Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa
File:                     3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          HZQLpTXOVfpwJ+9TdlL3OdSDATF/hcwQzWBu82N1HLM=
Subject key identifier:   A8:3F:DC:81:C9:13:95:48:4A:81:1F:6B:1E:84:A5:BD:5D:CF:F9:E9
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       710CF848CA5E87328F8D8D8AD972C81AB19D1989
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     263994
IP address blocks:        168.196.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0c:f8:48:ca:5e:87:32:8f:8d:8d:8a:d9:72:c8:1a:b1:9d:19:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=A83FDC81C91395484A811F6B1E84A5BD5DCFF9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:92:53:cf:6a:6b:03:65:ca:ad:cd:d6:9a:
                    1a:5e:d3:ed:6c:85:c2:da:34:41:9a:df:9f:6b:04:
                    da:e4:c8:0e:65:db:47:d5:bb:87:2e:11:fc:c5:35:
                    14:df:11:51:10:6d:96:fb:93:54:a4:9f:9a:00:c8:
                    f4:2b:91:8d:95:8a:e1:e8:58:66:eb:88:6e:b5:0b:
                    50:79:a7:4f:c8:7d:2c:57:22:23:77:a9:53:fb:8b:
                    e7:7d:a1:1c:0c:f0:f3:8b:1d:19:6e:77:c3:54:f6:
                    79:fc:b5:ca:11:20:dc:9b:69:3e:ed:bc:ac:e8:b6:
                    23:f7:9d:37:93:4c:9e:79:f5:6b:7a:af:0d:87:ca:
                    70:e4:4d:97:90:c1:9b:e7:84:3c:14:69:c5:5f:7e:
                    78:39:46:84:6e:41:c3:f0:7c:43:26:cb:e3:6a:d5:
                    04:c2:5d:81:68:64:88:24:4f:cb:c2:97:dd:a2:c4:
                    88:db:5d:aa:01:34:63:70:d1:e5:44:6e:04:0b:5f:
                    18:7a:a1:2d:a7:78:27:eb:48:d3:13:7a:cd:5e:c8:
                    62:47:84:35:73:08:96:61:e0:6b:9f:bc:d0:94:66:
                    98:04:b7:b7:30:12:68:5e:e7:7c:85:b7:bd:8b:ac:
                    96:dc:99:48:37:fa:c5:cb:d5:13:13:fa:84:6c:df:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:DC:81:C9:13:95:48:4A:81:1F:6B:1E:84:A5:BD:5D:CF:F9:E9
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:57:a1:d2:be:a4:dc:e5:66:df:96:09:8f:e6:07:57:65:32:
         4e:b7:28:29:52:5e:19:9f:3b:ae:0e:bd:7e:51:93:6c:27:ed:
         2d:e9:38:c0:1d:93:b4:b5:19:c0:f0:c2:51:7f:43:d6:ac:c1:
         3c:0a:d3:cd:5d:5a:c2:bf:35:00:61:40:f4:80:84:0f:26:1d:
         f2:50:7b:f7:16:e5:73:68:0c:97:29:29:e2:4a:f7:cc:44:7b:
         11:87:8c:da:d0:92:4c:cc:0a:d5:bd:8a:15:62:34:e6:d4:ae:
         e7:85:55:1a:76:5b:78:8e:57:ea:14:35:79:8a:8c:1e:03:a2:
         23:18:46:59:7f:20:37:3a:cf:df:4c:8d:4c:b0:8f:d7:42:28:
         76:a7:d8:46:cc:58:09:0f:bc:03:01:4d:78:db:7b:b9:c0:0d:
         7d:7d:10:53:d1:87:47:e3:e3:f3:80:d7:fa:5c:d4:d3:4a:3f:
         a0:bd:7e:44:59:0e:74:e6:39:93:8f:c8:2f:c9:f7:1c:c2:32:
         1d:51:9a:7d:61:83:27:37:c6:93:c6:70:62:93:5d:5d:33:63:
         ed:f5:a7:e4:fb:ff:d9:6a:c1:b7:79:d8:f2:84:0c:75:9e:2e:
         54:89:54:0e:a1:9a:2a:71:2d:33:9d:49:28:f7:ca:56:1b:8a:
         8a:92:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:53 2025 by rpki-client