Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132372e302f32342d3234203d3e20323634343436.roa
File:                     3136382e39302e3132372e302f32342d3234203d3e20323634343436.roa (raw, json)
Hash identifier:          R6L35cO8Fk7D2atkZNzwcntMq/0JtH3TmdV2J7VZqjw=
Subject key identifier:   BD:79:1C:0E:CC:D7:51:6D:83:C5:D0:B0:77:37:43:03:81:0D:8E:4D
Certificate issuer:       /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial:       2E7D69215E6D2BA8FF6831369408B846D20BAEA6
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132372e302f32342d3234203d3e20323634343436.roa
Signing time:             Tue 02 May 2023 16:14:28 +0000
ROA not before:           Tue 02 May 2023 16:09:28 +0000
ROA not after:            Tue 30 Apr 2024 16:14:28 +0000
asID:                     264446
IP address blocks:        168.90.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7d:69:21:5e:6d:2b:a8:ff:68:31:36:94:08:b8:46:d2:0b:ae:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
        Validity
            Not Before: May  2 16:09:28 2023 GMT
            Not After : Apr 30 16:14:28 2024 GMT
        Subject: CN=BD791C0ECCD7516D83C5D0B077374303810D8E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:ab:de:4c:d9:ed:34:45:05:0f:d3:af:6f:
                    12:a8:ea:7c:7e:f2:d9:7d:01:2d:1a:68:09:b5:7e:
                    77:eb:72:cd:e1:7a:33:be:b5:03:9e:99:20:48:a4:
                    a8:67:fb:f8:8d:83:82:77:1a:09:df:66:f9:0b:9f:
                    54:72:e0:18:32:fc:64:f1:ee:97:46:bb:28:8a:2f:
                    3e:02:21:66:33:21:7f:60:27:d3:89:f7:1f:3c:a9:
                    c1:c7:cd:7c:32:61:d2:42:6e:3d:6d:37:ec:13:c4:
                    70:6f:28:16:36:ca:39:20:15:ff:12:70:18:30:27:
                    c6:26:a9:1f:b3:39:f1:03:8f:a7:1b:d2:b6:fa:95:
                    ec:57:d7:ea:f0:da:a4:a0:6d:ca:8a:a7:99:4e:03:
                    91:72:95:44:81:dc:60:b1:ce:7f:ba:56:a5:fa:dd:
                    de:ec:1e:67:9f:28:e3:a8:bf:c7:a1:65:dc:1c:5a:
                    b6:ef:03:f8:03:44:bc:e4:a3:b5:32:38:a4:c5:05:
                    f8:d9:99:db:28:1f:ed:66:16:80:c4:7a:ac:eb:05:
                    1a:16:be:91:a3:78:11:95:1a:0d:19:fd:88:65:c8:
                    43:a5:b8:2c:ad:9e:0c:ea:05:1a:36:d0:f4:a6:96:
                    23:84:82:dd:f1:fb:b1:57:34:9d:7c:cc:4d:52:67:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:1C:0E:CC:D7:51:6D:83:C5:D0:B0:77:37:43:03:81:0D:8E:4D
            X509v3 Authority Key Identifier:
                keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132372e302f32342d3234203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:67:c1:03:45:7b:d0:e4:1b:bf:e3:0f:31:b4:3a:29:18:
         44:06:de:f0:68:b8:f6:a9:69:2a:8d:c9:9f:13:2c:a6:d9:72:
         6c:63:df:93:b2:bf:43:91:b2:54:a4:78:39:6d:71:3f:1e:1c:
         36:15:03:99:f2:02:f9:3f:db:47:c7:c8:08:23:07:b6:1a:7d:
         09:85:01:0c:6a:eb:51:15:c4:fd:7c:53:6d:a4:5f:9e:f7:1c:
         dc:86:38:c6:99:82:0b:69:04:ee:c1:bf:96:bd:06:ba:12:56:
         01:68:4a:3c:21:7b:e2:8c:f1:e5:d5:be:91:49:83:90:50:67:
         81:65:9f:d5:85:3b:63:e9:88:84:35:38:22:9e:76:65:8c:55:
         98:67:3a:72:1b:14:ac:83:f1:fc:9e:c4:02:ef:82:36:d0:28:
         43:ad:fd:f1:bf:65:7d:45:01:63:9c:71:e6:99:df:67:5b:de:
         8c:bf:19:3c:09:d9:19:0e:3b:41:0b:85:64:ab:3d:00:3e:61:
         ad:ea:6e:e6:62:34:d8:02:dc:00:78:15:b1:6f:00:5c:d4:59:
         23:2e:c6:6d:e1:fe:45:b1:ea:70:1a:fc:ad:9a:df:f3:7e:57:
         4a:4d:fb:ab:4f:0f:6d:c5:75:20:4a:73:3e:5e:de:aa:3d:8b:
         3d:6b:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:46 2025 by rpki-client