Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
File:                     3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (raw, json)
Hash identifier:          r4X+qVGniGDQO6Asf5KMfbMgkM5BLmTVX/4zV0OUFv0=
Subject key identifier:   E5:62:FF:A1:58:76:B4:53:08:76:72:7D:09:D5:FB:55:CE:7A:FD:F2
Certificate issuer:       /CN=B322D42ABD645759DF392C1454BDCEB01C3E1A83
Certificate serial:       603BA6938C69EB12184600EB13A7BCE207E71999
Authority key identifier: B3:22:D4:2A:BD:64:57:59:DF:39:2C:14:54:BD:CE:B0:1C:3E:1A:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B322D42ABD645759DF392C1454BDCEB01C3E1A83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
Signing time:             Tue 04 Feb 2025 19:45:15 +0000
ROA not before:           Tue 04 Feb 2025 19:40:15 +0000
ROA not after:            Tue 03 Feb 2026 19:45:15 +0000
asID:                     265487
IP address blocks:        168.197.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3b:a6:93:8c:69:eb:12:18:46:00:eb:13:a7:bc:e2:07:e7:19:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B322D42ABD645759DF392C1454BDCEB01C3E1A83
        Validity
            Not Before: Feb  4 19:40:15 2025 GMT
            Not After : Feb  3 19:45:15 2026 GMT
        Subject: CN=E562FFA15876B4530876727D09D5FB55CE7AFDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:19:4b:10:8d:0f:f1:b9:4a:37:ef:a8:04:
                    c9:28:b2:e7:67:33:c7:d2:63:9a:c6:58:4f:65:4c:
                    44:1a:9a:90:02:6b:74:9a:4d:d5:79:f2:f7:b4:38:
                    f2:6f:ae:19:9f:1c:8b:8f:39:06:8b:13:4c:f7:6e:
                    21:0b:21:8a:ff:33:42:ce:ff:5c:f6:41:9c:d3:b3:
                    84:c1:f2:9d:08:ce:f9:79:a4:06:c3:2a:df:9f:33:
                    5c:d6:3a:eb:6e:6a:fc:d1:1b:0f:77:61:71:0a:2d:
                    64:bc:c3:68:6b:11:b2:a6:9e:72:5e:ad:0a:20:c6:
                    de:0a:21:23:d3:79:f4:93:12:40:4e:05:7a:de:eb:
                    c0:70:ef:d7:ab:37:33:31:8b:b4:f8:36:d8:6c:14:
                    16:75:ae:64:7c:01:e0:1d:1f:c7:0a:d3:f5:a9:8d:
                    44:73:21:24:2a:46:be:99:60:e0:b8:6d:5f:1a:84:
                    6f:ce:d9:20:bf:61:cd:f2:58:4c:c8:52:2b:d1:e7:
                    1a:5e:65:09:b2:f1:cf:c2:83:e0:b7:6d:33:c9:ac:
                    ff:be:eb:38:8e:21:c0:6a:a8:ff:49:b6:92:f5:ba:
                    51:c8:18:12:95:c3:53:3b:ff:c5:f5:44:62:03:f1:
                    64:41:3f:aa:fb:b5:fc:4b:62:5b:8c:66:9c:e7:21:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:FF:A1:58:76:B4:53:08:76:72:7D:09:D5:FB:55:CE:7A:FD:F2
            X509v3 Authority Key Identifier:
                keyid:B3:22:D4:2A:BD:64:57:59:DF:39:2C:14:54:BD:CE:B0:1C:3E:1A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/B322D42ABD645759DF392C1454BDCEB01C3E1A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B322D42ABD645759DF392C1454BDCEB01C3E1A83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:66:b7:bf:4b:e7:02:1c:0e:1a:95:65:22:32:2b:e8:1d:
         85:68:81:87:61:7b:92:f1:9f:4e:7b:21:5a:38:5d:48:4f:da:
         ea:c7:7a:b7:d4:2e:c9:69:cd:52:8c:1f:4b:41:ea:7f:10:d3:
         73:f4:4f:b1:8b:ed:91:3b:20:7a:c0:a1:c1:77:2d:e4:ba:3c:
         22:3b:89:13:f1:f2:91:40:6b:da:52:f5:ef:fc:27:f2:fa:05:
         4f:f4:42:1d:5f:d3:3c:b0:d1:14:a7:39:b1:14:ae:f1:a5:e4:
         29:76:57:ae:62:55:e8:be:d2:f4:ec:94:c0:02:50:b6:77:be:
         3d:cc:f4:be:ed:88:bc:b3:4c:64:a7:68:9e:5c:ad:20:c5:e0:
         85:a9:bf:b3:4d:0c:75:0b:10:00:08:5f:b3:17:2c:62:39:8f:
         e5:c4:50:85:9f:29:c6:51:2f:f3:34:5b:55:2e:73:1e:81:de:
         4c:46:c6:15:b8:62:e2:9a:34:63:3e:8e:72:41:b4:2b:65:68:
         de:fb:57:4a:7e:ab:d8:e7:9d:62:2d:b5:2b:c9:e8:28:5f:cf:
         b0:6c:31:0b:33:b3:6c:53:3f:b6:f0:ea:9b:0c:c3:02:c0:4e:
         3d:15:ae:42:3e:b6:92:29:ef:70:d6:8f:6e:93:44:a4:db:65:
         ed:e5:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:42 2025 by rpki-client