Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa
File:                     3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa (raw, json)
Hash identifier:          XZyTfD0w38+frBnrRtvjkuiBFIRGnbI/YBVudveQNMs=
Subject key identifier:   A2:00:3A:09:A3:CB:F5:72:F3:8C:E6:86:10:C6:9F:FD:DB:96:1E:20
Certificate issuer:       /CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Certificate serial:       48ADE0C307670D82FAC9B83484A375EC40553142
Authority key identifier: A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa
Signing time:             Thu 28 Nov 2024 12:43:09 +0000
ROA not before:           Thu 28 Nov 2024 12:38:09 +0000
ROA not after:            Thu 27 Nov 2025 12:43:09 +0000
asID:                     265328
IP address blocks:        168.181.64.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ad:e0:c3:07:67:0d:82:fa:c9:b8:34:84:a3:75:ec:40:55:31:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
        Validity
            Not Before: Nov 28 12:38:09 2024 GMT
            Not After : Nov 27 12:43:09 2025 GMT
        Subject: CN=A2003A09A3CBF572F38CE68610C69FFDDB961E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:25:0b:0c:72:27:11:03:e8:5e:33:27:60:
                    ac:ba:f5:2c:de:f5:5b:93:55:3b:21:b3:b9:33:30:
                    ba:33:6a:2f:c2:b6:87:19:3e:a6:ed:05:9f:fd:25:
                    b3:47:51:93:d7:f5:00:a0:e8:45:91:8e:ab:16:0e:
                    b6:ed:53:b1:37:fd:98:5d:39:aa:c6:16:8c:9e:fb:
                    7a:a6:66:fd:b0:4d:eb:43:c5:2f:d4:a0:d6:9e:c2:
                    a9:b9:10:70:fa:47:4f:cc:b2:9c:ea:a0:3e:b3:33:
                    54:cb:74:e8:95:cd:d1:dc:df:a4:f8:b5:a2:32:c3:
                    79:37:33:0f:18:66:57:07:cc:20:5b:12:2d:31:84:
                    ee:48:1f:89:7d:57:9a:a6:7d:de:27:e8:11:f8:d4:
                    e3:b8:85:11:7e:1c:24:2c:f1:92:c7:74:ea:0d:90:
                    c1:fe:ad:2b:80:b2:43:71:cd:a1:85:19:31:a7:c0:
                    e8:65:6a:6e:ab:9a:69:01:65:4b:d6:27:23:d8:12:
                    0c:d8:27:8c:fc:90:ed:a6:7f:a0:11:1e:64:6d:86:
                    ed:61:85:26:91:2d:2c:65:a7:6d:c6:06:a5:a3:47:
                    34:93:f0:fc:14:42:69:77:2f:f7:8f:be:aa:dc:c1:
                    84:ca:6b:e7:a4:f8:ff:ee:41:42:5e:bf:bb:cf:a9:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:3A:09:A3:CB:F5:72:F3:8C:E6:86:10:C6:9F:FD:DB:96:1E:20
            X509v3 Authority Key Identifier:
                keyid:A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:d2:ed:63:5f:33:33:32:9e:42:6d:18:32:b6:20:b7:59:
         db:04:2e:64:be:76:e9:46:4c:75:b8:70:c8:b3:02:ef:15:b9:
         e5:81:ce:6e:62:3d:c9:ff:90:b1:20:40:54:6e:2b:d2:a7:04:
         80:62:2e:e2:97:97:95:1d:7d:64:ac:a2:e1:64:17:64:fa:7d:
         8f:c0:23:3f:d8:ab:b7:94:88:f1:b7:39:d0:11:49:19:f7:0a:
         bd:38:78:2d:67:02:dd:0b:f6:e0:26:86:ee:bb:d9:7c:07:60:
         bd:67:52:3b:38:4d:73:27:ba:8e:86:81:16:1a:6a:4d:57:f3:
         15:92:5d:64:7f:05:0f:37:65:a3:0b:6f:42:af:c1:40:fd:df:
         5b:bf:93:cd:68:c7:25:04:f6:9e:2a:d6:c4:26:af:df:1b:34:
         b2:c6:d8:3b:7f:19:4f:82:4a:44:6c:c6:08:1c:61:4e:03:ab:
         c9:20:03:55:f7:9a:58:7b:c4:e1:54:34:6e:60:ff:2e:f9:7a:
         f6:08:6c:fd:ec:a5:d3:c7:6e:1e:37:91:99:2b:de:aa:af:cc:
         1a:32:23:5e:0d:50:8f:d4:7d:3e:54:61:7d:60:70:8f:18:ba:
         68:09:65:8d:c5:89:87:72:5b:cc:03:41:48:2f:cb:2a:13:a8:
         19:0a:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:02:22 2025 by rpki-client