Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa
File:                     3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa (raw, json)
Hash identifier:          9sx6wC5OdE/p6rj68V2QoqbFmhOs8qq8a8g/Zk3floA=
Subject key identifier:   51:9B:2E:5C:6B:C8:C6:E1:35:AC:55:9F:3D:8A:E9:75:51:1D:76:71
Certificate issuer:       /CN=0098226F0372C9E599CF2BD5642AFEAFCFB872A1
Certificate serial:       6EE617DB3277B6D87A749278C6110A589F362047
Authority key identifier: 00:98:22:6F:03:72:C9:E5:99:CF:2B:D5:64:2A:FE:AF:CF:B8:72:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa
Signing time:             Mon 06 Jan 2025 15:28:54 +0000
ROA not before:           Mon 06 Jan 2025 15:23:54 +0000
ROA not after:            Mon 05 Jan 2026 15:28:54 +0000
asID:                     265139
IP address blocks:        143.255.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e6:17:db:32:77:b6:d8:7a:74:92:78:c6:11:0a:58:9f:36:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0098226F0372C9E599CF2BD5642AFEAFCFB872A1
        Validity
            Not Before: Jan  6 15:23:54 2025 GMT
            Not After : Jan  5 15:28:54 2026 GMT
        Subject: CN=519B2E5C6BC8C6E135AC559F3D8AE975511D7671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:30:11:b1:01:a2:13:58:eb:50:14:f7:7c:
                    6f:d2:56:f8:2f:97:8d:5e:ec:e7:01:23:66:40:c8:
                    67:00:5e:d3:8e:da:17:52:7e:7d:5e:42:9e:f8:34:
                    12:6b:d7:15:f5:41:e8:20:cd:b6:52:ce:a4:f2:98:
                    f9:e6:23:52:b6:c2:00:9f:e6:98:fd:67:ba:ca:bf:
                    b3:9d:44:52:20:32:4d:ff:27:7f:c4:3a:1b:d1:01:
                    25:cc:b1:8c:af:fb:c1:d9:1a:9b:01:86:09:22:3e:
                    f5:15:6e:c1:ed:f9:07:39:82:d7:22:1e:73:24:f9:
                    36:18:cb:8a:2b:d1:47:12:8e:fb:2d:8e:84:49:8f:
                    b7:a6:f6:26:15:02:ec:82:45:e5:4e:f2:14:d1:bd:
                    bd:b4:a5:6e:12:2a:2b:c1:ba:29:7a:8b:49:6c:e7:
                    96:c2:2f:ac:f1:1a:7e:28:09:1e:d9:9c:83:86:a8:
                    41:6b:b0:94:bc:97:2b:fd:e9:40:8d:f2:c2:93:8d:
                    0f:ae:2e:51:43:13:1a:d6:36:9a:f9:90:cf:90:20:
                    d8:7d:7f:8f:f3:fa:1f:39:82:b4:cc:2d:e9:44:1a:
                    43:42:5f:c2:65:2a:3b:90:04:c5:94:34:ab:0a:73:
                    58:ab:f5:bb:66:c5:0e:ad:6c:d1:1a:ea:97:a5:26:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:2E:5C:6B:C8:C6:E1:35:AC:55:9F:3D:8A:E9:75:51:1D:76:71
            X509v3 Authority Key Identifier:
                keyid:00:98:22:6F:03:72:C9:E5:99:CF:2B:D5:64:2A:FE:AF:CF:B8:72:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:8b:fa:fb:cd:c4:89:9d:2e:f5:e5:13:47:fb:41:3e:3c:
         0f:e9:1c:7e:d7:42:c5:5d:12:c7:1b:29:0f:a1:30:d1:91:45:
         76:b2:bc:3f:6e:60:ad:25:0e:06:56:50:3d:b2:9d:d9:45:9c:
         f0:9b:7f:a0:ca:c5:90:69:c5:59:f0:30:ae:57:f0:5f:6b:f6:
         a8:bb:d6:63:d0:f6:3b:fb:51:21:61:80:ac:5e:f9:2a:56:67:
         48:85:1a:0a:72:49:b7:9b:de:6d:ba:a9:4d:3d:6f:87:b6:ab:
         fa:ea:a4:70:4e:fd:5a:9d:86:f6:ac:5d:d4:87:02:a0:6b:b7:
         45:a4:2d:a7:d2:fe:38:15:a6:18:7f:15:c8:e9:c6:8b:6f:5f:
         9a:31:c8:ca:cb:d5:4b:68:c6:a9:a1:e6:91:00:9a:a3:58:e2:
         1f:8f:2a:ca:81:63:7e:29:42:61:bf:4f:fe:12:f6:00:f5:5c:
         bf:64:f4:97:3f:74:94:74:15:81:22:da:ad:ee:75:e8:15:21:
         e5:e7:e9:85:a8:57:fc:82:f0:3e:63:b2:4b:bc:53:56:68:29:
         91:2d:70:9f:a9:49:c5:11:47:98:71:d3:e9:b0:99:dd:a0:70:
         66:8a:d4:40:b5:c4:b9:a4:bc:82:ad:bb:99:75:4f:c1:c4:a7:
         4e:93:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:29:20 2025 by rpki-client