Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa
File:                     3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          QR0PxmYvv1vJtBn2yHTdMb/sAZ1ttwL5jKPKcI1S8/Y=
Subject key identifier:   25:6F:C9:1C:26:10:C4:88:88:CB:31:AD:A6:3F:52:49:2B:82:F5:6E
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       4000391B528C44F22107F1912CA0C71EECDBD66D
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa
Signing time:             Mon 16 Sep 2024 08:29:05 +0000
ROA not before:           Mon 16 Sep 2024 08:24:05 +0000
ROA not after:            Mon 15 Sep 2025 08:29:05 +0000
asID:                     262293
IP address blocks:        168.232.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:00:39:1b:52:8c:44:f2:21:07:f1:91:2c:a0:c7:1e:ec:db:d6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Sep 16 08:24:05 2024 GMT
            Not After : Sep 15 08:29:05 2025 GMT
        Subject: CN=256FC91C2610C48888CB31ADA63F52492B82F56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:42:12:c7:d5:03:6d:c7:a4:9e:94:10:4d:
                    8d:73:72:e6:94:42:4c:f7:0d:b2:32:cc:f2:56:4f:
                    33:4c:49:d5:8f:9a:b9:21:4b:e4:cb:73:72:9c:b3:
                    69:fb:f0:be:b0:02:08:1a:99:47:28:65:f7:f9:56:
                    19:bb:c0:4e:09:16:24:8c:82:01:0d:76:02:eb:be:
                    a5:85:a1:5e:7f:cf:60:e0:84:d4:84:f5:67:7a:85:
                    be:b5:c8:af:f9:1b:38:01:36:b5:8f:10:58:d9:ed:
                    6c:7e:f8:8f:66:2d:9c:e4:4c:6e:be:c4:d5:4d:fc:
                    1e:d3:4d:0a:50:60:03:01:3a:7e:24:6c:5f:78:83:
                    88:e1:c5:64:1e:7f:32:77:a5:5c:c0:52:7c:d2:86:
                    ad:91:7d:e6:9f:b2:9f:7d:38:4e:f9:cf:31:ad:ad:
                    87:b4:55:cc:3c:7c:46:26:4f:59:61:a5:8f:4e:95:
                    c6:b8:4c:31:a5:ec:6f:11:79:c1:d5:11:4e:75:35:
                    1a:dd:b2:d9:b3:31:aa:39:ea:bb:cc:a2:5b:b7:4d:
                    fc:50:b8:4b:f7:21:47:3e:82:64:18:12:e8:64:b5:
                    b0:93:81:90:5e:15:10:75:64:ca:32:ea:7b:32:0e:
                    b3:a9:34:14:4a:44:d3:c8:23:be:ee:1a:1b:9f:20:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:C9:1C:26:10:C4:88:88:CB:31:AD:A6:3F:52:49:2B:82:F5:6E
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:c9:85:5f:3a:bd:af:dd:93:c9:d0:3d:35:b8:82:34:be:
         eb:05:8d:18:39:f2:3d:38:50:b0:d8:b3:96:28:d1:17:57:f5:
         35:6b:f0:29:f9:79:36:02:28:88:6e:b9:81:70:b5:33:e2:fa:
         96:fe:0c:55:fc:29:d7:fa:e9:e7:d6:33:3c:d9:b6:49:4f:02:
         73:1f:d4:2d:c6:df:6a:bd:4c:0b:9a:e3:ec:bf:8f:72:0c:f3:
         ae:d7:84:d4:6d:a2:4f:05:50:b7:ab:66:bd:99:c2:4d:3c:58:
         7f:c6:ec:53:72:1b:94:14:67:76:cd:de:8e:b9:b3:fc:7c:d0:
         f8:12:02:96:dc:0a:8e:61:1f:73:1d:59:7b:20:55:41:a6:63:
         3b:7c:62:17:ce:8c:10:a3:bd:d1:97:e8:c5:1a:41:80:9a:a2:
         06:58:04:b9:33:46:c6:51:07:f6:82:21:35:63:6d:73:f1:22:
         21:ab:99:46:82:50:ae:6f:14:06:b7:ab:da:f8:cf:70:03:35:
         af:ab:d3:e2:ae:a3:e7:00:eb:ae:67:0f:55:25:f4:82:ba:8c:
         d0:2d:73:7b:39:be:ff:cf:ab:39:db:1d:02:02:74:60:0d:54:
         12:6b:c9:16:25:44:f6:9a:40:78:80:fc:53:8c:9d:be:2b:4d:
         e9:a6:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:40 2025 by rpki-client