Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31382e302f32332d3233203d3e20323633303537.roa
File:                     3136382e3232382e31382e302f32332d3233203d3e20323633303537.roa (raw, json)
Hash identifier:          ef5/0ckHkJCYyq4TnEh6D4UkvMA1qo2V4hZb26weIMA=
Subject key identifier:   16:1F:4D:66:3D:57:50:28:AA:BF:BE:65:D0:9B:DB:A2:DE:64:04:68
Certificate issuer:       /CN=C21F0113A7A311E6D682C1938972619E614335EC
Certificate serial:       131FE40A56497479A8247D1346652C5E7D1FF000
Authority key identifier: C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31382e302f32332d3233203d3e20323633303537.roa
Signing time:             Fri 13 May 2022 20:08:07 +0000
ROA not before:           Fri 13 May 2022 20:03:07 +0000
ROA not after:            Fri 12 May 2023 20:08:07 +0000
asID:                     263057
IP address blocks:        168.228.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1f:e4:0a:56:49:74:79:a8:24:7d:13:46:65:2c:5e:7d:1f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21F0113A7A311E6D682C1938972619E614335EC
        Validity
            Not Before: May 13 20:03:07 2022 GMT
            Not After : May 12 20:08:07 2023 GMT
        Subject: CN=161F4D663D575028AABFBE65D09BDBA2DE640468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:89:02:18:34:c7:75:0a:34:f0:06:33:7b:
                    86:e6:ff:93:4a:e2:28:55:74:34:ef:74:5b:d5:72:
                    57:1f:01:83:6a:0c:84:77:bd:7e:b3:34:1c:95:73:
                    fa:59:ca:1b:8d:0d:ca:c2:86:22:95:db:dd:e8:58:
                    71:68:84:dd:1d:d0:72:c1:bd:5f:d1:75:85:e9:07:
                    58:e5:1d:23:ff:4b:f2:bd:d1:be:0d:e5:c8:74:07:
                    26:18:dc:0a:a8:b7:59:93:ba:8b:d5:b1:02:b0:1b:
                    75:71:9a:f5:e8:d5:b3:d0:b0:15:b7:39:09:d1:f4:
                    69:5b:29:cd:90:39:fd:80:94:7b:32:27:ad:81:19:
                    ca:df:e1:25:d4:7c:31:b2:fd:ca:5a:19:52:ee:26:
                    bc:d1:3c:29:68:7d:df:d8:80:51:6c:13:ae:fb:f0:
                    4f:6f:4b:77:28:bc:c6:38:81:d3:e3:5d:cf:5f:4f:
                    b0:4b:60:97:2b:d7:eb:67:d9:d5:1d:84:c7:7d:92:
                    4b:e9:d8:d9:b0:89:78:37:5b:24:fc:71:8e:f8:53:
                    d2:69:e1:c2:a7:a4:8d:b5:30:61:9e:13:f6:0c:fd:
                    27:01:a2:34:15:44:e1:c5:17:99:e7:e2:4f:63:4e:
                    48:5e:14:ed:7f:9c:ee:e0:0b:8f:2d:80:8d:61:a8:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:4D:66:3D:57:50:28:AA:BF:BE:65:D0:9B:DB:A2:DE:64:04:68
            X509v3 Authority Key Identifier:
                keyid:C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/C21F0113A7A311E6D682C1938972619E614335EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3136382e3232382e31382e302f32332d3233203d3e20323633303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:61:3e:32:f3:88:7a:6a:eb:68:37:27:67:b4:52:07:4d:bc:
         57:e7:b7:bd:8c:0c:bf:02:a0:fc:9d:b1:7c:82:13:c0:b6:b6:
         d4:b5:0b:6d:97:7b:93:85:e2:3e:98:f9:b3:b0:3e:17:58:69:
         99:31:d9:d5:a3:8b:fd:4f:60:b4:2a:1b:c9:3d:1c:21:93:98:
         65:a5:c0:96:c9:dd:19:7f:f7:51:4a:67:19:1e:bf:91:ab:55:
         ec:1c:d5:02:23:64:8f:63:98:8d:c3:51:e8:ba:60:69:e8:be:
         69:d3:d4:ce:d4:5c:af:b5:12:94:75:3e:eb:6b:fc:44:1d:1f:
         a9:c4:fb:d3:ac:66:75:8b:0c:f3:e0:c5:d2:80:64:d3:cb:6c:
         ad:f5:bd:40:a3:b9:f4:e6:46:bb:89:01:5b:1a:ce:15:66:ac:
         41:d1:dc:c6:3e:ee:50:ec:c1:14:dc:8d:b4:f1:9f:24:e1:4c:
         36:da:6e:5c:44:30:40:19:c9:b8:8d:a4:30:02:43:48:36:88:
         93:91:29:3c:f2:bc:72:69:69:38:16:fb:12:85:57:79:1c:4a:
         fa:33:d6:05:58:5a:f3:20:0c:48:a3:86:44:a0:eb:5e:bf:b4:
         76:0b:0b:f5:99:fc:2b:29:23:38:09:e6:76:e7:97:3f:f3:a7:
         25:5a:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:35:16 2025 by rpki-client