Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa
File:                     3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa (raw, json)
Hash identifier:          WDsCApGzVqtw3ONHaDTWGjMpy3RqUmRSUZrsc0sqqXI=
Subject key identifier:   C9:C4:A6:16:A8:8C:BC:69:39:21:4B:9E:D1:BA:88:98:A6:6D:87:C6
Certificate issuer:       /CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
Certificate serial:       3D69F5E4ECC9E15533FFDB876EAC16949335629F
Authority key identifier: A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa
Signing time:             Thu 18 Jul 2024 19:26:00 +0000
ROA not before:           Thu 18 Jul 2024 19:21:00 +0000
ROA not after:            Thu 17 Jul 2025 19:26:00 +0000
asID:                     264047
IP address blocks:        143.137.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:69:f5:e4:ec:c9:e1:55:33:ff:db:87:6e:ac:16:94:93:35:62:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
        Validity
            Not Before: Jul 18 19:21:00 2024 GMT
            Not After : Jul 17 19:26:00 2025 GMT
        Subject: CN=C9C4A616A88CBC6939214B9ED1BA8898A66D87C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:74:bd:58:97:33:67:19:c9:08:eb:4e:9e:
                    2f:38:e5:61:f0:35:e5:e9:99:b3:6f:a4:e7:aa:37:
                    0c:71:20:24:06:af:1f:04:ed:49:18:78:d1:04:ba:
                    b3:56:25:19:1f:e1:fd:03:6b:54:86:79:cb:99:78:
                    85:41:51:25:ff:d2:60:2b:48:23:39:89:e3:e7:c6:
                    fe:c6:79:dc:6f:cb:cc:b9:1a:ad:cb:8f:10:2e:72:
                    f0:bb:fc:b0:be:f5:eb:3f:e9:b2:09:23:e6:d6:bb:
                    09:aa:ea:b6:23:49:9f:de:58:ff:b1:dc:a8:e0:19:
                    f8:4b:c0:de:51:f2:6d:6f:68:5e:68:f5:5f:08:f5:
                    26:c9:f4:69:60:a1:cd:1a:e9:a5:f9:ec:5c:2f:e6:
                    b3:11:6d:d7:b0:68:97:3e:fb:31:1b:67:32:47:c7:
                    8b:15:1b:60:33:f5:98:4a:c8:31:5c:8d:98:45:22:
                    6d:06:e2:bd:12:40:d9:78:34:7a:32:e6:15:9d:a0:
                    7b:cd:c9:8d:bc:b5:3c:8f:6d:84:7f:bd:dc:e9:d5:
                    2f:82:e5:ee:18:43:37:6b:e5:f6:5d:ec:01:7b:15:
                    82:57:1d:73:13:c6:3d:5c:f9:6f:0c:12:cf:33:8b:
                    e7:f1:cc:45:70:76:09:16:dc:1f:40:a7:1c:e5:65:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C4:A6:16:A8:8C:BC:69:39:21:4B:9E:D1:BA:88:98:A6:6D:87:C6
            X509v3 Authority Key Identifier:
                keyid:A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:b6:4c:21:e5:84:b7:ea:ac:bb:ce:68:3b:c0:e6:a9:c5:
         48:91:bf:de:7f:2c:58:66:5f:ff:22:f1:4f:a8:44:41:3c:4e:
         da:54:e4:f5:91:d2:e3:71:84:d6:67:55:ac:57:ee:ee:6d:48:
         35:4b:ee:31:ba:e2:73:e0:20:43:12:77:8a:b2:11:9c:b8:62:
         d4:ad:e2:3e:1c:35:ce:53:1a:1e:c5:71:37:2f:7f:28:57:fe:
         0f:53:92:7a:cc:85:25:33:52:4a:aa:2a:d0:dd:45:38:3e:f3:
         11:35:d7:b0:8c:ed:38:2d:4f:10:76:e5:ff:4b:d3:e0:2f:76:
         68:53:46:6b:ac:79:fa:40:78:d3:99:0d:0c:e3:0c:4e:41:6d:
         44:58:7c:80:cb:18:41:ed:e8:31:2e:d4:a1:72:e3:17:57:ef:
         f0:a7:1e:a5:90:5d:b9:ae:10:80:82:ad:ab:15:20:24:c8:f7:
         76:04:c3:6e:6c:1e:f4:b8:0b:8e:af:8b:90:11:09:64:96:32:
         67:68:09:cc:29:ee:65:13:7d:0c:29:cc:9c:55:1e:81:80:7f:
         a6:8d:dc:2e:9c:36:50:50:68:ca:05:4d:a2:d2:72:e3:54:7f:
         4c:82:c2:78:d0:8f:36:b1:c6:b0:8b:ce:24:dc:0e:fa:18:4e:
         b2:fa:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:03 2025 by rpki-client