Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa
File:                     3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier:          b/WWfFwAgHydQyLZDgW7/ZVdHqNuUtz5pp1rPvivVpQ=
Subject key identifier:   2E:2A:67:8F:5A:CB:A2:9F:04:47:CE:8F:8E:A5:63:FF:32:D8:04:C1
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       746CA12093EE9B4A0A7A3040656D91CB8EEF0B0F
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:44 +0000
ROA not before:           Fri 02 Feb 2024 00:11:44 +0000
ROA not after:            Fri 31 Jan 2025 00:16:44 +0000
asID:                     265181
IP address blocks:        170.233.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6c:a1:20:93:ee:9b:4a:0a:7a:30:40:65:6d:91:cb:8e:ef:0b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:44 2024 GMT
            Not After : Jan 31 00:16:44 2025 GMT
        Subject: CN=2E2A678F5ACBA29F0447CE8F8EA563FF32D804C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:3d:94:12:c7:82:fd:aa:84:aa:49:d6:8d:
                    c3:57:e8:28:58:6d:24:dc:af:d9:2e:14:96:fa:5f:
                    48:cb:11:e5:e1:f6:41:d9:25:6f:be:b5:33:e9:19:
                    1b:65:e0:f6:96:f2:57:22:07:58:c7:bb:7c:1e:0f:
                    a8:73:7c:d8:7e:b0:39:ef:cc:54:a6:9f:09:e0:70:
                    d2:a2:8e:75:77:b2:e3:d6:62:04:e9:98:0f:90:1f:
                    eb:f7:48:12:2b:41:00:65:91:2c:83:ca:09:05:ab:
                    36:5b:49:81:76:0c:fd:b1:fe:be:a2:b2:b1:b1:20:
                    0d:5d:1f:44:15:60:9f:7a:27:78:df:01:e4:e0:f4:
                    13:bc:00:bb:16:70:73:09:b2:9c:6e:ac:4f:7e:0f:
                    65:7b:43:6b:e9:39:3e:ca:12:bb:31:d6:c7:d5:d1:
                    cd:d4:2b:5f:b4:aa:f1:38:f5:b5:cd:35:39:d1:24:
                    b8:21:9a:ce:72:71:6f:c7:09:cd:2e:fb:0a:3f:82:
                    16:47:14:9a:72:e1:2a:2e:c1:1a:ff:68:f9:d7:d9:
                    7f:5c:1c:ed:42:e5:63:81:78:11:7b:c2:77:ca:28:
                    96:24:c2:c4:6c:19:48:db:ea:44:a3:2c:03:c7:b3:
                    36:15:f7:33:b8:54:58:b9:c5:42:a2:9a:13:1d:22:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2A:67:8F:5A:CB:A2:9F:04:47:CE:8F:8E:A5:63:FF:32:D8:04:C1
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32332d3233203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:79:3c:af:1c:5c:e8:3e:81:22:8e:8c:19:69:b2:a0:6e:75:
         da:2a:8b:06:28:35:2d:74:19:3b:bc:80:66:a9:98:72:8c:cd:
         4d:44:4c:9f:8f:7a:11:f7:df:2a:48:37:44:25:34:70:fa:52:
         e0:02:ab:78:17:7a:68:9e:98:a7:f7:05:aa:28:16:67:0a:4a:
         47:fa:ca:bc:1d:25:28:79:4a:60:2a:c0:11:b6:ff:f9:1a:11:
         e4:1a:37:e1:26:7c:ed:3e:ba:60:58:7e:a6:62:ea:c5:2b:c8:
         57:41:8d:6f:f0:79:b0:97:80:5a:cc:3a:7e:c1:27:99:1f:a6:
         67:8f:0b:e8:6c:7e:a5:4f:64:5a:50:69:c5:15:5d:d9:7b:d5:
         23:10:3a:b3:14:d4:99:82:d1:46:31:16:f0:a6:4c:17:a5:0f:
         e5:66:f4:ba:b4:45:8c:66:0c:4d:ba:83:34:78:cc:9a:6c:5b:
         7d:f8:c3:5b:6d:37:e4:e9:70:00:a6:f6:31:f3:7c:c4:af:c4:
         ee:92:34:43:49:2a:74:9b:66:ad:9b:f6:aa:0d:01:41:4f:7a:
         de:7c:1f:c8:6c:1e:b0:45:aa:45:90:65:c0:f0:b4:22:d2:f1:
         70:fa:68:a9:df:1e:e6:ce:e5:25:14:fc:0a:5d:12:4b:e6:89:
         4e:37:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:16:00 2025 by rpki-client