Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139302e302f32342d3234203d3e20323634303236.roa
File:                     3134332e302e3139302e302f32342d3234203d3e20323634303236.roa (raw, json)
Hash identifier:          AvHkWHuFPrqAyOvkEsqtjQbLrHTiYnxDuBABiXNqgfU=
Subject key identifier:   C7:47:49:8C:29:03:68:DB:47:AF:1E:43:75:05:55:13:AD:EF:64:B0
Certificate issuer:       /CN=40E329E137ACE9C947E72E009F44D35DDC786723
Certificate serial:       3C05C6EAA82F6A60B36F6DFFFC4FA993AF30C2B6
Authority key identifier: 40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139302e302f32342d3234203d3e20323634303236.roa
Signing time:             Sun 20 Nov 2022 13:30:26 +0000
ROA not before:           Sun 20 Nov 2022 13:25:26 +0000
ROA not after:            Sun 19 Nov 2023 13:30:26 +0000
asID:                     264026
IP address blocks:        143.0.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:05:c6:ea:a8:2f:6a:60:b3:6f:6d:ff:fc:4f:a9:93:af:30:c2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E329E137ACE9C947E72E009F44D35DDC786723
        Validity
            Not Before: Nov 20 13:25:26 2022 GMT
            Not After : Nov 19 13:30:26 2023 GMT
        Subject: CN=C747498C290368DB47AF1E4375055513ADEF64B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:d3:c0:7c:53:dd:26:71:33:ca:66:43:3a:
                    d6:d4:74:65:1c:0a:77:95:ca:c4:96:ad:68:7a:b2:
                    ac:20:82:ab:bd:46:7a:9d:4c:d2:02:2c:52:94:0e:
                    89:f4:3c:79:91:d6:9b:83:aa:9b:30:99:eb:65:e4:
                    d1:a1:20:96:e6:98:8d:be:2a:3c:0e:96:62:fc:b4:
                    19:b9:93:e9:89:ea:9b:c7:20:b6:14:f0:6f:92:95:
                    fc:69:c1:04:a5:23:59:45:87:47:43:ba:25:da:6e:
                    7d:e6:61:45:f8:80:58:86:e8:ca:83:6a:ce:47:b8:
                    a2:67:e5:dd:d7:6a:c9:13:44:10:48:89:52:07:2d:
                    81:40:51:36:33:9d:3f:50:5e:d0:e0:05:ec:3c:2b:
                    bf:cd:e7:a8:be:09:73:ec:e8:31:a6:cb:3f:6e:e5:
                    40:70:a6:5f:b0:f5:b3:cf:2b:31:f8:15:10:db:3c:
                    a2:46:f9:fe:c7:5c:41:aa:44:1e:7e:6f:5c:6c:c1:
                    5d:a2:0f:44:d3:e9:66:e6:a2:6f:5e:b0:2d:8f:0c:
                    33:c1:6c:d0:c6:34:9c:1e:c8:3b:03:46:8c:9f:61:
                    9c:cf:11:ab:b7:f7:35:17:85:93:26:54:a2:ae:69:
                    63:84:e2:97:16:cb:fe:5c:70:09:10:9a:69:4e:4f:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:47:49:8C:29:03:68:DB:47:AF:1E:43:75:05:55:13:AD:EF:64:B0
            X509v3 Authority Key Identifier:
                keyid:40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3139302e302f32342d3234203d3e20323634303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:f5:6e:ba:cc:89:b2:0c:70:9d:9e:0b:5a:d0:81:31:91:
         65:99:b7:2e:e2:16:c0:72:b5:4b:b1:14:b2:3b:49:df:84:95:
         85:64:15:da:9a:ff:a7:d8:54:d3:f3:ba:64:0a:bc:af:45:5f:
         24:44:07:27:b5:0b:5f:68:02:12:35:46:08:f9:82:9e:06:ce:
         6a:48:58:17:d8:0f:2b:6b:e0:45:aa:ad:1d:01:0b:50:5a:32:
         0a:ad:68:d8:7e:57:24:69:f6:b9:d8:76:22:a3:01:fd:50:18:
         fb:e5:d9:68:27:9e:1d:1f:45:94:dc:0e:29:c3:31:cb:f5:f6:
         f9:f7:f2:fe:69:83:ec:60:83:92:1a:8d:2d:ea:8a:ac:68:f9:
         e5:59:7c:21:d8:82:d9:63:8d:9e:e6:ba:8b:6b:c0:f8:c5:79:
         19:fd:23:74:34:51:cc:cd:c0:43:60:cd:5d:6d:0d:f3:8b:a1:
         f8:aa:bc:1c:11:7f:ed:18:6a:0f:44:2e:c1:80:6f:56:19:7a:
         5d:8a:2e:bd:af:ce:c7:c5:b3:55:90:35:76:c6:b8:28:24:d1:
         db:03:11:15:99:d4:37:72:bc:8c:48:89:8e:13:d4:54:df:3d:
         ec:50:8c:4d:49:e6:cf:4f:f0:e4:69:56:5c:0f:9d:b5:5d:28:
         3a:a4:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:09:52 2025 by rpki-client