Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa
File:                     3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa (raw, json)
Hash identifier:          M293YpDsq84n2Mb/N4dKgtpSh3mIsmSVugKlrG/lx3U=
Subject key identifier:   BD:70:F8:5E:39:BE:20:AE:A1:76:11:83:11:65:82:0E:07:49:0E:26
Certificate issuer:       /CN=B306AEEAE99F8A737CF220E2D03134554A843A9B
Certificate serial:       421676F5E54CC3BFE9E457DDD795A7C3D2224261
Authority key identifier: B3:06:AE:EA:E9:9F:8A:73:7C:F2:20:E2:D0:31:34:55:4A:84:3A:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B306AEEAE99F8A737CF220E2D03134554A843A9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa
Signing time:             Fri 13 Jan 2023 04:12:52 +0000
ROA not before:           Fri 13 Jan 2023 04:07:52 +0000
ROA not after:            Fri 12 Jan 2024 04:12:52 +0000
asID:                     264054
IP address blocks:        143.137.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:76:f5:e5:4c:c3:bf:e9:e4:57:dd:d7:95:a7:c3:d2:22:42:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B306AEEAE99F8A737CF220E2D03134554A843A9B
        Validity
            Not Before: Jan 13 04:07:52 2023 GMT
            Not After : Jan 12 04:12:52 2024 GMT
        Subject: CN=BD70F85E39BE20AEA17611831165820E07490E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:66:7b:ed:89:e1:2b:cc:95:ff:7a:40:02:
                    6b:7c:9c:50:4f:2f:72:91:65:d6:57:d1:ac:d6:38:
                    7c:50:9d:a0:1b:1d:94:38:ff:d5:3a:ee:0b:d3:e6:
                    03:57:09:cc:c5:6f:d5:86:b9:c1:7b:c1:1a:e0:43:
                    83:d8:05:89:4c:21:aa:f7:5d:4b:0e:2c:51:b3:81:
                    ed:c0:ab:d5:23:54:47:68:d7:d3:0f:7f:9f:36:54:
                    ef:8f:7a:7c:6d:9f:b3:cc:d1:2e:24:55:67:1b:7d:
                    d5:73:60:44:6a:3d:52:88:dc:ed:f6:a8:7c:dc:5a:
                    09:53:53:55:87:6b:1a:af:5c:94:3d:ba:6b:82:4e:
                    d5:4e:08:db:d0:1d:f2:e0:68:52:52:7e:40:71:ee:
                    96:e2:4b:55:09:5d:bb:a5:02:b9:88:bd:70:b2:11:
                    ee:48:97:8d:5f:de:2d:cf:0e:3b:2f:34:3f:2f:63:
                    f1:85:09:4e:52:49:71:1f:af:6b:29:8d:25:98:13:
                    2e:6d:2a:fa:b5:8d:6e:c8:c1:5a:85:10:8f:aa:37:
                    9a:19:59:27:67:39:4a:b3:99:ab:5c:fc:b0:01:ac:
                    54:e0:79:ff:2d:cf:46:2e:e4:94:57:4e:8b:da:c4:
                    87:0e:89:e3:e6:52:b6:fb:15:15:1b:3a:02:2e:4d:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:F8:5E:39:BE:20:AE:A1:76:11:83:11:65:82:0E:07:49:0E:26
            X509v3 Authority Key Identifier:
                keyid:B3:06:AE:EA:E9:9F:8A:73:7C:F2:20:E2:D0:31:34:55:4A:84:3A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/B306AEEAE99F8A737CF220E2D03134554A843A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B306AEEAE99F8A737CF220E2D03134554A843A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:46:c7:88:28:a9:bc:0b:80:09:fb:dd:85:56:d6:9e:fa:33:
         eb:d7:60:04:b2:85:f7:b8:a7:2f:b4:25:f8:74:36:f9:5f:37:
         a2:ff:5f:87:34:1f:22:61:de:76:db:c1:8e:5b:85:4d:19:19:
         3e:2e:9c:08:b6:3f:7a:e1:1d:a2:5c:ba:68:bc:e8:3d:ee:52:
         a5:1d:69:b6:39:0c:a4:49:87:0b:4a:bb:05:7f:78:9b:43:b0:
         db:d8:b0:bb:da:65:49:b4:f4:69:19:f6:42:0d:71:53:df:82:
         0f:f8:0c:63:10:11:66:13:b0:f2:c1:51:af:4b:3e:81:d0:5a:
         ae:48:81:91:c7:2a:06:e0:5f:13:ea:57:2f:d4:f5:ba:dc:6d:
         a8:08:ae:a3:95:7c:1e:c2:37:91:83:f2:d0:8e:21:1b:f6:d9:
         2c:e0:2f:3b:e8:13:f3:bb:c2:d3:ad:d0:7f:45:68:ea:98:82:
         b9:b2:0f:23:2c:f2:01:a6:ac:5b:50:7e:0d:d6:f0:95:a6:90:
         f9:3d:d1:b9:83:ea:56:c3:cd:fa:2b:02:32:95:88:e4:09:b1:
         f3:fe:ed:f6:ca:07:a2:5b:c0:fc:09:1d:6e:f5:54:db:d9:1e:
         c2:04:e3:91:17:8a:11:e0:55:76:f7:04:84:71:f2:3b:c7:82:
         1f:73:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:14 2025 by rpki-client