Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32342d3234203d3e20323636333139.roa
File:                     3137302e3233382e3132382e302f32342d3234203d3e20323636333139.roa (raw, json)
Hash identifier:          v8lI47OW5Qb0Z2cH7eapWOXG7d3iw69AEejGqQuL0uk=
Subject key identifier:   61:DD:93:26:EB:B8:E1:C2:A7:39:0C:2A:3D:8A:08:2B:65:1E:B0:B2
Certificate issuer:       /CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
Certificate serial:       4540399B700DAB2E9175B61B8CB305E654F02479
Authority key identifier: 3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32342d3234203d3e20323636333139.roa
Signing time:             Fri 26 May 2023 19:00:00 +0000
ROA not before:           Fri 26 May 2023 18:55:00 +0000
ROA not after:            Fri 24 May 2024 19:00:00 +0000
asID:                     266319
IP address blocks:        170.238.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:40:39:9b:70:0d:ab:2e:91:75:b6:1b:8c:b3:05:e6:54:f0:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Validity
            Not Before: May 26 18:55:00 2023 GMT
            Not After : May 24 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100D8B693A0CFA450FD221B6C8833853895B1EA21F51257B9CFC5176EFF33198DECA8A10CB6D88F9460094A978D80486B3E8DFE9831AE2DBB0147DE4BB060A9D5A5B44790D8EEFC5858204A4B14C70B1B0AF91F4326A2D7E93E0A0ADB70B1A8CC94E5A4FA508A68214F766E603ED291C8D5E00F3CCA7EC37746422316CCD58F98F713901EB4305217B2589A1954605571D18CB77C308CF2527F752D0922DF738ED6F5581D5AC013AFE152A858CDD13618F1140975F10E2A1D1C869D5CA1EAD9D09B08EB5F190E9417A66075DB6AB904801C2A1F1148180E4174B6A7A2C525AF6E397390C77FD5F471B35E8A773D035C7DD7A51FC235EF192F5D7A9CF5F27BA49FFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:93:a0:cf:a4:50:fd:22:1b:6c:88:33:85:
                    38:95:b1:ea:21:f5:12:57:b9:cf:c5:17:6e:ff:33:
                    19:8d:ec:a8:a1:0c:b6:d8:8f:94:60:09:4a:97:8d:
                    80:48:6b:3e:8d:fe:98:31:ae:2d:bb:01:47:de:4b:
                    b0:60:a9:d5:a5:b4:47:90:d8:ee:fc:58:58:20:4a:
                    4b:14:c7:0b:1b:0a:f9:1f:43:26:a2:d7:e9:3e:0a:
                    0a:db:70:b1:a8:cc:94:e5:a4:fa:50:8a:68:21:4f:
                    76:6e:60:3e:d2:91:c8:d5:e0:0f:3c:ca:7e:c3:77:
                    46:42:23:16:cc:d5:8f:98:f7:13:90:1e:b4:30:52:
                    17:b2:58:9a:19:54:60:55:71:d1:8c:b7:7c:30:8c:
                    f2:52:7f:75:2d:09:22:df:73:8e:d6:f5:58:1d:5a:
                    c0:13:af:e1:52:a8:58:cd:d1:36:18:f1:14:09:75:
                    f1:0e:2a:1d:1c:86:9d:5c:a1:ea:d9:d0:9b:08:eb:
                    5f:19:0e:94:17:a6:60:75:db:6a:b9:04:80:1c:2a:
                    1f:11:48:18:0e:41:74:b6:a7:a2:c5:25:af:6e:39:
                    73:90:c7:7f:d5:f4:71:b3:5e:8a:77:3d:03:5c:7d:
                    d7:a5:1f:c2:35:ef:19:2f:5d:7a:9c:f5:f2:7b:a4:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DD:93:26:EB:B8:E1:C2:A7:39:0C:2A:3D:8A:08:2B:65:1E:B0:B2
            X509v3 Authority Key Identifier:
                keyid:3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32342d3234203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:3c:c7:b2:6c:04:9b:66:38:de:97:4c:bf:3c:f1:c2:cd:
         07:72:e5:ee:72:99:f1:fa:b3:c0:17:97:bd:fb:c7:7a:52:95:
         f2:f1:6e:67:1a:5b:bf:6d:cf:23:3c:60:c2:23:f8:e8:ac:2f:
         01:70:57:6d:e4:2c:c4:49:21:0a:f7:89:87:34:da:62:f8:73:
         94:b8:cf:d2:01:af:cc:c7:7b:9d:71:21:fa:6d:c0:aa:e6:3a:
         f6:33:97:4b:0e:2f:8e:58:2e:5d:0f:40:b0:09:6e:07:4d:62:
         7c:c9:60:f5:45:f0:62:86:13:5c:83:12:dd:19:ac:f7:cf:f1:
         4c:4c:f8:d8:6d:72:6a:54:78:92:06:ba:6e:b6:6f:d2:be:51:
         2e:88:7f:39:e7:1c:91:30:ca:c0:1f:da:25:f9:2b:ed:86:06:
         a6:ad:f0:0c:0d:85:b5:f6:9b:4f:ad:17:9d:e6:6e:fb:10:e6:
         bd:e8:57:e7:75:b6:b0:fb:4a:a7:22:b1:e4:d0:08:d7:47:ee:
         df:f5:d7:b3:93:0b:f2:67:08:22:f5:23:e3:ea:aa:6f:06:c7:
         35:7a:13:1a:b2:e9:f6:31:ef:6a:c7:14:0d:12:a1:fa:c3:3e:
         92:c8:3e:3b:4e:5a:ae:d4:7f:45:4e:77:ba:81:0f:11:67:5c:
         ed:37:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:02 2025 by rpki-client