Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3232203d3e20323730343934.roa
File:                     32342e3135322e342e302f32322d3232203d3e20323730343934.roa (raw, json)
Hash identifier:          YXlj0ftKSvB5tgOO3AkVEKHNwgTHr76o9ZlHLJp60Eg=
Subject key identifier:   C6:78:11:39:BF:6E:1C:0A:28:34:B6:A0:0F:57:FF:F0:C4:87:B4:79
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       3F06AAF40282B404E87B69E8511F23FF6D2DBE43
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3232203d3e20323730343934.roa
Signing time:             Fri 21 Feb 2025 21:50:47 +0000
ROA not before:           Fri 21 Feb 2025 21:45:47 +0000
ROA not after:            Fri 20 Feb 2026 21:50:47 +0000
asID:                     270494
IP address blocks:        24.152.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:06:aa:f4:02:82:b4:04:e8:7b:69:e8:51:1f:23:ff:6d:2d:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Feb 21 21:45:47 2025 GMT
            Not After : Feb 20 21:50:47 2026 GMT
        Subject: CN=C6781139BF6E1C0A2834B6A00F57FFF0C487B479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:69:82:96:5b:b7:34:39:25:4c:3f:bc:1c:
                    1b:1d:03:9b:10:5a:15:4c:50:ef:83:5d:1b:fc:c2:
                    65:f6:2a:88:77:d7:5a:f5:87:de:f6:d1:0d:f6:72:
                    bc:df:3b:67:1f:a8:ad:9f:41:a7:0a:7c:37:f6:eb:
                    98:d0:af:22:b2:4b:c0:82:fa:70:de:10:f8:0e:2f:
                    95:5a:8e:d5:4e:2b:ea:23:f1:fa:22:bc:84:ce:1c:
                    6f:8c:34:70:a9:39:99:7b:6c:d6:55:32:a2:9b:1b:
                    90:51:66:a3:70:4a:75:52:39:41:9b:3f:9c:ec:ff:
                    16:d2:26:c4:9c:da:d4:26:bd:53:ac:fa:8d:c8:27:
                    5b:89:07:b3:8c:e0:b1:4f:e2:3e:04:6a:45:4c:f4:
                    b7:e8:7a:d9:84:7e:70:88:ae:f1:8d:ef:c1:45:62:
                    c3:43:7b:5a:db:28:2b:78:b7:f6:9f:93:91:8b:c7:
                    c2:fe:e0:1d:b4:4b:f7:ef:69:36:ab:fd:7a:bc:2d:
                    1c:55:a6:1f:90:2d:6f:90:7d:80:85:94:c8:c3:8f:
                    13:cb:af:6a:69:08:2c:38:cf:a7:27:95:ee:f7:16:
                    ae:67:a4:0c:23:43:f8:82:7c:b4:d0:05:a3:43:2f:
                    a9:f5:fb:ab:f0:1d:0b:11:fa:7c:2c:e7:65:71:76:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:78:11:39:BF:6E:1C:0A:28:34:B6:A0:0F:57:FF:F0:C4:87:B4:79
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3232203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:17:3b:50:ea:19:cd:e4:b8:a8:8b:81:ea:99:6b:e3:c7:
         f9:16:36:bd:a2:13:a0:76:d1:3b:f9:96:a1:05:6b:7d:9d:4c:
         9c:dc:1f:09:63:d9:41:8f:1e:0f:6f:dc:6f:7d:f2:78:71:4c:
         87:93:40:ef:36:da:2c:4f:e8:6d:f4:ac:57:35:99:a7:0d:49:
         d8:03:be:76:9c:81:e9:c8:e7:97:97:8b:e2:57:e6:66:1b:18:
         f9:be:6f:a5:6d:a4:00:75:bf:d5:2b:36:c6:93:7d:8e:99:8d:
         5c:11:27:6e:43:91:8d:13:ee:34:bd:3a:5d:bf:1a:a7:95:17:
         6e:41:e7:82:42:9e:aa:a1:65:79:44:56:37:99:2f:7f:2d:c2:
         39:0f:f8:d5:7f:ff:01:b4:14:cc:b4:ba:dd:ee:38:2c:7d:81:
         48:92:68:b7:f5:45:1f:10:a1:2a:1d:68:ca:dc:26:51:5f:0b:
         a4:92:60:1c:a1:bc:62:d0:bc:80:4e:91:5c:aa:2d:95:c7:c2:
         3c:3c:62:ad:6e:a9:51:72:36:39:01:84:14:93:9a:3f:ac:75:
         8b:d4:3b:fd:d9:cc:47:27:e3:9d:52:9b:aa:1e:8e:99:35:1a:
         3d:2f:c1:42:f9:9b:9a:77:d7:60:fd:5c:2f:e1:cd:79:b3:39:
         c2:a8:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:54 2025 by rpki-client