Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32332d3233203d3e20323635323430.roa
File:                     3136382e302e322e302f32332d3233203d3e20323635323430.roa (raw, json)
Hash identifier:          rj/SnawOfbgGTZFvK8Q5T1TE7VJWMI3gsWtsE9oCqkU=
Subject key identifier:   D8:00:F1:EC:2C:DE:CC:56:C9:52:59:1D:6A:B8:2B:F9:91:18:04:FC
Certificate issuer:       /CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
Certificate serial:       625E7158F667CBE585C97F1FFDDAD05D67A33473
Authority key identifier: 42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32332d3233203d3e20323635323430.roa
Signing time:             Mon 28 Aug 2023 19:48:45 +0000
ROA not before:           Mon 28 Aug 2023 19:43:45 +0000
ROA not after:            Mon 26 Aug 2024 19:48:45 +0000
asID:                     265240
IP address blocks:        168.0.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5e:71:58:f6:67:cb:e5:85:c9:7f:1f:fd:da:d0:5d:67:a3:34:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
        Validity
            Not Before: Aug 28 19:43:45 2023 GMT
            Not After : Aug 26 19:48:45 2024 GMT
        Subject: CN=D800F1EC2CDECC56C952591D6AB82BF9911804FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:87:0d:9b:1b:f8:f7:d1:74:7d:44:4a:28:
                    e3:10:16:8f:16:dd:81:80:43:fb:54:1f:5a:9d:fc:
                    eb:3a:e2:2d:5d:31:a6:d8:f2:30:12:c3:c9:f7:a1:
                    64:7a:d7:f7:af:3e:63:47:f9:a6:93:ae:e2:6f:7d:
                    c2:8e:a9:44:d3:34:6a:ce:62:8f:5d:30:76:00:0b:
                    3b:08:54:1d:15:ad:e2:6e:c6:93:10:62:76:39:ef:
                    3e:f8:dc:2b:86:10:5a:76:66:53:c4:ff:66:df:69:
                    29:2e:5e:3c:55:26:21:a7:65:aa:99:8d:3c:86:0f:
                    2d:d2:c4:7c:d1:50:68:88:e7:64:c9:58:fd:ae:da:
                    a8:81:6e:51:38:16:9f:63:c1:ac:a3:56:72:13:75:
                    f3:22:c0:42:5a:ec:7e:3e:2c:10:f5:4c:96:a7:6a:
                    1a:7d:99:e9:1b:c0:cf:11:8b:60:8a:69:45:7d:dd:
                    7b:1d:fc:61:42:eb:3e:9f:e7:9c:3b:89:46:92:16:
                    c7:75:79:2b:38:10:a1:1c:b3:a3:16:fb:76:17:b6:
                    cd:9f:1c:bf:10:37:6e:61:b4:b0:19:a6:0d:b6:f9:
                    b5:2b:cf:fb:de:76:f3:da:a5:fa:94:17:18:4d:42:
                    db:d0:9d:6c:32:df:45:af:ba:3f:d0:c3:7f:ae:3d:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:F1:EC:2C:DE:CC:56:C9:52:59:1D:6A:B8:2B:F9:91:18:04:FC
            X509v3 Authority Key Identifier:
                keyid:42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32332d3233203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:7c:b6:27:d9:57:7e:4f:8d:41:f4:7d:13:6f:12:6b:97:5f:
         4a:d0:24:7e:40:02:7f:52:bf:59:ad:42:a2:82:c2:b5:25:c0:
         f9:5e:cd:e5:f0:66:98:d6:33:99:3b:8f:02:3f:53:b8:8d:96:
         87:98:a1:7a:4b:b4:52:c8:e5:80:02:5f:5b:68:4b:94:14:24:
         16:bb:b3:45:07:e1:92:ab:bf:30:b4:67:7e:1b:a0:a9:ad:0e:
         4e:39:ab:c2:5b:b5:af:75:43:86:ad:6b:7b:3f:e7:b8:27:f3:
         4f:09:29:e6:ba:48:16:dc:f7:35:46:d3:48:6f:99:fb:42:3b:
         de:01:d0:65:08:b0:17:5c:cf:28:8f:ac:51:0f:f0:3c:79:14:
         50:ad:07:f8:d6:18:f9:f3:6e:74:09:82:8d:9d:a2:81:d2:b3:
         95:d4:a2:32:f2:44:fd:a2:41:72:ec:ee:ef:d8:6d:dc:a5:a4:
         ab:e8:a5:bc:83:f2:9c:1e:19:f1:25:1e:01:eb:28:84:83:2c:
         c4:ec:9f:9b:8a:86:71:09:ea:49:dd:3a:13:ea:16:49:53:a1:
         8c:9e:20:2f:db:58:1c:14:d3:6a:bd:6c:f4:12:60:5b:0b:67:
         60:68:1e:14:5e:ce:31:4f:cb:78:a9:02:00:04:19:ee:40:4e:
         c9:5f:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:11:35 2025 by rpki-client