Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139302e302f32332d3233203d3e20323634303236.roa
File:                     3134332e302e3139302e302f32332d3233203d3e20323634303236.roa (raw, json)
Hash identifier:          DNL8LV2GMR0HTvgErJRa/IXDhSsXhCIaIljri63hTtM=
Subject key identifier:   50:E7:6A:2D:00:BB:74:B3:64:C0:C0:BE:A8:0A:C0:62:BE:7E:A8:57
Certificate issuer:       /CN=40E329E137ACE9C947E72E009F44D35DDC786723
Certificate serial:       071A6AA50D8F66F84D245856D7FF9542DAD5D4C0
Authority key identifier: 40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139302e302f32332d3233203d3e20323634303236.roa
Signing time:             Sun 20 Nov 2022 13:29:24 +0000
ROA not before:           Sun 20 Nov 2022 13:24:24 +0000
ROA not after:            Sun 19 Nov 2023 13:29:24 +0000
asID:                     264026
IP address blocks:        143.0.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1a:6a:a5:0d:8f:66:f8:4d:24:58:56:d7:ff:95:42:da:d5:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E329E137ACE9C947E72E009F44D35DDC786723
        Validity
            Not Before: Nov 20 13:24:24 2022 GMT
            Not After : Nov 19 13:29:24 2023 GMT
        Subject: CN=50E76A2D00BB74B364C0C0BEA80AC062BE7EA857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:0c:8b:2d:47:5f:45:76:26:fa:81:76:2f:
                    eb:66:41:b1:4a:35:43:f0:78:73:91:aa:7b:81:80:
                    a7:9e:65:5f:ef:a9:09:7b:9e:c1:0f:b6:e7:32:2d:
                    d0:0b:a4:96:d6:a7:fc:9b:f4:3d:d7:26:1d:59:17:
                    bd:ca:f3:b0:69:8e:d1:a2:73:66:5d:bf:0e:5b:59:
                    1f:bb:cb:20:14:f1:77:97:f8:67:d0:9c:22:ef:4c:
                    83:c6:4b:dc:c7:10:c7:5e:48:27:57:67:09:07:e9:
                    1d:52:10:cf:bc:33:08:0c:7f:88:bd:0f:00:e6:dc:
                    c2:96:e2:63:c6:09:7f:aa:4c:2d:6e:ba:21:da:bb:
                    06:38:b1:67:6e:23:b5:e6:26:af:84:3e:ed:9f:8e:
                    b3:51:da:58:2c:10:b2:4a:cf:a1:19:1c:e0:3f:a9:
                    c6:80:92:7b:2a:31:98:e8:3d:22:8b:58:1b:72:e1:
                    16:19:6c:27:2a:d8:54:30:5d:e7:bc:ca:6f:1a:0a:
                    3d:57:d5:8e:1f:a4:17:90:f7:82:06:91:82:37:f5:
                    b7:c1:e3:67:96:9d:ce:ee:b4:2b:22:b8:b2:9b:f3:
                    8c:65:b1:d7:af:88:0e:11:1b:1a:46:75:a7:9c:4b:
                    2c:f6:0e:17:ac:29:b4:cb:af:75:49:fa:43:df:fe:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E7:6A:2D:00:BB:74:B3:64:C0:C0:BE:A8:0A:C0:62:BE:7E:A8:57
            X509v3 Authority Key Identifier:
                keyid:40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139302e302f32332d3233203d3e20323634303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:92:8c:f1:d2:8a:52:8c:d1:62:e5:cc:80:fd:2f:aa:a0:32:
         f0:a1:c7:2f:bb:68:09:56:7a:64:07:80:93:db:47:a3:76:b9:
         2a:63:e5:ee:d1:5e:9c:bd:38:6b:0f:2f:39:12:99:22:92:01:
         03:52:11:b3:f9:aa:9c:03:57:30:0f:bc:17:f3:a6:6c:b4:5a:
         66:de:c4:00:9c:24:8e:57:29:2d:12:30:61:ae:d7:b1:69:88:
         b1:48:6d:4e:b2:46:4c:82:50:ef:6e:cb:7a:1a:2a:08:47:e3:
         8c:1a:38:db:b0:6c:e3:0f:00:82:c4:61:27:ad:61:24:06:8f:
         b2:e9:37:8f:89:58:a3:d9:4e:de:a3:c5:2a:a4:6e:0c:08:87:
         b7:8d:d7:3a:34:ee:bb:ec:62:bb:91:5e:e6:b5:05:12:d7:09:
         cb:97:5f:1d:17:e1:45:e3:72:1c:fb:01:7f:b8:40:9f:32:b6:
         ed:c0:fa:d6:6a:a3:c0:e8:3e:34:ca:65:ff:a0:a4:95:e0:f0:
         d0:11:d8:ae:f1:62:e8:20:01:8e:43:cc:24:1e:ee:8c:32:15:
         5d:15:79:38:57:d4:26:73:13:d1:1a:37:42:ab:08:de:d4:b7:
         7c:86:58:cf:44:41:d3:65:2e:38:5b:c4:e1:f8:f8:7d:2b:2e:
         29:17:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:47:35 2025 by rpki-client