Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32322d3234203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32322d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          ON6FwyOzwbxdFFXfLWe7r/i1EwNyJZoD9zdaI0RosG4=
Subject key identifier:   ED:CC:94:B5:60:C6:AF:17:F7:95:75:9E:CB:C5:B5:3F:1A:0A:4C:CA
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       0E341882D935201AC31F62F8703FFDA0A121942D
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32322d3234203d3e20323633333338.roa
Signing time:             Wed 12 Feb 2025 11:53:24 +0000
ROA not before:           Wed 12 Feb 2025 11:48:24 +0000
ROA not after:            Wed 11 Feb 2026 11:53:24 +0000
asID:                     263338
IP address blocks:        191.36.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:18:82:d9:35:20:1a:c3:1f:62:f8:70:3f:fd:a0:a1:21:94:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Feb 12 11:48:24 2025 GMT
            Not After : Feb 11 11:53:24 2026 GMT
        Subject: CN=EDCC94B560C6AF17F795759ECBC5B53F1A0A4CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:25:be:25:7a:5e:ac:fb:a1:54:c6:86:6e:
                    33:4f:d1:2d:c0:74:8a:06:10:8a:b2:7c:51:86:94:
                    75:58:fc:d6:78:16:64:6e:38:cb:39:45:4a:20:6a:
                    47:c8:5e:a1:a7:5a:ef:f7:af:cc:a1:98:1a:d4:0a:
                    b9:45:e9:0a:af:0b:d3:d7:69:f1:ac:70:df:5a:aa:
                    6f:38:fd:67:a0:c0:ec:c2:1e:02:bd:e5:15:c0:b6:
                    1f:0c:91:27:84:41:ef:2f:02:15:d8:56:14:e5:73:
                    1f:f7:b4:d6:c3:29:0c:cf:cb:1f:ca:88:84:1b:76:
                    f4:a2:97:61:cb:99:f0:ce:33:24:de:d9:9a:3b:d1:
                    1e:86:f5:5a:d7:70:53:ba:c7:13:4f:45:87:61:57:
                    7a:d7:e0:13:d7:9d:93:d8:da:73:1a:53:03:6e:50:
                    6f:a3:e7:7f:be:82:12:fc:c9:7b:10:e0:4e:c1:b6:
                    ca:de:06:0a:c0:48:09:dd:09:b9:e8:50:44:ad:aa:
                    33:24:45:64:f6:f0:d1:c4:49:f9:ad:e8:6b:4b:ba:
                    03:59:d8:7f:7f:2b:ad:25:26:2c:1f:50:09:f3:68:
                    5c:ea:d5:f6:32:4b:3a:f2:1e:63:5a:1c:52:37:d1:
                    05:e2:eb:82:50:3c:99:4d:78:30:ef:64:e1:1d:d3:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:94:B5:60:C6:AF:17:F7:95:75:9E:CB:C5:B5:3F:1A:0A:4C:CA
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32322d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:20:b9:69:70:0c:52:10:bf:64:2b:69:5f:bd:d7:12:14:fc:
         69:c8:a1:57:57:4c:fd:d2:3c:ee:08:e8:31:c6:36:ea:71:85:
         60:c7:65:ec:f7:f9:43:67:85:5e:ae:4b:c3:24:4e:fe:5b:9f:
         f4:df:30:31:1c:64:47:95:16:79:c9:cd:6a:e3:2b:05:64:76:
         68:d3:80:47:70:2d:a5:60:3c:d2:6e:c1:a6:45:3e:c3:19:7a:
         d8:ac:7d:59:01:3c:96:0b:bb:c1:4d:22:ac:84:7b:fe:1c:95:
         35:1a:ee:72:46:12:e8:ca:b6:5a:5b:95:89:2a:24:24:4f:f8:
         6c:53:d1:dc:4c:e6:2d:2a:8e:f0:d9:e5:23:f9:19:60:e6:c5:
         13:e6:9a:9d:49:68:0b:c0:e8:35:0b:7f:41:ae:c1:31:92:a8:
         c5:24:1c:cd:4b:40:aa:4c:fe:14:39:b6:e1:2a:a8:eb:a7:2a:
         bf:3c:8f:6e:60:bd:8a:d0:38:9c:5d:c5:aa:9e:e0:25:ab:95:
         2d:a4:04:25:a5:31:3d:14:84:c0:2a:17:d7:2e:2f:36:c5:3a:
         7a:d2:c4:b1:13:48:6c:66:3c:36:a1:c4:42:8c:7e:51:f8:e6:
         94:6f:37:d2:4f:5b:2f:94:c9:1c:6f:41:e7:97:09:32:1b:21:
         57:fa:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:47:02 2025 by rpki-client