Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa
File:                     3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa (raw, json)
Hash identifier:          sbmTIOq4KIipj9GlOxMWA6CVOF8h2hA9YjixUU4SXnE=
Subject key identifier:   9F:41:7E:77:AF:74:FF:84:2E:77:F3:2B:A1:1A:FE:FB:52:E6:6C:27
Certificate issuer:       /CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
Certificate serial:       1A32E8B2785EA87E3EA149501787128A4D95F5DF
Authority key identifier: 34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa
Signing time:             Sat 19 Aug 2023 16:00:00 +0000
ROA not before:           Sat 19 Aug 2023 15:55:00 +0000
ROA not after:            Sat 17 Aug 2024 16:00:00 +0000
asID:                     264862
IP address blocks:        168.181.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:32:e8:b2:78:5e:a8:7e:3e:a1:49:50:17:87:12:8a:4d:95:f5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34510C8CD19CD2BA841BFCD90C3813E80D522A3F
        Validity
            Not Before: Aug 19 15:55:00 2023 GMT
            Not After : Aug 17 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:67:40:f0:2b:c7:40:5a:dd:84:fa:5d:b1:
                    6a:a3:a2:9c:40:c7:a9:10:d1:7a:86:4f:f1:06:97:
                    6b:d8:4f:11:bb:c1:4b:bd:43:f1:19:d6:70:b1:66:
                    2b:93:49:87:c5:ba:d2:65:90:28:99:b9:ca:fc:be:
                    ce:b8:4a:fa:4b:f3:9d:e3:73:6e:95:cb:f4:96:69:
                    38:61:62:56:db:4c:95:cc:d9:fc:92:eb:fa:50:3e:
                    c1:e4:80:a1:8f:69:dc:e4:15:74:94:a6:6b:f0:19:
                    aa:9a:ee:0f:ea:22:42:ca:fc:2b:99:22:9a:84:b7:
                    24:2e:98:c0:f2:c8:4d:f1:5d:6c:0e:93:b8:e8:90:
                    6a:ac:91:48:d3:b7:fd:57:a3:53:a2:91:4f:60:96:
                    45:9e:15:5c:b1:fe:32:9e:27:3c:f5:e6:30:a5:a6:
                    fa:30:aa:c0:5a:03:35:6b:b9:7d:21:75:07:e6:1e:
                    fb:0a:a1:55:ae:e0:98:56:92:82:43:00:8e:e4:67:
                    3a:b1:6e:8f:9c:d2:d6:ff:36:71:02:7e:ab:00:56:
                    f5:b1:1e:8e:6b:8f:49:79:a4:ad:3b:8b:2f:86:8d:
                    d4:33:28:5d:17:c7:90:18:0f:a0:56:b6:54:a9:f1:
                    6b:70:f8:96:aa:5d:04:b8:53:77:fd:e3:90:a2:38:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:41:7E:77:AF:74:FF:84:2E:77:F3:2B:A1:1A:FE:FB:52:E6:6C:27
            X509v3 Authority Key Identifier:
                keyid:34:51:0C:8C:D1:9C:D2:BA:84:1B:FC:D9:0C:38:13:E8:0D:52:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34510C8CD19CD2BA841BFCD90C3813E80D522A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:01:53:c5:a0:60:2f:4f:85:16:ce:88:1f:52:26:db:0f:
         97:88:bd:0a:c4:48:bc:29:a3:f0:5b:95:67:18:ee:dd:26:4f:
         7e:9f:80:e0:27:3a:fd:1e:ca:92:ea:f0:d2:a3:cf:8c:6e:62:
         e0:39:99:38:1f:78:cf:c2:59:35:db:9b:b7:c6:68:e3:fd:83:
         6b:9b:dc:7f:1c:7c:f7:ab:7d:82:e0:99:ff:66:03:10:c7:3b:
         ac:ed:b4:3a:a9:9e:f8:18:5a:fd:f9:6f:f1:58:af:92:57:0b:
         66:72:79:08:c0:20:11:2f:ac:37:26:84:97:bb:f5:7f:95:d7:
         d9:5f:62:7d:d1:6f:b7:3b:d1:08:00:ef:95:86:12:dd:13:dd:
         72:7c:2a:25:6c:14:c8:3c:6b:9c:44:63:c0:e5:0d:78:4a:fb:
         fa:0b:e5:b3:17:c1:63:b5:6e:14:2f:06:fe:2d:57:b2:f7:a0:
         29:48:0b:a4:32:e8:ba:0b:7f:ac:cc:91:44:71:39:d8:60:91:
         ef:b3:d4:84:4a:82:07:55:0b:40:88:03:b0:7a:43:43:bc:71:
         28:a2:2c:d4:87:65:55:b1:57:9d:5f:11:1b:94:fd:76:f0:92:
         ce:f1:f6:a8:90:2a:9a:cb:72:86:91:31:2b:78:0b:7d:bf:63:
         e3:c1:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:38 2025 by rpki-client