Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
File:                     3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          bnnvgvNUpsrZpGKMn2GjnIxWAV81tN12xORlxbqc3RU=
Subject key identifier:   62:2E:BB:B9:7A:14:1C:E5:FE:1F:0A:D8:51:D9:AD:F2:55:8B:30:DB
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       32F371711747ABAF7B96CFF02399B81E787A783B
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:07 +0000
ROA not before:           Wed 18 Dec 2024 04:06:07 +0000
ROA not after:            Wed 17 Dec 2025 04:11:07 +0000
asID:                     265300
IP address blocks:        168.121.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f3:71:71:17:47:ab:af:7b:96:cf:f0:23:99:b8:1e:78:7a:78:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:07 2024 GMT
            Not After : Dec 17 04:11:07 2025 GMT
        Subject: CN=622EBBB97A141CE5FE1F0AD851D9ADF2558B30DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:4e:ec:36:ec:c7:07:d5:84:3d:e3:a4:1a:
                    a6:3e:26:ca:b8:b2:b5:13:b5:46:e6:41:54:33:e1:
                    c9:b5:90:2c:67:4a:58:26:8d:ac:00:10:68:06:e9:
                    8d:d8:44:88:a2:7c:f2:ed:bc:0c:6d:78:3a:d3:18:
                    56:1f:3c:41:be:06:e2:3a:b1:44:0b:48:c4:63:f1:
                    63:54:ed:2a:05:dc:51:a5:aa:dd:e6:c9:f8:4e:fb:
                    53:24:71:31:28:7c:2e:b8:68:a3:dc:a5:7a:d7:03:
                    92:3a:4e:5f:da:3b:9b:23:1e:44:4f:86:40:d3:59:
                    73:9a:dc:8d:e3:36:76:6c:ad:8a:70:5e:ae:a4:dc:
                    81:c6:30:b9:75:6f:de:f9:7d:11:50:4b:15:e4:08:
                    f5:3c:d5:da:76:9d:0e:31:91:d2:ce:80:b9:42:b6:
                    aa:42:1e:8b:87:79:1d:cf:d1:fa:3f:dc:57:6e:9c:
                    20:65:81:8a:a3:13:ba:df:55:15:38:fd:10:70:61:
                    42:8c:2d:6e:71:dc:f8:c2:5a:f0:cf:37:35:81:d1:
                    02:dc:e9:89:96:96:1c:2d:4e:73:90:75:8c:20:2f:
                    f0:1b:ca:42:b4:17:50:b0:70:70:e0:15:f0:93:b2:
                    3f:c9:03:67:28:2c:6f:77:7f:8e:53:15:9f:3a:b7:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2E:BB:B9:7A:14:1C:E5:FE:1F:0A:D8:51:D9:AD:F2:55:8B:30:DB
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37302e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:59:d4:4e:d6:6d:48:f2:9a:94:aa:48:e1:71:8f:fb:a9:99:
         f4:8b:5d:8b:42:b8:b2:00:4f:a0:4a:d2:05:c4:1a:d8:2c:0c:
         ee:bd:fc:e7:b6:81:08:5c:cd:8c:8e:f2:7b:03:b5:e4:b2:34:
         f8:5b:91:a3:1b:26:58:f7:49:2e:8a:e3:d1:7c:37:39:53:94:
         eb:bd:43:bf:3c:10:7e:e2:97:c5:75:e0:4a:ed:46:4e:f6:2f:
         42:5d:9a:a2:4d:5e:9e:51:0f:0e:05:10:b3:3c:8d:7e:82:9c:
         2e:68:56:1b:a5:a4:26:be:f5:af:e2:26:c0:10:c1:5d:09:04:
         56:8d:25:2a:2d:23:55:a3:56:54:82:06:ec:86:05:7b:81:0d:
         04:a4:f7:6a:87:4d:e6:6a:b7:ca:79:d6:80:f0:24:35:43:6f:
         b3:39:58:ef:ed:e3:76:98:2d:eb:51:f6:b0:0e:c5:93:2f:04:
         32:be:3d:2d:a1:c3:c0:ba:f9:8e:0b:bc:80:a7:1a:5f:b5:9b:
         e2:80:a7:be:83:8c:23:af:2e:c5:40:a1:f5:74:d5:34:35:f1:
         af:cc:03:92:b9:f6:1f:70:e0:a2:d9:94:28:c5:1a:f6:c6:70:
         f4:fd:6f:31:80:9c:72:97:fd:e2:88:c6:11:b5:42:ea:e9:cb:
         1d:99:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:41:41 2025 by rpki-client