Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          q38JiEaw8idESLgPHwhFJUILCmZImA19sp8RrjNIPKQ=
Subject key identifier:   FF:F9:9F:D4:84:0F:8B:1C:61:A1:BA:A4:51:95:60:F4:37:FD:EA:4E
Certificate issuer:       /CN=48469D9D89C528933B8C832F0845184B72554526
Certificate serial:       1651DBEFC94AB32CC79B669715CF130929252FC4
Authority key identifier: 48:46:9D:9D:89:C5:28:93:3B:8C:83:2F:08:45:18:4B:72:55:45:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48469D9D89C528933B8C832F0845184B72554526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa
Signing time:             Mon 01 Apr 2024 15:40:17 +0000
ROA not before:           Mon 01 Apr 2024 15:35:17 +0000
ROA not after:            Mon 31 Mar 2025 15:40:17 +0000
asID:                     266342
IP address blocks:        170.239.80.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:51:db:ef:c9:4a:b3:2c:c7:9b:66:97:15:cf:13:09:29:25:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48469D9D89C528933B8C832F0845184B72554526
        Validity
            Not Before: Apr  1 15:35:17 2024 GMT
            Not After : Mar 31 15:40:17 2025 GMT
        Subject: CN=FFF99FD4840F8B1C61A1BAA4519560F437FDEA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:b1:6e:5b:8a:79:f3:aa:de:df:07:d8:30:
                    b9:32:9f:bf:85:ed:e5:ec:be:f3:f9:d7:b4:bf:f9:
                    af:01:34:4b:37:a5:7a:58:f1:8f:e4:da:85:3a:1c:
                    d4:32:c5:46:eb:b0:a5:41:33:c1:7c:f0:b4:d0:13:
                    17:ee:3a:b0:0d:67:f7:0a:b1:04:41:64:31:48:3a:
                    69:bf:22:bb:06:c2:93:7e:1a:78:30:30:af:70:e4:
                    85:d8:eb:64:d6:e4:6f:40:61:8e:8b:c8:5c:13:72:
                    c0:ea:b7:8f:17:61:cc:6b:10:27:3d:54:29:bb:f7:
                    7b:38:1c:22:f8:18:0f:08:79:ff:e7:45:17:4f:5f:
                    83:d4:17:81:c4:13:36:4c:16:ad:ad:35:6d:bc:80:
                    e6:88:b8:00:59:ac:87:be:2b:d5:3b:f5:d0:6a:1a:
                    e3:d8:34:a4:e5:5a:d0:e1:86:f3:ea:3e:77:cf:72:
                    c9:0a:7e:e4:15:8d:fc:93:b1:9c:71:bb:c1:ad:73:
                    5c:33:97:a8:29:8b:a5:dc:a4:bc:f8:ca:46:2a:0e:
                    f5:79:69:73:48:d6:9a:0a:d7:cf:75:3a:ad:6b:65:
                    a8:bf:1c:6c:5f:bd:89:de:bd:84:63:3b:36:03:2f:
                    66:fd:a0:db:96:51:a4:92:e6:33:90:36:cf:17:0b:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F9:9F:D4:84:0F:8B:1C:61:A1:BA:A4:51:95:60:F4:37:FD:EA:4E
            X509v3 Authority Key Identifier:
                keyid:48:46:9D:9D:89:C5:28:93:3B:8C:83:2F:08:45:18:4B:72:55:45:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/48469D9D89C528933B8C832F0845184B72554526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48469D9D89C528933B8C832F0845184B72554526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:32:17:a6:11:2a:97:9b:75:7a:0e:79:b3:2a:98:28:2f:78:
         d3:e1:43:06:a2:d5:39:12:2c:e1:d9:fe:db:62:a2:d2:d2:c9:
         e1:da:ac:b5:06:70:ab:07:86:7d:c7:f9:97:b1:fa:dd:32:bd:
         45:11:1b:0b:a6:cf:09:29:41:f0:9f:88:9c:ae:01:6a:0f:e5:
         5b:b1:06:9e:41:56:bf:16:6e:14:4a:31:aa:d1:cb:57:bf:a1:
         84:7c:a1:26:8f:11:b1:7d:8d:99:55:1a:bf:ae:f2:72:d3:80:
         6b:bf:91:ca:9f:f0:8e:93:f0:7b:ff:fd:5d:2a:b3:c4:f6:2a:
         cb:82:36:1f:80:1e:93:c1:c4:93:a9:72:69:6c:66:ca:2d:c0:
         1f:00:6a:02:6c:6d:c2:ad:03:29:67:d3:78:61:a7:0f:44:30:
         f4:61:89:1e:63:14:46:f7:df:e7:9f:6c:ed:b8:aa:47:f4:0a:
         4e:06:38:83:00:48:56:c7:62:2e:1b:a2:1a:5c:74:5c:b8:ea:
         1c:ee:7a:26:61:b8:c0:f7:f8:20:46:9a:70:3e:cc:d4:c4:43:
         ac:7a:0e:c2:34:bb:fe:2e:dc:85:1f:2d:dc:fd:d5:eb:fb:72:
         3a:f4:7f:7b:89:f6:52:49:db:54:7e:2f:0b:7d:2d:bf:03:98:
         2b:e0:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client