Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/3134332e3133372e3232352e302f32342d3234203d3e20323634303534.roa
File:                     3134332e3133372e3232352e302f32342d3234203d3e20323634303534.roa (raw, json)
Hash identifier:          KYkcZdTC/SHfqhxlQUUj2ob27Gr3fNm+P/EbRWDqWrc=
Subject key identifier:   F0:D1:CF:B0:FC:AF:70:86:C3:96:49:DE:0E:CA:FC:5E:34:A2:9F:44
Certificate issuer:       /CN=48C38BB48CCC3146D5005283F5BC70F3B5115659
Certificate serial:       04A30A03BE93A3E8D50CA3F2DDE3A567577CFBF9
Authority key identifier: 48:C3:8B:B4:8C:CC:31:46:D5:00:52:83:F5:BC:70:F3:B5:11:56:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48C38BB48CCC3146D5005283F5BC70F3B5115659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/3134332e3133372e3232352e302f32342d3234203d3e20323634303534.roa
Signing time:             Wed 24 Aug 2022 18:11:14 +0000
ROA not before:           Wed 24 Aug 2022 18:06:14 +0000
ROA not after:            Wed 23 Aug 2023 18:11:14 +0000
asID:                     264054
IP address blocks:        143.137.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a3:0a:03:be:93:a3:e8:d5:0c:a3:f2:dd:e3:a5:67:57:7c:fb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C38BB48CCC3146D5005283F5BC70F3B5115659
        Validity
            Not Before: Aug 24 18:06:14 2022 GMT
            Not After : Aug 23 18:11:14 2023 GMT
        Subject: CN=F0D1CFB0FCAF7086C39649DE0ECAFC5E34A29F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:7b:3c:42:d8:e0:84:0e:66:be:ef:14:85:
                    16:aa:ee:4b:fb:1e:92:ed:e4:81:b6:ff:c2:bd:7e:
                    cc:2f:fa:06:ca:f0:26:38:8e:2b:7c:ed:56:ea:ad:
                    1d:24:f8:63:55:d7:b4:7a:dd:3b:a2:c1:75:d9:8c:
                    3a:50:fe:12:24:3f:58:58:dd:3d:da:7a:b2:6c:45:
                    f8:41:51:bf:16:2d:b8:64:3f:f8:eb:a8:04:c6:74:
                    d2:1d:0f:d4:69:43:08:84:30:11:22:92:a9:17:7b:
                    c3:8f:f0:d8:77:95:46:7e:69:93:21:25:c7:81:2f:
                    f9:d4:d6:7e:68:80:a8:f3:0b:ed:1f:b9:04:0b:49:
                    b8:87:c5:39:bf:73:5a:1c:39:e5:0b:64:15:80:0d:
                    4c:fb:0c:c6:1e:b0:9e:0f:92:71:1b:67:bd:53:35:
                    e5:06:73:ad:90:ad:5c:6a:98:73:d0:87:a6:4a:6f:
                    be:57:c6:dc:84:c4:b7:68:43:47:bd:d5:fb:70:cd:
                    7c:fe:35:ea:e4:c8:4f:65:9d:93:31:20:e9:68:5b:
                    6f:90:de:d8:87:65:f6:cd:db:3d:4d:a2:93:1f:a8:
                    13:ce:8e:99:ec:3a:0b:0c:ce:88:09:d9:d9:29:63:
                    85:55:dd:41:ce:94:e5:06:f7:01:44:6a:f8:b6:f2:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D1:CF:B0:FC:AF:70:86:C3:96:49:DE:0E:CA:FC:5E:34:A2:9F:44
            X509v3 Authority Key Identifier:
                keyid:48:C3:8B:B4:8C:CC:31:46:D5:00:52:83:F5:BC:70:F3:B5:11:56:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/48C38BB48CCC3146D5005283F5BC70F3B5115659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48C38BB48CCC3146D5005283F5BC70F3B5115659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/0/3134332e3133372e3232352e302f32342d3234203d3e20323634303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:fe:b0:5a:6d:23:6b:6c:ce:c6:28:88:31:dd:b6:bb:4b:
         65:3f:c4:af:55:35:92:9b:b8:1a:b1:3c:e0:41:a7:ec:41:78:
         7f:51:a7:1a:32:e4:38:87:71:22:23:f6:b4:fc:1c:ab:25:e4:
         ce:20:f6:b1:c0:d7:52:3c:ef:73:16:2c:cf:0f:b8:f1:3d:2b:
         da:12:dd:18:17:ff:13:fd:02:d4:49:10:d4:07:6e:91:f4:90:
         87:1e:29:c8:d1:0e:52:89:49:e5:b1:53:4c:3e:b5:d0:4b:52:
         65:e0:e3:78:ed:19:85:9b:3f:3c:2e:07:ce:5e:74:13:aa:d1:
         63:40:4e:2b:6b:66:ed:cf:5d:1e:12:5a:d5:c6:94:eb:d8:6c:
         b4:de:b5:9e:d1:69:fe:c8:81:54:ea:5b:43:46:eb:96:6e:bb:
         2d:3b:ba:01:c8:a7:1a:5b:09:37:0b:33:48:ec:4e:91:01:ab:
         cf:68:44:85:0f:62:60:80:29:de:ad:b4:3d:31:f0:98:04:77:
         09:9b:d9:04:91:13:4d:4c:ad:32:06:90:33:bd:a6:ee:5b:ff:
         3f:88:2b:87:ae:95:47:2c:88:1c:fa:2c:9f:93:ee:6c:47:46:
         96:7a:42:d8:ee:28:6d:32:f5:d5:f4:b1:64:25:5c:d1:df:60:
         7f:35:89:81
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBKMKA76To+jVDKPy3eOlZ1d8+/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDMzhCQjQ4Q0NDMzE0NkQ1MDA1MjgzRjVCQzcwRjNC
NTExNTY1OTAeFw0yMjA4MjQxODA2MTRaFw0yMzA4MjMxODExMTRaMDMxMTAvBgNV
BAMTKEYwRDFDRkIwRkNBRjcwODZDMzk2NDlERTBFQ0FGQzVFMzRBMjlGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRXs8QtjghA5mvu8UhRaq7kv7
HpLt5IG2/8K9fswv+gbK8CY4jit87VbqrR0k+GNV17R63TuiwXXZjDpQ/hIkP1hY
3T3aerJsRfhBUb8WLbhkP/jrqATGdNIdD9RpQwiEMBEikqkXe8OP8Nh3lUZ+aZMh
JceBL/nU1n5ogKjzC+0fuQQLSbiHxTm/c1ocOeULZBWADUz7DMYesJ4PknEbZ71T
NeUGc62QrVxqmHPQh6ZKb75XxtyExLdoQ0e91ftwzXz+NerkyE9lnZMxIOloW2+Q
3tiHZfbN2z1NopMfqBPOjpnsOgsMzogJ2dkpY4VV3UHOlOUG9wFEavi28ihTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8NHPsPyvcIbDlkneDsr8XjSin0QwHwYDVR0j
BBgwFoAUSMOLtIzMMUbVAFKD9bxw87URVlkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlVZ003V2tGZ0F3OXB0TkRuc3FvNW5kSFZTcFdDdVhUQW81QlJ6MzdI
akIvMC80OEMzOEJCNDhDQ0MzMTQ2RDUwMDUyODNGNUJDNzBGM0I1MTE1NjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4QzM4QkI0OENDQzMxNDZE
NTAwNTI4M0Y1QkM3MEYzQjUxMTU2NTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5VWdNN1drRmdBdzlwdE5EbnNxbzVuZEhWU3BXQ3VYVEFvNUJSejM3SGpCLzAv
MzEzNDMzMmUzMTMzMzcyZTMyMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI+J4TANBgkqhkiG9w0BAQsFAAOCAQEAJ6j+
sFptI2tszsYoiDHdtrtLZT/Er1U1kpu4GrE84EGn7EF4f1GnGjLkOIdxIiP2tPwc
qyXkziD2scDXUjzvcxYszw+48T0r2hLdGBf/E/0C1EkQ1AdukfSQhx4pyNEOUolJ
5bFTTD610EtSZeDjeO0ZhZs/PC4Hzl50E6rRY0BOK2tm7c9dHhJa1caU69hstN61
ntFp/siBVOpbQ0brlm67LTu6AcinGlsJNwszSOxOkQGrz2hEhQ9iYIAp3q20PTHw
mAR3CZvZBJETTUytMgaQM72m7lv/P4grh66VRyyIHPosn5PubEdGlnpC2O4obTL1
1fSxZCVc0d9gfzWJgQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:25:38 2025 by rpki-client