Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
File:                     3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa (raw, json)
Hash identifier:          avlikntGwovv2kJ+emWyzOqjx2EllsaraFAtkjdLLSg=
Subject key identifier:   2A:65:F4:5C:FC:F0:5E:53:89:2E:62:DD:C6:F0:04:7B:FF:DC:DA:AE
Certificate issuer:       /CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
Certificate serial:       724401D8E1EDD2D5DBE825BB179D0FAB8D0F1AF8
Authority key identifier: A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
Signing time:             Thu 18 Jul 2024 19:26:03 +0000
ROA not before:           Thu 18 Jul 2024 19:21:03 +0000
ROA not after:            Thu 17 Jul 2025 19:26:03 +0000
asID:                     264047
IP address blocks:        143.137.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:44:01:d8:e1:ed:d2:d5:db:e8:25:bb:17:9d:0f:ab:8d:0f:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
        Validity
            Not Before: Jul 18 19:21:03 2024 GMT
            Not After : Jul 17 19:26:03 2025 GMT
        Subject: CN=2A65F45CFCF05E53892E62DDC6F0047BFFDCDAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:39:b1:40:46:09:bc:d2:4c:a0:71:8a:cb:f7:
                    13:fd:ba:87:75:e9:95:9b:28:4f:2a:20:f0:f4:cf:
                    63:3e:af:5b:ce:79:56:f0:ca:a3:44:b9:7f:dc:85:
                    30:73:84:72:ef:c9:d3:0c:0d:3f:00:b6:48:0d:ac:
                    11:09:1a:af:5e:6f:20:76:be:5f:d2:f5:58:79:04:
                    b0:a8:99:2e:b4:77:ca:9a:c1:c1:ff:19:da:aa:c4:
                    88:e7:56:b2:71:a2:26:7a:c6:25:fa:14:65:20:d3:
                    bd:c6:15:00:10:ab:fc:29:4d:12:2e:7c:ff:bf:e5:
                    9e:05:40:2b:95:1c:43:26:1e:26:fd:b6:0f:f4:35:
                    e6:c1:aa:09:aa:50:97:23:05:5c:ae:c5:8d:5d:b2:
                    99:ae:6a:be:fb:2b:9e:84:da:d6:55:62:97:b1:0b:
                    e5:61:f6:24:44:0a:ef:70:0b:9d:b3:2d:66:88:2a:
                    3e:b8:d6:f2:4a:49:4e:2a:a0:1f:71:b4:8d:b3:8c:
                    bc:ff:bc:5f:35:fb:46:25:b5:d1:6b:d6:93:68:d1:
                    67:b1:c0:31:07:ff:11:6f:a8:cb:e1:fb:aa:f4:1c:
                    f6:74:c3:1c:da:8e:15:bb:ad:f8:a6:6c:21:e9:45:
                    f2:f5:69:4e:64:ee:8e:4b:59:23:4e:a5:63:7a:6f:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:F4:5C:FC:F0:5E:53:89:2E:62:DD:C6:F0:04:7B:FF:DC:DA:AE
            X509v3 Authority Key Identifier:
                keyid:A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:fe:03:0b:7b:57:4a:93:b6:24:4a:9a:d6:62:e0:8c:9c:0d:
         9d:4e:12:d2:2c:a8:bd:5f:8a:3c:dd:3e:ca:4f:97:0f:08:8a:
         82:40:f6:b6:32:14:96:d6:95:5d:1c:cf:6e:ea:a9:ab:b5:f0:
         9b:8d:4a:43:9d:17:31:04:bc:64:5c:a1:ce:f7:39:1c:5a:a0:
         a5:d2:31:8f:79:78:db:97:ab:68:9c:30:b1:7b:6b:1e:d0:c3:
         eb:3e:b4:79:4d:7b:dd:a1:8d:2a:e1:ab:c9:bf:d7:08:08:63:
         93:9d:25:96:05:bd:f0:82:53:18:f7:31:72:a0:4b:b9:8c:97:
         4f:de:19:3d:07:58:65:85:b5:d1:fd:3f:a0:53:1b:fc:94:a4:
         87:9b:7f:0e:8c:6d:71:54:c3:62:47:30:21:0b:7d:16:a5:22:
         04:3f:ea:22:0e:27:ac:7d:30:75:c0:f5:ca:57:d3:02:38:9d:
         4c:a5:c6:b0:95:a3:f4:09:63:19:6d:6c:b8:c7:2a:fc:b2:d8:
         9d:b3:b5:55:ef:dc:70:ef:4d:d4:69:6e:cc:c2:8e:fb:a8:5d:
         f8:1a:9a:12:4b:39:cc:7e:b8:69:1f:f0:21:ac:af:13:6f:cd:
         b0:ec:2c:26:17:c0:d5:74:c3:d9:19:47:a2:88:9c:a1:82:fc:
         3e:d3:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:00 2025 by rpki-client