a3:76:85:c3:43:57:df:ca:37:e6:
                    5c:f6:f3:60:d0:67:5f:bd:cc:19:1a:07:d8:b5:28:
                    86:d2:ca:15:9f:04:af:17:f3:fc:21:30:40:b8:77:
                    9d:74:d1:dd:9b:d2:93:c5:94:bf:8f:fc:ae:99:8b:
                    4e:49:1d:22:8f:d8:b7:d2:9d:92:98:99:ed:26:1b:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EE:5F:4C:21:D5:F7:1F:E7:DB:27:84:1D:15:C5:3F:74:07:B3:E5
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:f6:9f:c5:ff:57:00:fb:dc:f6:2b:74:90:97:6e:ba:ef:
         d4:5c:9e:39:df:37:97:13:16:17:cc:fe:4d:f4:9a:05:29:d0:
         a6:35:55:cf:d5:ef:ea:0e:cf:ff:61:e4:f8:c0:23:e8:c4:dc:
         70:e3:f2:7a:8e:46:2a:70:7b:62:6a:2f:0b:77:58:e3:a4:9e:
         54:57:e5:9a:1d:b6:03:99:5e:c3:2e:fc:24:ef:e4:96:70:b7:
         00:1b:00:a7:13:00:62:2e:ce:a0:8a:e7:cc:6c:86:49:2f:f4:
         b3:db:51:a7:0d:8a:49:c0:06:5b:f7:5a:d9:a7:74:31:e7:58:
         a8:c4:6c:d5:7a:b3:86:e2:fe:24:2e:01:3f:5c:73:60:3d:1a:
         fb:f5:52:23:a9:93:2d:c2:27:31:00:2d:d0:2e:22:2b:72:90:
         0d:ab:0b:cd:0d:8e:82:9b:cb:dd:d8:25:3d:8b:28:36:34:f2:
         a8:39:bf:d9:24:15:db:46:c1:77:93:d2:38:d0:a2:01:13:82:
         03:22:84:8b:f4:40:1a:99:11:ba:c6:c0:da:0b:22:a7:bd:8e:
         a5:17:2c:68:51:f6:6d:b3:27:f9:d0:1a:9f:d0:b1:62:8c:72:
         01:9c:86:15:88:54:b0:db:2d:a0:09:4f:a0:3a:64:e5:c8:2a:
         5e:2b:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:52:47 2025 by rpki-client