Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa
File:                     3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa (raw, json)
Hash identifier:          cb4LNhy6+eTyj1mWRjVRDTIYD/+EjEPqIfglS2pFyNs=
Subject key identifier:   8F:ED:EA:A7:F4:0B:DE:37:2B:D5:D5:51:42:16:1A:7E:9E:C9:35:ED
Certificate issuer:       /CN=D46690AE7220B869E1B30A37343EBAD25DDC5571
Certificate serial:       15D1C1833879DA14955831EBE793ED678A178921
Authority key identifier: D4:66:90:AE:72:20:B8:69:E1:B3:0A:37:34:3E:BA:D2:5D:DC:55:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46690AE7220B869E1B30A37343EBAD25DDC5571.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa
Signing time:             Wed 10 Jan 2024 16:54:26 +0000
ROA not before:           Wed 10 Jan 2024 16:49:26 +0000
ROA not after:            Wed 08 Jan 2025 16:54:26 +0000
asID:                     267427
IP address blocks:        164.163.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d1:c1:83:38:79:da:14:95:58:31:eb:e7:93:ed:67:8a:17:89:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46690AE7220B869E1B30A37343EBAD25DDC5571
        Validity
            Not Before: Jan 10 16:49:26 2024 GMT
            Not After : Jan  8 16:54:26 2025 GMT
        Subject: CN=8FEDEAA7F40BDE372BD5D55142161A7E9EC935ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:b6:b9:cd:af:3b:3c:d9:7c:5a:1c:2d:99:
                    dd:4e:36:6f:8b:e5:90:9d:29:fe:9d:94:3a:67:ac:
                    5e:69:13:ab:bf:a1:81:ff:c4:f4:a3:ed:16:49:e8:
                    c7:ca:51:f2:97:0b:92:84:10:b5:3e:31:a1:4e:22:
                    13:4c:bc:7c:9d:69:f9:c1:05:e6:8d:d8:f6:b1:a3:
                    18:fb:c2:53:57:46:df:79:01:69:9b:c6:a9:da:a9:
                    19:31:44:cf:56:57:d2:93:ff:24:12:b9:ab:7f:6a:
                    92:12:c8:c6:3d:83:4f:cd:10:5f:ae:01:c0:5a:d2:
                    4a:dc:9a:e2:e3:24:f0:19:20:ee:42:ef:ec:bb:fb:
                    6b:3b:5f:c4:22:8f:18:53:fa:0e:bb:c5:63:8b:2e:
                    f0:62:c2:85:23:5d:93:11:24:22:be:16:5d:3a:0c:
                    ad:c4:30:7c:d4:75:e7:1e:7b:48:86:4b:39:3e:4e:
                    46:be:f3:2c:a5:4c:47:08:35:12:c6:2e:c9:c1:c0:
                    06:d4:bb:f7:0d:6e:30:80:74:a6:1d:c3:a2:12:31:
                    11:e3:98:de:b0:ec:85:69:69:f5:7a:61:36:b6:f2:
                    57:43:51:39:c0:24:9e:39:0e:74:eb:2d:22:20:b2:
                    8c:27:dd:f1:f2:c6:20:fb:fe:6e:25:69:0a:b6:c6:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:EA:A7:F4:0B:DE:37:2B:D5:D5:51:42:16:1A:7E:9E:C9:35:ED
            X509v3 Authority Key Identifier:
                keyid:D4:66:90:AE:72:20:B8:69:E1:B3:0A:37:34:3E:BA:D2:5D:DC:55:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/D46690AE7220B869E1B30A37343EBAD25DDC5571.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46690AE7220B869E1B30A37343EBAD25DDC5571.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:41:09:32:bf:2c:66:3c:dd:ce:0f:e9:86:22:b7:c0:ea:44:
         ad:bf:92:03:05:b0:f7:d4:57:77:0a:35:3b:af:a6:06:de:76:
         53:66:53:19:4b:3e:d4:b6:77:42:a3:b5:3f:2e:fa:89:50:b0:
         09:78:26:7e:1c:8a:e7:7e:e6:fd:4c:58:54:b8:19:3d:5e:f5:
         38:c6:59:59:8c:18:1f:be:92:79:0e:92:19:74:a7:fe:33:80:
         9a:39:21:a5:da:e1:49:b1:dc:05:93:63:ab:18:4f:40:db:55:
         0f:fe:a0:0f:7f:3f:49:91:0f:a2:10:dc:83:ce:c9:9e:1a:a3:
         5d:4d:2f:9b:bd:55:e6:76:d5:59:1d:54:2c:3f:c5:50:04:96:
         78:7a:b3:06:72:3a:5e:eb:7d:22:08:25:1f:11:6a:d2:41:3c:
         83:a1:a2:32:93:07:97:8f:75:74:c9:8b:40:6a:5b:92:2d:91:
         d8:4e:1e:32:9a:61:1e:c8:ff:16:d1:5f:d1:e7:03:f7:21:03:
         36:01:3a:76:29:9a:55:1e:31:50:4c:f4:b5:11:8d:ad:87:f7:
         47:80:d8:a6:fa:61:ac:00:16:a5:b6:12:de:79:1d:9e:66:8f:
         54:4b:fa:22:0d:46:9a:f6:72:df:10:6d:bd:1f:33:2e:fb:c7:
         89:a9:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:12:06 2025 by rpki-client