Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          4IeRpGA06N3A+Z3d+RGi0tAsm1KQ7o9QxMpUSEJw4jI=
Subject key identifier:   79:0F:67:2A:EE:25:47:5F:A1:E3:8A:CC:FB:56:B3:DA:EA:DD:57:DD
Certificate issuer:       /CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
Certificate serial:       6405A88FFF5EF0D5AE21584F99E9986C3BD66857
Authority key identifier: C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa
Signing time:             Sat 01 Mar 2025 16:24:27 +0000
ROA not before:           Sat 01 Mar 2025 16:19:27 +0000
ROA not after:            Sat 28 Feb 2026 16:24:27 +0000
asID:                     271134
IP address blocks:        167.249.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:05:a8:8f:ff:5e:f0:d5:ae:21:58:4f:99:e9:98:6c:3b:d6:68:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
        Validity
            Not Before: Mar  1 16:19:27 2025 GMT
            Not After : Feb 28 16:24:27 2026 GMT
        Subject: CN=790F672AEE25475FA1E38ACCFB56B3DAEADD57DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:e6:c8:8f:39:e7:be:b7:5c:35:72:df:9b:
                    b9:60:f9:5f:f3:20:63:0b:f4:ac:59:e5:85:c3:74:
                    9d:ed:32:64:42:05:11:5e:2a:bc:c4:27:5c:22:be:
                    aa:99:e8:59:7a:65:b4:4e:01:e8:a0:5f:e9:ad:60:
                    02:0a:de:96:94:29:48:ee:73:80:c6:a6:15:60:66:
                    55:45:47:f6:c2:3f:c7:44:15:ef:fe:c3:a1:b9:cd:
                    a8:fb:36:f5:88:19:2e:ab:ad:41:8b:77:63:03:4b:
                    da:46:c4:76:68:37:f6:74:2e:72:a2:4a:a2:02:ef:
                    45:8c:c7:88:e3:91:05:bc:04:76:29:24:96:66:50:
                    0c:fc:53:ab:9f:2e:af:f0:2f:34:58:04:c0:a1:d8:
                    45:41:32:2d:82:70:8e:ad:70:07:18:23:f2:b3:40:
                    a9:14:dc:1f:5b:a6:3e:65:12:18:ae:8e:97:a6:b8:
                    8a:29:7f:da:eb:8e:78:fb:19:5f:b1:24:dd:1c:bd:
                    e3:33:ff:a6:44:00:21:03:49:0c:71:28:c0:d1:90:
                    7a:b6:d6:e0:70:35:36:3d:e6:9f:07:55:3e:08:e1:
                    9a:3a:10:d2:55:37:7c:0a:8d:96:a8:1a:de:e9:5a:
                    dc:eb:e6:e5:a8:f6:e4:6f:f7:9e:0d:da:fd:ae:33:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0F:67:2A:EE:25:47:5F:A1:E3:8A:CC:FB:56:B3:DA:EA:DD:57:DD
            X509v3 Authority Key Identifier:
                keyid:C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:05:a2:71:b0:bb:e9:64:25:92:61:6b:24:ed:8a:3e:fc:63:
         5d:a1:46:fa:5f:1d:0c:55:f1:1d:73:92:62:71:57:22:7b:07:
         4e:cf:04:9a:28:c2:e7:7f:ac:c5:60:d5:93:fa:72:d4:1e:c2:
         1a:ef:60:f8:7d:cf:e0:59:38:43:aa:cd:e3:82:5f:95:12:e4:
         74:74:61:45:c2:25:e2:bb:ba:10:52:35:07:8a:cc:48:55:7e:
         b2:58:a8:2e:09:d1:05:76:6f:25:e4:62:c0:8a:d6:18:35:01:
         d1:31:d0:ce:ec:ae:d0:95:cf:33:a8:1c:11:79:42:69:77:af:
         d3:fb:af:ec:76:32:2d:c3:8c:49:82:18:56:4b:d1:78:21:b4:
         0f:63:b6:9b:5d:3c:cc:10:17:6b:a7:00:78:52:24:c4:f8:81:
         1f:30:46:20:62:fd:9e:fe:e8:bd:09:b1:8b:77:2c:36:26:14:
         a6:b9:4c:05:37:93:f6:70:86:05:00:b8:a3:b2:6d:40:0c:01:
         28:70:fc:4e:0a:50:5e:45:68:ab:dd:99:41:3f:d7:09:21:36:
         1a:68:aa:2a:f7:41:00:a8:88:cb:3f:ac:7d:d2:d7:35:3d:b2:
         88:ad:b9:ea:6e:c5:5c:18:8b:30:9a:b2:9e:07:67:af:06:9c:
         a8:23:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:05 2025 by rpki-client