Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          PDITLCR9QIHDsDxqUGghDSkvEx6qQM1rLRTnqiX6HnM=
Subject key identifier:   24:67:51:36:1F:AA:B1:54:03:7C:13:AB:7A:CD:EB:D5:39:92:A9:C4
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       31396E775069AD8BCBABAEA209806B1E34DF256B
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:07 +0000
ROA not before:           Wed 18 Dec 2024 04:06:07 +0000
ROA not after:            Wed 17 Dec 2025 04:11:07 +0000
asID:                     265300
IP address blocks:        168.121.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:6e:77:50:69:ad:8b:cb:ab:ae:a2:09:80:6b:1e:34:df:25:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:07 2024 GMT
            Not After : Dec 17 04:11:07 2025 GMT
        Subject: CN=246751361FAAB154037C13AB7ACDEBD53992A9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:7e:3b:90:00:8f:57:4c:7f:14:00:8c:0f:
                    fc:14:c3:23:6a:7d:ad:d9:47:e6:17:95:a4:07:60:
                    57:9a:1c:a8:0a:31:1f:19:e9:a1:e1:6c:38:93:e5:
                    f9:67:ea:c2:ab:81:5b:5b:30:e7:35:a2:a3:e0:6a:
                    a8:1a:cf:40:a2:8e:ee:7a:92:d5:22:a2:c6:bc:65:
                    3b:19:8f:95:87:98:5f:51:48:69:83:68:dc:36:00:
                    08:d0:d4:ff:50:f8:80:b9:07:68:ed:28:32:a8:a0:
                    5d:d9:d1:f7:3a:03:5f:33:39:61:1c:51:c5:16:f6:
                    4d:0d:25:6d:e7:a3:b1:8f:b3:42:59:9e:e9:7f:38:
                    f4:94:0a:2a:44:b7:33:4d:e2:f1:48:cc:18:58:75:
                    27:84:87:49:be:42:57:d3:2d:58:c5:cd:c6:57:68:
                    fc:17:51:0d:45:a7:e1:22:ac:57:0b:be:42:8c:8f:
                    ce:bb:6d:d0:69:67:03:a6:31:6b:bd:03:a2:7a:7a:
                    df:b0:4a:c7:a8:19:f1:16:9c:05:e5:3d:ba:c1:cf:
                    fe:00:7d:bb:72:8f:63:92:60:b7:80:07:39:8f:a9:
                    4f:9f:5c:4b:28:29:6c:45:e8:f6:8a:df:40:c7:37:
                    f2:d1:a8:a6:63:6b:2e:ba:48:dd:72:0a:cd:63:5d:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:67:51:36:1F:AA:B1:54:03:7C:13:AB:7A:CD:EB:D5:39:92:A9:C4
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e37312e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:02:fa:75:33:16:90:c1:35:77:6e:f4:42:95:38:8e:99:
         84:69:19:44:d1:e7:19:f2:46:80:3d:da:04:42:2d:a9:36:ef:
         9b:96:0b:47:0c:a8:48:3a:fe:a3:15:d2:56:19:87:30:fb:81:
         81:89:5f:37:81:1f:5d:46:12:5b:4e:cb:3f:fa:90:bb:ce:a0:
         16:d4:e9:9a:c9:2c:5a:00:8f:57:f7:d5:44:c4:79:4b:be:33:
         a0:08:65:e0:1d:14:da:c0:d8:92:b0:1f:c9:e6:71:46:6b:f3:
         85:67:d6:a8:4e:1a:1a:9c:dc:52:2a:38:4a:18:ee:28:49:48:
         17:1a:dd:c5:d8:af:ff:f2:f6:be:23:cb:41:e0:c7:4a:7c:e4:
         d6:83:21:8e:eb:b4:34:ea:16:f7:9f:72:93:3d:a6:67:f6:4d:
         91:a6:d1:14:02:78:c8:92:56:ee:0c:cd:cf:74:ee:60:5a:58:
         88:1b:e0:97:db:fe:9f:83:95:25:b5:0b:dd:c3:2d:37:46:ae:
         07:29:3a:55:92:bf:5d:dd:9b:46:13:26:1b:ae:89:85:b1:e8:
         4a:df:ea:d8:5a:d7:c7:85:e0:b5:f0:a7:86:9c:20:15:06:90:
         35:10:e8:25:7a:2d:3c:68:09:01:b1:da:a3:ec:c6:e6:22:3f:
         a6:1b:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:46:30 2025 by rpki-client