Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
File:                     3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa (raw, json)
Hash identifier:          JJIjjNwYAbAccCErtdm0yZIr/zOwjlKtmyUyJdJmkzw=
Subject key identifier:   82:F5:31:90:8C:6B:B2:93:BB:22:4B:D6:70:DF:22:21:CA:38:A4:A2
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       5F22BE6C96A2799AC8BA740021F38D78337D7085
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     19200
IP address blocks:        168.232.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:22:be:6c:96:a2:79:9a:c8:ba:74:00:21:f3:8d:78:33:7d:70:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:d9:28:14:08:8e:81:05:a6:ba:72:83:a7:
                    d4:59:4d:7d:a4:a9:b2:06:41:5e:ce:bd:7e:93:ee:
                    83:3d:0a:e3:b6:ec:a6:f3:3c:c0:c1:f0:4f:a7:cb:
                    d2:c5:a5:b7:b1:52:8f:ec:a0:04:d5:d1:e5:24:39:
                    80:28:ca:3d:db:2d:7d:13:4b:4d:43:58:d2:62:51:
                    37:cd:14:78:39:8c:cf:12:f4:0a:2d:87:9f:ae:5e:
                    43:52:a2:ac:fe:27:36:4d:b8:3b:05:64:86:c7:68:
                    47:0f:f5:95:6c:c5:76:b4:56:b2:64:02:fe:82:83:
                    3b:84:70:30:3d:bd:28:62:74:9d:a3:44:0c:e5:53:
                    b2:db:65:2d:b3:88:21:c5:1d:07:21:e7:6d:02:92:
                    0c:a7:bf:67:e9:1f:6a:a5:09:4f:bd:2a:40:6b:b0:
                    55:ea:e4:84:b8:99:af:bf:ab:b8:31:7b:7d:de:9d:
                    c6:26:e5:eb:d8:51:b1:3d:4a:93:09:25:07:ea:a2:
                    8b:17:1f:b7:e5:06:1d:46:fe:82:04:fb:4f:82:4d:
                    26:f7:ff:e1:0d:02:36:ab:c2:11:44:82:57:c9:cd:
                    38:1c:11:98:ed:55:8c:bc:1d:ef:1c:1d:37:e9:91:
                    8f:d0:5d:99:70:90:54:5a:6c:ff:bb:65:8c:f4:b8:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:31:90:8C:6B:B2:93:BB:22:4B:D6:70:DF:22:21:CA:38:A4:A2
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:79:04:e2:ee:25:65:5e:41:33:fd:11:ee:06:77:c3:ed:2f:
         cd:97:20:06:0a:c7:29:0c:66:34:10:77:d4:c5:ce:9d:3d:3c:
         91:dd:d9:aa:7e:e5:c6:48:23:09:d4:43:85:4c:58:93:1e:01:
         f1:e7:07:54:66:93:f2:a0:f4:a2:32:3b:1d:d7:01:a8:eb:fe:
         7d:05:84:0e:60:26:dc:a8:97:1a:79:34:90:10:7e:33:ba:ac:
         8e:ac:e3:58:8d:56:bc:75:d5:1c:27:1b:ae:dc:7c:a0:d3:90:
         21:3e:6a:1f:c9:13:aa:ff:ab:cb:c0:7f:5e:7b:9c:68:b6:81:
         c3:d8:43:07:08:2b:ec:21:cb:79:03:9f:a9:fa:55:90:32:af:
         9d:c7:c7:fe:0e:7c:52:6a:01:c9:fa:3e:ef:83:15:b6:87:21:
         04:4f:f1:f8:3a:53:e7:c2:28:25:36:d9:1b:c0:0f:23:01:51:
         02:31:cb:55:40:8e:6f:47:98:9d:b5:32:db:43:40:11:e8:31:
         29:b4:76:fd:5c:35:29:61:5b:e9:66:83:45:45:35:f4:b2:07:
         5a:fd:7c:7a:be:ee:81:f0:87:f1:5f:72:74:23:93:f9:6a:4f:
         f2:e7:e8:d1:20:e0:69:64:2d:ab:b4:88:ad:e0:34:e6:fa:44:
         e9:66:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:16 2025 by rpki-client