Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa
File:                     3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa (raw, json)
Hash identifier:          UZdrgq3XsJxn7AqKtcw7UqhFRl/GkxctNNz1747PfvI=
Subject key identifier:   2E:69:BF:AE:28:3F:37:0D:AD:91:5A:7A:32:45:2B:3B:2E:49:4F:C4
Certificate issuer:       /CN=79509E82CCF0E382981DD03430B4AAC6DE57585E
Certificate serial:       06CA18F17BF84607A6945B0EE0AF908F4D8876D0
Authority key identifier: 79:50:9E:82:CC:F0:E3:82:98:1D:D0:34:30:B4:AA:C6:DE:57:58:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79509E82CCF0E382981DD03430B4AAC6DE57585E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa
Signing time:             Thu 13 Mar 2025 15:56:14 +0000
ROA not before:           Thu 13 Mar 2025 15:51:14 +0000
ROA not after:            Thu 12 Mar 2026 15:56:14 +0000
asID:                     265337
IP address blocks:        168.181.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:18:f1:7b:f8:46:07:a6:94:5b:0e:e0:af:90:8f:4d:88:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79509E82CCF0E382981DD03430B4AAC6DE57585E
        Validity
            Not Before: Mar 13 15:51:14 2025 GMT
            Not After : Mar 12 15:56:14 2026 GMT
        Subject: CN=2E69BFAE283F370DAD915A7A32452B3B2E494FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:58:c7:3e:01:65:d8:ac:7e:60:36:c3:2a:
                    16:94:e9:53:13:4a:cd:e1:86:f9:37:f3:56:a7:8f:
                    26:03:ab:35:a4:d0:8b:bf:c3:82:26:d6:90:5b:00:
                    48:6d:fe:69:39:19:05:10:d6:37:e6:6e:40:1a:8e:
                    d9:e7:1a:7c:18:ca:52:ae:57:b8:c0:f9:21:69:2a:
                    47:f1:cd:36:1c:69:73:61:31:b5:aa:1e:06:ca:d2:
                    b1:e3:4c:69:84:56:cc:ac:b9:f0:f8:b9:3f:d1:96:
                    11:e4:f9:25:bc:1c:ba:e4:0c:91:f6:03:df:fb:c1:
                    a8:79:98:b1:2d:ff:f3:ac:5b:65:d6:1c:b7:36:7a:
                    32:a2:f3:37:3d:3a:23:48:ab:36:99:c5:99:09:31:
                    24:f6:fc:49:a1:62:59:0c:3b:16:7b:ba:ae:b8:f1:
                    b7:a7:08:f7:49:06:a6:ac:99:4e:40:10:bd:b8:da:
                    1d:0c:e4:05:48:46:ae:49:64:e2:3f:22:6f:df:d6:
                    7c:d0:75:86:82:eb:6f:eb:6a:f3:a6:b8:57:7f:70:
                    eb:8e:9b:3d:b9:65:18:27:8c:95:ff:b0:92:5a:e4:
                    15:9d:da:a9:67:69:72:b4:6a:78:23:73:b9:14:09:
                    d9:ed:da:ee:d3:e9:9b:c1:e1:cf:44:78:5c:b5:6c:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:BF:AE:28:3F:37:0D:AD:91:5A:7A:32:45:2B:3B:2E:49:4F:C4
            X509v3 Authority Key Identifier:
                keyid:79:50:9E:82:CC:F0:E3:82:98:1D:D0:34:30:B4:AA:C6:DE:57:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/79509E82CCF0E382981DD03430B4AAC6DE57585E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79509E82CCF0E382981DD03430B4AAC6DE57585E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:11:fc:41:db:55:58:5d:99:76:46:96:c9:8f:da:88:f1:
         c6:82:48:a3:d4:82:a1:04:0f:86:7b:ad:95:7c:59:6f:fa:17:
         52:0a:71:1d:da:b6:e6:a3:a9:4a:42:3d:0c:4f:09:f1:42:37:
         cc:8e:7d:21:c6:11:c4:a7:2e:65:43:39:3c:44:12:c3:57:60:
         ac:84:52:55:2d:ef:64:49:37:3c:c1:7b:95:d8:9c:dc:e0:74:
         71:fc:18:64:52:3b:62:17:c6:3e:af:d2:e9:11:c2:9f:dd:11:
         91:6a:ab:67:bc:38:dd:a6:22:2c:eb:8e:0c:bd:b3:4a:b1:91:
         4c:ee:56:2c:7e:fc:de:2f:7a:65:6f:81:2b:fe:b6:87:77:45:
         22:c7:84:3d:dc:d8:a7:3b:f4:99:cb:bf:50:1e:34:3b:91:6c:
         7c:17:27:8a:a1:b6:f5:df:df:f4:ea:a9:9a:b9:a5:de:fe:2f:
         bf:f2:d2:25:89:cf:ca:7e:a7:15:c4:5b:ab:35:21:02:7e:73:
         e4:4e:1b:a5:f9:50:ff:cc:67:98:cd:3e:25:be:8e:78:c5:d6:
         ae:05:24:7a:1a:fb:43:4e:85:69:7f:fb:4b:a7:a2:6f:7c:d3:
         bc:ac:a6:82:9a:d1:38:ba:7c:11:e9:e0:ae:0b:65:9f:8e:94:
         a2:d1:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:45:04 2025 by rpki-client