Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32322d3232203d3e20323730353139.roa
File:                     32342e3135322e3130342e302f32322d3232203d3e20323730353139.roa (raw, json)
Hash identifier:          iuepURZDfBOFSBb3wPo81qVU6I1O463uKiO0P36iX1g=
Subject key identifier:   66:D5:B6:95:DF:49:0A:7B:83:7F:D7:0B:55:EC:FF:2F:45:FE:22:AA
Certificate issuer:       /CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
Certificate serial:       0C3F480F4B0E781E5BDCE599BBA83DDA6C04E27B
Authority key identifier: C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32322d3232203d3e20323730353139.roa
Signing time:             Fri 13 Oct 2023 13:06:03 +0000
ROA not before:           Fri 13 Oct 2023 13:01:03 +0000
ROA not after:            Fri 11 Oct 2024 13:06:03 +0000
asID:                     270519
IP address blocks:        24.152.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3f:48:0f:4b:0e:78:1e:5b:dc:e5:99:bb:a8:3d:da:6c:04:e2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
        Validity
            Not Before: Oct 13 13:01:03 2023 GMT
            Not After : Oct 11 13:06:03 2024 GMT
        Subject: CN=66D5B695DF490A7B837FD70B55ECFF2F45FE22AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:6b:69:bc:52:93:e9:9a:1c:f2:23:a2:3c:
                    1c:11:d1:f0:2d:88:87:23:79:5d:74:56:f0:19:ab:
                    74:fe:69:e0:a7:f6:5c:d3:fa:95:3d:ad:4c:ba:1e:
                    e9:4a:31:eb:c0:ec:55:de:45:25:46:63:b7:fb:d0:
                    62:e4:5e:42:ef:a5:75:b6:f5:8e:57:8c:14:c8:46:
                    bb:7e:db:0f:54:1e:cc:44:b4:83:9c:23:56:e1:4a:
                    44:d8:07:f6:ea:81:65:94:89:04:a8:08:44:bb:d7:
                    2a:4b:d7:ef:33:0c:9f:e9:a7:84:98:93:b6:76:eb:
                    df:cc:11:03:b5:91:68:e7:cf:4c:f0:1e:fc:a4:40:
                    db:89:ef:c3:82:83:49:ea:19:61:72:e4:68:1e:65:
                    05:66:b6:26:1c:92:bb:57:9a:3b:ec:8d:e4:b3:1c:
                    c7:0e:ea:e6:e4:41:57:91:24:a7:28:79:cb:34:0a:
                    e5:f4:9c:ae:19:12:68:ca:1c:c1:ec:46:3a:2c:d8:
                    80:78:c5:66:15:61:1c:7a:a6:8b:49:85:85:ae:13:
                    d9:3c:83:f1:2c:37:39:cb:7c:45:bc:11:16:88:82:
                    80:6e:a1:ba:96:3c:c0:17:f0:73:e7:02:b3:01:08:
                    91:03:10:1e:b3:e1:7c:51:a4:90:bb:70:10:d7:af:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:B6:95:DF:49:0A:7B:83:7F:D7:0B:55:EC:FF:2F:45:FE:22:AA
            X509v3 Authority Key Identifier:
                keyid:C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32322d3232203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:37:b8:f3:75:a5:e7:66:93:a6:5a:7c:10:c6:86:85:57:
         2b:8f:c9:af:d9:f2:37:9c:22:0b:26:58:a0:83:06:10:5a:7f:
         4f:40:49:3d:4e:77:51:46:a4:a2:1e:8c:25:8a:63:e6:de:28:
         19:6c:ef:1c:9c:ef:fe:2e:ce:b8:66:cf:31:1f:95:9f:98:27:
         01:71:8b:fc:7f:a4:69:f7:b4:ae:68:96:9c:dd:b2:60:41:ea:
         45:0e:e5:35:00:c7:ce:9a:d7:56:27:f0:2b:55:83:84:69:43:
         32:79:41:2e:14:cc:1a:54:64:42:64:08:f5:db:86:1d:e6:c9:
         8b:f2:ea:61:ad:ed:19:16:40:28:9a:1a:79:d1:c8:af:d2:57:
         3c:12:7e:8b:9b:d5:db:14:f9:e5:d9:8d:cc:f3:56:31:67:55:
         19:9e:fb:33:13:84:d1:cb:36:84:f7:3a:91:98:2e:04:da:11:
         1c:7a:d6:5d:86:9e:ad:10:68:e6:e2:a4:cc:77:ba:c5:54:63:
         cb:0e:92:23:bd:17:14:65:bb:b3:15:a2:4d:db:54:05:1a:61:
         04:16:51:d6:37:e1:8c:e7:cf:50:9d:30:1f:0a:95:2a:24:c8:
         b4:3a:cd:d7:62:03:0c:32:9c:f0:0c:ba:71:42:36:9b:c9:9c:
         00:6a:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:33 2025 by rpki-client