Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3134332e3130362e302e302f31362d3137203d3e203533313837.roa
File:                     3134332e3130362e302e302f31362d3137203d3e203533313837.roa (raw, json)
Hash identifier:          Xm6v0MOsollyxiE/3dBgkEn0UtrfitZUZ1Fj0n3k+Pw=
Subject key identifier:   E8:64:1C:10:D8:98:5A:8C:4A:67:2C:25:44:0B:3C:12:B9:FA:C6:E7
Certificate issuer:       /CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
Certificate serial:       51B731A4F721DE966E08C02200BBF9F0C1F9C0B7
Authority key identifier: CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3134332e3130362e302e302f31362d3137203d3e203533313837.roa
Signing time:             Mon 27 Nov 2023 19:42:17 +0000
ROA not before:           Mon 27 Nov 2023 19:37:17 +0000
ROA not after:            Mon 25 Nov 2024 19:42:17 +0000
asID:                     53187
IP address blocks:        143.106.0.0/16 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:31:a4:f7:21:de:96:6e:08:c0:22:00:bb:f9:f0:c1:f9:c0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Validity
            Not Before: Nov 27 19:37:17 2023 GMT
            Not After : Nov 25 19:42:17 2024 GMT
        Subject: CN=E8641C10D8985A8C4A672C25440B3C12B9FAC6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:dd:96:ac:92:2c:a5:57:b0:7e:a4:64:58:
                    c1:9d:4c:13:14:21:ee:e9:52:dc:70:b7:82:e6:37:
                    66:9c:69:74:9e:42:13:e7:e1:90:9d:6e:2c:b9:0a:
                    22:81:8c:a2:bf:64:bd:43:4c:be:e4:dc:f0:78:dc:
                    f5:76:88:54:a5:58:1f:7c:42:cf:8a:54:57:a5:c9:
                    ff:93:0c:9f:09:e3:ee:ba:a8:da:e6:7f:05:cd:ee:
                    ce:a6:d4:78:0d:5d:31:81:05:b9:49:b7:59:76:d0:
                    0d:df:bf:a6:de:3e:2c:26:24:3c:2b:23:70:88:c5:
                    35:c4:9a:7b:db:cb:07:53:01:cf:41:68:a8:fe:40:
                    15:40:b8:d3:a5:09:c5:34:86:c9:20:67:90:0b:ee:
                    1c:91:b3:d9:19:6b:9f:38:c0:e8:c8:3a:19:bf:5d:
                    78:16:43:1d:e1:48:f9:b2:e5:12:e1:33:cd:25:3b:
                    29:ba:06:e5:db:bc:40:24:a7:6d:c4:3e:33:94:a0:
                    83:f0:40:36:a0:ad:54:0f:f3:e5:c9:3e:7c:42:a6:
                    17:ef:ae:d6:03:a5:b2:a7:f5:e1:ba:41:14:8a:59:
                    c9:04:87:f3:40:62:da:7a:4b:92:d9:3f:e1:70:5d:
                    99:35:66:21:f2:76:fb:98:ed:00:f2:0a:c9:af:ce:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:1C:10:D8:98:5A:8C:4A:67:2C:25:44:0B:3C:12:B9:FA:C6:E7
            X509v3 Authority Key Identifier:
                keyid:CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3134332e3130362e302e302f31362d3137203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:b4:16:7b:b7:2c:88:4d:e6:47:aa:b5:a9:83:a6:b1:43:b7:
         55:58:02:09:f4:5a:7d:8c:ea:f6:e2:c1:97:47:2f:72:79:39:
         d3:03:e1:15:81:5b:c6:45:e6:9c:8a:cd:61:44:74:bc:75:49:
         0c:9a:1e:3d:09:c6:0e:cf:79:6d:a3:39:57:fe:bc:66:e4:93:
         54:f7:2f:e5:80:be:8a:4f:f9:58:bf:ac:5e:a0:53:b9:29:73:
         fb:31:25:d8:b1:8f:44:66:aa:0e:35:c1:91:97:4f:2d:d0:62:
         cf:d8:b0:30:32:74:1b:20:39:6b:08:82:48:aa:c9:0c:a5:73:
         d1:ba:a8:a9:71:25:16:b7:81:23:07:d3:47:45:b8:b8:6b:2f:
         0d:6f:24:8a:22:6b:99:9d:98:4a:7a:67:1c:27:9a:57:57:91:
         f2:c8:4b:a9:ca:0c:da:01:49:21:ac:7f:eb:11:e0:9d:3f:e8:
         14:6b:2d:5f:45:ca:14:8f:7d:e3:89:b6:22:df:6a:c6:14:7c:
         c1:80:86:d1:a7:28:e2:c8:0a:d1:b2:77:ae:77:6e:c7:8c:00:
         f0:23:2f:8e:74:ed:94:60:84:47:a5:66:e0:e3:29:70:da:d6:
         ea:b8:1f:52:15:af:ea:b3:bd:50:37:64:70:80:23:2a:1c:3b:
         f4:44:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:52 2025 by rpki-client