Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa
File:                     3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa (raw, json)
Hash identifier:          dBDXiwf6FLYt8FPCWOQkIq3r9X720B7ySl1wpgQSfmM=
Subject key identifier:   AB:61:FF:A5:44:1B:7C:EA:3C:55:A6:1D:06:CE:DE:7C:C1:C7:D8:D0
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       5A61774BE5F4250437E06236E6C28D54EBD67B93
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:03 +0000
ROA not before:           Wed 09 Nov 2022 20:06:03 +0000
ROA not after:            Wed 08 Nov 2023 20:11:03 +0000
asID:                     262819
IP address blocks:        168.196.108.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:61:77:4b:e5:f4:25:04:37:e0:62:36:e6:c2:8d:54:eb:d6:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:03 2022 GMT
            Not After : Nov  8 20:11:03 2023 GMT
        Subject: CN=AB61FFA5441B7CEA3C55A61D06CEDE7CC1C7D8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:ab:df:80:e8:2c:20:b6:37:f4:d5:8d:dd:
                    53:16:61:05:73:1b:a5:c1:3c:1d:28:77:d0:34:98:
                    a5:d4:cb:8a:71:27:64:74:89:c5:16:e8:31:41:21:
                    fe:4b:9d:e1:c4:4e:1a:48:4a:9f:bd:6b:75:94:a9:
                    10:14:12:32:9a:e8:d4:58:25:78:e7:f8:f4:c9:4f:
                    0e:91:f1:46:40:12:d0:f4:fe:ee:68:62:4a:6e:03:
                    c2:a1:2e:12:6b:fb:71:8a:be:67:02:a1:55:56:c4:
                    6e:a5:3f:23:29:1a:8d:08:63:21:18:db:3e:92:6f:
                    5c:8d:25:36:eb:52:99:3f:a8:37:07:3a:eb:1f:27:
                    33:fa:62:1d:e9:8e:0c:eb:a0:50:06:07:e8:31:56:
                    ed:d7:ec:67:dc:0d:f5:67:5c:e5:79:ea:d7:5d:7f:
                    1d:28:08:55:31:65:cb:8f:d7:01:2f:8a:b5:7e:2e:
                    7c:e9:a6:14:36:83:64:15:07:1a:95:62:f0:c0:c8:
                    5a:dd:87:53:63:01:5d:bd:73:6c:81:0c:4e:76:20:
                    2a:47:f5:83:41:fb:0f:d8:10:fb:de:89:bd:df:0b:
                    69:a5:5f:f6:97:ba:c9:b3:ca:2e:b3:48:01:a8:c5:
                    1a:42:f3:ec:9e:2c:b4:28:25:4a:a7:fd:f2:fb:4e:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:FF:A5:44:1B:7C:EA:3C:55:A6:1D:06:CE:DE:7C:C1:C7:D8:D0
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3130382e302f32322d3232203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:bc:18:68:a2:d6:cf:ec:de:70:dd:11:9e:0e:6c:a5:88:
         e1:a7:94:ba:5a:e1:14:6f:2c:51:25:0a:82:59:4b:4c:84:b2:
         3a:a5:3b:b9:9c:ac:c5:b5:e3:31:a3:b8:bf:c4:81:a0:12:e0:
         02:fb:dc:72:fb:13:53:f6:4a:f6:ce:61:fb:4f:7f:48:a8:2e:
         84:55:be:f3:24:9a:18:4e:4a:56:12:2b:f1:56:03:2d:6b:f7:
         23:e1:9c:a8:28:84:04:54:01:b3:b9:a7:1e:8e:36:fa:de:09:
         98:5e:8c:9c:1b:a8:c4:32:c7:94:0c:33:ec:bb:3a:66:13:eb:
         80:f7:68:eb:87:f8:d3:66:0a:6d:f7:65:bd:1d:48:7a:ba:66:
         54:c2:38:0c:07:a4:b1:7b:c4:d9:8f:c8:14:1f:c1:a5:d3:05:
         43:94:0f:4a:c2:71:8b:4c:2b:e5:b2:43:f2:21:85:f2:6e:fb:
         ac:6f:12:ba:f5:a7:5d:36:11:74:ee:8c:e4:8a:a9:e6:41:83:
         6e:7c:da:79:22:b8:e2:75:09:02:88:bc:d3:d9:b8:47:36:d5:
         4e:35:5d:ca:41:bb:1c:70:7f:de:af:be:0b:0f:63:3a:08:24:
         64:2d:b9:24:b8:5b:75:66:57:af:e1:7e:02:84:59:23:05:2e:
         b1:40:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:54 2025 by rpki-client