Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa
File:                     3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier:          floZekyWrSX+zO0A6N9pd6GuhRSJfQ7RkPEPo1F1k9k=
Subject key identifier:   B8:ED:EF:48:2B:32:CE:9F:80:6F:33:DA:6B:C7:77:D1:4D:54:6C:6A
Certificate issuer:       /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial:       4312AE1F83541CBFEACF5B48DAE90034927035A4
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa
Signing time:             Thu 06 Mar 2025 06:51:54 +0000
ROA not before:           Thu 06 Mar 2025 06:46:54 +0000
ROA not after:            Thu 05 Mar 2026 06:51:54 +0000
asID:                     61856
IP address blocks:        143.208.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:12:ae:1f:83:54:1c:bf:ea:cf:5b:48:da:e9:00:34:92:70:35:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Validity
            Not Before: Mar  6 06:46:54 2025 GMT
            Not After : Mar  5 06:51:54 2026 GMT
        Subject: CN=B8EDEF482B32CE9F806F33DA6BC777D14D546C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:f3:1e:56:00:79:d0:30:57:b6:d4:78:bb:
                    d6:28:ed:ed:42:4a:aa:f6:8c:8e:1e:63:ad:2c:de:
                    7c:14:e7:72:42:cd:a3:02:4d:70:e5:c9:21:f1:fd:
                    73:cb:94:0f:a5:c7:e4:a5:b2:56:08:6f:cc:bc:fa:
                    14:90:a7:ff:6f:86:6b:ed:79:c5:cc:2d:7b:0b:a1:
                    09:e7:38:32:ed:98:1d:b1:39:35:1e:a2:63:6e:0d:
                    dc:ec:52:bb:92:41:5e:3f:c5:ed:cd:4e:c1:af:86:
                    1a:ee:89:ed:d0:f3:1f:16:9b:0d:fb:09:6c:82:d9:
                    c2:ea:24:a7:56:ca:18:0e:c0:95:0b:28:ad:22:80:
                    ce:73:a8:6d:6a:68:e8:6a:c0:0a:a1:e6:f4:ed:2f:
                    7c:27:c7:fd:e8:d6:7a:30:b2:20:83:95:99:a3:6f:
                    f7:e1:ab:74:79:15:36:01:92:29:d8:80:66:91:79:
                    0c:a6:36:fd:8e:c6:7c:8e:46:82:c4:2a:b3:4d:b6:
                    77:31:c4:f2:f3:f4:48:53:3b:c4:a1:6b:1e:39:e9:
                    e3:23:af:07:74:b0:c5:e0:1d:e4:8d:5c:94:da:e2:
                    75:80:02:3e:c3:bd:61:17:ef:3b:64:13:7a:1d:2d:
                    3b:02:a5:60:a0:cc:d4:8d:3f:cd:bd:a3:6e:4e:19:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:ED:EF:48:2B:32:CE:9F:80:6F:33:DA:6B:C7:77:D1:4D:54:6C:6A
            X509v3 Authority Key Identifier:
                keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:d1:0e:4c:36:cf:2a:59:a5:a0:bf:86:c7:7a:c2:c6:91:ee:
         4e:11:e1:06:de:ad:5b:d2:69:4b:0a:fc:a9:bf:fd:c1:5d:46:
         7e:ed:03:c0:8b:12:13:9d:d7:2e:ed:5b:87:4a:88:30:b3:f2:
         fe:a3:a2:fc:fe:47:0a:25:20:f0:9c:19:dd:da:d5:da:b0:d2:
         77:f7:62:1d:7a:f3:8e:af:f7:00:c4:32:ba:a0:20:70:76:d0:
         0c:ca:63:0f:85:e7:6f:b5:31:59:c9:fb:32:84:1e:71:4c:5a:
         95:35:bc:57:b3:14:95:9a:7c:3b:61:d0:7e:8e:22:1e:e5:c3:
         e5:53:66:7e:2c:9f:4e:e0:75:16:1f:ab:09:de:8d:63:df:58:
         e4:f2:4f:95:fe:c8:cd:88:1a:a9:fb:69:d1:c0:3e:ec:1a:a9:
         fd:b3:c4:64:4d:68:59:aa:f2:de:8a:15:5f:cc:3c:03:bd:cd:
         1c:3e:27:bc:b4:74:23:8a:87:36:56:55:5d:f7:eb:c9:76:8a:
         bc:b4:72:7e:2a:3f:b3:d1:59:05:43:b3:6d:98:3a:eb:32:e6:
         1d:ea:54:95:20:0a:15:4a:1d:a9:d1:ab:ed:0e:c0:66:b4:3f:
         05:27:c4:43:de:9f:1d:38:3b:25:f3:db:e9:06:5a:5e:d2:89:
         1d:98:ad:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQxKuH4NUHL/qz1tI2ukANJJwNaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1NDg3MUE1OEJEMUQ1NjNDNjYyNDVCMTU3RTQzODgx
QTc0QThENzAeFw0yNTAzMDYwNjQ2NTRaFw0yNjAzMDUwNjUxNTRaMDMxMTAvBgNV
BAMTKEI4RURFRjQ4MkIzMkNFOUY4MDZGMzNEQTZCQzc3N0QxNEQ1NDZDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/fMeVgB50DBXttR4u9Yo7e1C
Sqr2jI4eY60s3nwU53JCzaMCTXDlySHx/XPLlA+lx+SlslYIb8y8+hSQp/9vhmvt
ecXMLXsLoQnnODLtmB2xOTUeomNuDdzsUruSQV4/xe3NTsGvhhruie3Q8x8Wmw37
CWyC2cLqJKdWyhgOwJULKK0igM5zqG1qaOhqwAqh5vTtL3wnx/3o1nowsiCDlZmj
b/fhq3R5FTYBkinYgGaReQymNv2OxnyORoLEKrNNtncxxPLz9EhTO8Shax456eMj
rwd0sMXgHeSNXJTa4nWAAj7DvWEX7ztkE3odLTsCpWCgzNSNP829o25OGdGXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuO3vSCsyzp+AbzPaa8d30U1UbGowHwYDVR0j
BBgwFoAUmVSHGli9HVY8ZiRbFX5DiBp0qNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNqN2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1
a3EvMS85OTU0ODcxQTU4QkQxRDU2M0M2NjI0NUIxNTdFNDM4ODFBNzRBOEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NTQ4NzFBNThCRDFENTYz
QzY2MjQ1QjE1N0U0Mzg4MUE3NEE4RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzajdjODVVbmd1ZlpXVVcxQUx1dnV6amVwdk53UXBCN0piYmZ5alF1NWtxLzEv
MzEzNDMzMmUzMjMwMzgyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP0HgwDQYJKoZIhvcNAQELBQADggEBAK/RDkw2
zypZpaC/hsd6wsaR7k4R4QberVvSaUsK/Km//cFdRn7tA8CLEhOd1y7tW4dKiDCz
8v6jovz+RwolIPCcGd3a1dqw0nf3Yh16846v9wDEMrqgIHB20AzKYw+F52+1MVnJ
+zKEHnFMWpU1vFezFJWafDth0H6OIh7lw+VTZn4sn07gdRYfqwnejWPfWOTyT5X+
yM2IGqn7adHAPuwaqf2zxGRNaFmq8t6KFV/MPAO9zRw+J7y0dCOKhzZWVV3368l2
iry0cn4qP7PRWQVDs22YOusy5h3qVJUgChVKHanRq+0OwGa0PwUnxEPenx04OyXz
2+kGWl7SiR2YrZ8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:17:39 2025 by rpki-client