Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          umDd0lEDcpspU7G4Y4AhnpIYaD2RJZN3CgI4wb4FFr0=
Subject key identifier:   B3:D3:C3:52:49:3C:DD:C5:0E:D8:3C:B9:8B:5D:E1:88:03:78:BA:C9
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       663F5DB6B2D593E9B7ACE31C208C70C3BC5ADEA6
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa
Signing time:             Fri 07 Mar 2025 00:12:23 +0000
ROA not before:           Fri 07 Mar 2025 00:07:23 +0000
ROA not after:            Fri 06 Mar 2026 00:12:23 +0000
asID:                     265364
IP address blocks:        168.205.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3f:5d:b6:b2:d5:93:e9:b7:ac:e3:1c:20:8c:70:c3:bc:5a:de:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Mar  7 00:07:23 2025 GMT
            Not After : Mar  6 00:12:23 2026 GMT
        Subject: CN=B3D3C352493CDDC50ED83CB98B5DE1880378BAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:13:11:48:3c:80:f4:a1:58:bc:be:16:f4:
                    a9:6d:5a:25:26:0f:11:cc:d7:66:91:8a:d6:28:a7:
                    b9:db:03:2b:6c:15:8b:21:e2:bb:cd:09:c9:be:29:
                    e6:6e:1f:d1:0c:b7:42:1b:e9:86:b1:45:4b:88:f9:
                    a5:c6:9d:55:36:0f:a0:8b:9c:1f:18:2d:15:05:40:
                    c8:19:2b:81:a0:75:5f:e2:a6:91:97:a1:16:fb:2d:
                    2a:ad:47:97:57:c5:45:7c:42:f2:c0:01:ab:15:36:
                    ae:8c:af:d9:4e:35:e0:b5:14:0e:34:ba:77:16:22:
                    df:22:c3:04:4c:a2:11:ed:77:26:25:2b:8c:a0:bd:
                    fa:c7:03:c1:46:ed:c5:d7:90:6c:a8:02:c4:eb:42:
                    12:e7:f2:70:ca:07:7f:10:80:5c:98:25:f1:1f:5e:
                    7c:41:81:d4:cb:61:66:ff:cf:bc:d7:28:97:51:59:
                    71:46:35:a4:d4:e4:42:da:d2:2b:88:60:a5:cf:d1:
                    5b:16:82:30:6c:3f:0c:17:3f:06:95:5d:b6:4c:d7:
                    30:14:f3:14:a0:0f:3a:fb:63:28:98:8d:27:8c:e2:
                    df:e3:b1:73:9c:12:5c:b0:93:3f:78:50:52:10:ba:
                    2b:d4:a0:00:de:ba:4a:43:08:cf:db:4c:32:2b:fe:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:C3:52:49:3C:DD:C5:0E:D8:3C:B9:8B:5D:E1:88:03:78:BA:C9
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:4b:76:c0:4d:18:22:b6:db:e6:22:e8:13:ae:21:e3:9c:
         4e:39:6c:64:3e:ff:73:98:d8:1e:27:3d:f5:ed:27:50:47:97:
         71:6d:24:78:77:d3:9d:53:68:96:4f:d0:67:c6:86:eb:2e:fe:
         3c:7e:bb:8e:2d:84:5a:3c:04:67:97:c6:a1:c3:73:1d:69:ce:
         32:54:5b:69:68:cd:b6:d6:5f:7b:71:e4:d6:fc:c5:78:72:b4:
         f9:5e:44:58:27:ef:bb:1c:f6:ec:c1:4c:fa:74:56:89:48:93:
         62:fc:ed:88:0b:d8:4e:cb:82:05:67:95:e9:05:05:3d:61:f6:
         1e:f0:28:89:58:c0:80:91:79:76:38:da:b2:05:57:d0:50:73:
         0c:f4:62:fb:17:f8:6f:2e:c7:52:21:6f:25:92:20:71:0f:29:
         ce:96:c9:ae:48:44:6f:1c:2b:cb:01:0a:eb:76:69:42:ad:57:
         f7:ab:f6:36:f8:fe:36:7d:9d:18:80:bd:99:70:41:27:56:de:
         d7:94:bc:9d:65:ad:17:48:0e:48:53:13:a7:3c:07:03:2a:c6:
         5b:a7:ef:55:9b:92:c0:c4:f2:49:b5:eb:2a:b5:1b:eb:bd:2b:
         81:56:0d:d5:8d:95:b1:4f:0d:88:c2:ce:3f:30:74:92:a6:4d:
         88:ba:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:47 2025 by rpki-client