Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32322d3232203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32322d3232203d3e20323731313334.roa (raw, json)
Hash identifier:          9GJ1BV0cyrUC3iEB5uNqXeZwcaRdMX1j1jzPV3qjJIU=
Subject key identifier:   2A:AA:F5:2D:FC:31:C9:C2:8C:30:58:D8:7E:F9:13:3E:17:DA:10:4B
Certificate issuer:       /CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
Certificate serial:       7AE8CB53BC178FE28A35052ACB616CC8DDEEAA7C
Authority key identifier: C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32322d3232203d3e20323731313334.roa
Signing time:             Sat 01 Mar 2025 16:24:27 +0000
ROA not before:           Sat 01 Mar 2025 16:19:27 +0000
ROA not after:            Sat 28 Feb 2026 16:24:27 +0000
asID:                     271134
IP address blocks:        167.249.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e8:cb:53:bc:17:8f:e2:8a:35:05:2a:cb:61:6c:c8:dd:ee:aa:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
        Validity
            Not Before: Mar  1 16:19:27 2025 GMT
            Not After : Feb 28 16:24:27 2026 GMT
        Subject: CN=2AAAF52DFC31C9C28C3058D87EF9133E17DA104B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:26:08:21:f7:d6:57:de:82:df:cd:93:83:
                    a6:ed:3b:a9:c2:f4:57:e4:e5:e7:0d:c2:d8:05:8f:
                    4e:95:28:b5:d1:cc:ad:36:6e:0a:29:99:fd:b2:47:
                    ef:13:11:1a:4a:6a:38:c7:5d:6d:19:54:02:05:bd:
                    d4:13:a6:db:c0:ac:fe:60:f8:10:17:e4:84:b6:21:
                    91:72:4d:ae:c8:82:02:58:1c:6b:4b:48:81:a7:51:
                    04:f8:75:d1:7e:48:d7:d5:1d:fe:9c:75:64:cf:e9:
                    06:9c:dd:ad:dd:b3:bd:c1:4d:67:bc:ce:da:f1:31:
                    7a:ec:79:51:c9:3f:2c:b0:eb:4a:4d:55:f9:c7:a3:
                    b8:ee:b7:f3:b4:90:48:5e:97:bd:ac:89:a2:40:bb:
                    2c:ae:17:d6:56:83:66:a6:e4:95:73:b2:87:1c:b8:
                    e7:34:93:c0:71:1b:9b:fc:ad:16:ec:7e:eb:16:28:
                    0a:d7:96:47:9a:02:6d:b2:b9:d7:d2:c4:28:24:66:
                    e6:ed:3c:41:1e:b8:f4:37:a1:a4:88:0c:c4:88:ff:
                    0f:c3:1a:1d:d4:1c:5c:bf:5b:6e:b5:5d:82:a8:7e:
                    f9:a3:42:08:9e:24:f5:9f:37:ab:bf:f6:39:d0:d9:
                    45:5b:36:f9:cc:00:e7:97:98:67:e6:ff:4c:e3:75:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AA:F5:2D:FC:31:C9:C2:8C:30:58:D8:7E:F9:13:3E:17:DA:10:4B
            X509v3 Authority Key Identifier:
                keyid:C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32322d3232203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:0a:b0:14:e2:27:31:a7:d6:f3:cc:45:0f:70:3f:7b:af:
         e9:62:05:39:3e:28:45:25:94:35:bd:ce:9f:2f:9c:27:76:1c:
         8e:71:0f:ca:c1:9c:40:c3:6b:f3:76:2b:14:fe:ae:cd:20:80:
         02:9e:4b:c5:f1:fe:14:8f:11:34:32:2d:7c:b6:e4:a3:3c:12:
         99:09:dc:06:5c:ac:ce:e8:12:ec:77:dc:91:32:8a:e5:1b:8a:
         1c:39:53:0d:00:b3:44:ae:57:3d:b0:06:00:30:fd:09:12:aa:
         90:d1:fb:9f:b8:f1:e0:18:77:f8:99:4d:86:5e:c6:ea:37:59:
         9e:9b:16:4d:6b:ed:1e:e3:7e:ed:3f:6c:41:cf:03:fd:4c:b5:
         3f:28:3d:2b:af:3a:9c:c8:ef:ca:18:0c:ae:66:9f:42:0b:4a:
         04:f0:1e:a7:a8:10:4f:f6:51:17:5f:e7:ca:18:3c:83:ec:e3:
         47:28:f3:aa:97:53:2f:e1:27:bc:66:d3:6b:d0:ce:7b:3b:bb:
         c0:83:65:80:4b:d7:b5:d8:b9:01:5f:31:c1:d6:02:2a:aa:00:
         5b:8f:b6:c0:61:c7:46:80:1d:ee:77:79:a6:f4:37:2e:ee:7d:
         97:40:ef:86:0f:ce:1b:a3:19:d4:f4:28:45:0f:7e:42:e8:85:
         9e:c6:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:50:37 2025 by rpki-client