Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
File:                     3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          3nGLvwfNb8ZjmP7koyN1FER21BGpDNBf0cgattRBFEI=
Subject key identifier:   59:9F:89:A9:A5:BF:23:E3:45:1A:E7:B3:8F:E5:43:40:94:38:35:11
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       10E6D05CC125BA4B082FDAEF7CAD264E11E145E3
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
Signing time:             Thu 06 Oct 2022 17:39:56 +0000
ROA not before:           Thu 06 Oct 2022 17:34:56 +0000
ROA not after:            Thu 05 Oct 2023 17:39:56 +0000
asID:                     262509
IP address blocks:        168.121.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e6:d0:5c:c1:25:ba:4b:08:2f:da:ef:7c:ad:26:4e:11:e1:45:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:56 2022 GMT
            Not After : Oct  5 17:39:56 2023 GMT
        Subject: CN=599F89A9A5BF23E3451AE7B38FE5434094383511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:9d:d3:39:89:32:e0:89:ae:1e:cf:7d:a7:
                    3f:85:ed:b9:f2:d6:b9:e9:04:8f:83:79:06:57:e4:
                    27:de:01:1b:4b:9c:47:44:c3:e6:ec:bc:13:68:07:
                    18:2d:1b:44:42:59:fc:1a:81:cc:62:d9:50:47:0b:
                    34:49:07:e8:cb:ad:a4:98:e1:14:45:b4:64:f6:0f:
                    30:02:d0:69:1e:3f:18:eb:e6:38:b0:c3:85:b7:1e:
                    9c:84:c8:14:1f:85:df:3d:d7:75:2c:ed:1b:8d:77:
                    be:6d:c0:9d:12:1a:60:b2:e2:ce:b2:8d:41:d2:f4:
                    47:9f:59:bb:24:ae:1c:87:a3:53:67:43:56:74:70:
                    3d:9a:3c:cb:3e:00:d5:14:ff:18:b7:0b:0c:d8:0e:
                    be:70:1d:ac:34:7f:dc:76:c2:8c:80:13:de:01:7d:
                    0b:df:37:7f:e7:9a:90:0c:b8:92:30:c1:e9:66:6b:
                    26:b5:3a:57:69:69:4d:fd:d1:dc:b4:6e:2e:b9:55:
                    4f:90:46:7c:28:96:4b:60:bb:33:7d:29:4a:0e:ee:
                    6a:b0:02:5a:a4:48:88:a7:1a:3c:7d:dc:a6:7d:2a:
                    0c:dc:ab:64:5f:ac:31:4e:f6:c7:67:d7:89:9b:e6:
                    dc:55:40:e7:10:06:c9:a1:9c:8d:aa:95:e1:96:69:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:89:A9:A5:BF:23:E3:45:1A:E7:B3:8F:E5:43:40:94:38:35:11
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:59:e3:b5:97:45:ef:bc:ee:9d:19:52:cd:f9:be:12:c1:
         77:4c:ac:6f:09:33:83:22:2f:5e:90:5a:dc:52:39:4a:85:a4:
         30:b9:a1:40:20:b1:5e:d7:a1:04:f2:79:9a:d7:32:2d:12:f6:
         78:61:1e:7f:d4:d7:82:a4:d0:32:e4:e8:f5:fc:6c:f2:69:80:
         c0:4e:3f:78:c1:2d:16:71:71:f8:a6:89:c6:02:ca:10:00:23:
         58:e8:eb:9e:5c:3f:e1:55:fd:60:ed:39:72:4c:45:bc:c3:38:
         1c:b6:0d:d2:75:ef:19:99:25:08:9c:ef:1f:42:2c:97:18:21:
         b2:f1:6e:c0:0d:73:d9:a6:66:c9:d0:c7:7e:c5:10:e3:f6:bb:
         d5:dd:a5:b6:38:b9:1e:c2:c0:54:72:e2:84:45:c4:ef:9b:d8:
         15:20:22:76:16:98:2b:9f:91:2e:28:f6:62:6c:0e:74:93:ed:
         0b:db:e0:11:9f:76:68:64:45:e5:9c:e9:38:cc:72:a2:fa:75:
         49:aa:f5:53:62:16:df:3a:fd:4e:60:6b:f5:61:81:3d:e4:d8:
         4e:03:ce:bf:ed:9f:30:2f:3a:6e:53:8e:c5:75:10:c9:cb:4b:
         1d:c9:b0:23:d2:18:39:b0:b9:03:4a:4d:d8:e6:50:bb:41:74:
         00:e7:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:43:00 2025 by rpki-client