Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa
File:                     3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa (raw, json)
Hash identifier:          4n22Tbe2fEYdOUmIisT+wAqG3uK1QIzJ8uF9ujZ4V4Q=
Subject key identifier:   29:C0:80:A1:C6:60:89:63:39:30:EE:17:25:D9:6C:37:3F:F3:87:E2
Certificate issuer:       /CN=5668EE81C8705A595C00BF220C5BB48B38682B81
Certificate serial:       452870E56E41DC8585E28A5310ABF07935ACC777
Authority key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa
Signing time:             Sat 22 Mar 2025 23:13:03 +0000
ROA not before:           Sat 22 Mar 2025 23:08:03 +0000
ROA not after:            Sat 21 Mar 2026 23:13:03 +0000
asID:                     263558
IP address blocks:        143.255.196.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:28:70:e5:6e:41:dc:85:85:e2:8a:53:10:ab:f0:79:35:ac:c7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5668EE81C8705A595C00BF220C5BB48B38682B81
        Validity
            Not Before: Mar 22 23:08:03 2025 GMT
            Not After : Mar 21 23:13:03 2026 GMT
        Subject: CN=29C080A1C66089633930EE1725D96C373FF387E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:7c:18:6b:31:70:58:32:ad:2e:df:d1:80:
                    44:85:a2:88:7e:58:c1:fd:b9:08:1b:4f:b0:e2:36:
                    ee:6e:4e:8b:76:e8:e2:01:de:06:9b:42:49:59:81:
                    b7:fa:0d:ee:a5:7a:ae:46:67:a8:32:b2:3a:4d:d2:
                    48:c4:de:f3:42:e7:f3:94:c8:18:2a:5b:0d:9b:cc:
                    87:7e:b6:7e:28:ab:96:01:8e:88:d7:a0:36:7f:1d:
                    a5:c8:ec:11:71:4e:c7:ed:b1:e1:45:04:33:e3:92:
                    e2:1e:fa:43:35:b2:1e:27:61:5f:d5:de:7f:ac:90:
                    a3:77:e9:52:73:02:0b:9c:e5:b5:53:d6:20:1c:62:
                    c6:92:fa:64:f2:01:e5:57:0a:35:30:a5:65:04:ce:
                    85:e8:d8:ed:03:ef:c2:d7:ce:69:6b:11:ea:6f:84:
                    55:e6:f0:43:ab:8e:ea:fe:9d:b3:f4:67:ad:33:bc:
                    66:45:f2:16:ed:11:30:5f:a3:65:0e:88:53:18:7f:
                    57:e4:b0:3c:16:59:72:c9:96:64:9c:66:33:f4:45:
                    f0:ab:6e:ef:41:80:cf:48:76:b1:7b:d9:e4:76:cf:
                    90:e6:bc:64:b7:e4:c4:43:7c:d1:02:83:5a:2c:ca:
                    bf:61:89:12:cd:b3:40:37:77:3b:f6:90:9b:54:5b:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C0:80:A1:C6:60:89:63:39:30:EE:17:25:D9:6C:37:3F:F3:87:E2
            X509v3 Authority Key Identifier:
                keyid:56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:f0:18:b5:f0:54:83:4f:42:b0:d1:f2:ff:85:2d:11:69:
         90:a9:8a:44:a7:0a:d3:0d:2d:bd:88:9e:23:bd:1f:90:1f:ee:
         bd:9e:04:0d:8d:27:73:84:27:c1:37:dd:41:79:89:82:e7:ad:
         90:9e:33:5c:2c:68:a5:f0:f8:f8:7d:c0:e6:3b:86:59:cc:a2:
         a7:a1:db:60:e1:80:c1:d8:58:8f:aa:7b:f3:4c:21:b1:51:2e:
         e7:44:5a:94:66:70:f9:a5:8d:1f:8d:19:73:d9:23:2e:40:b4:
         ce:b0:f4:65:d0:96:22:4c:de:ca:94:d2:62:88:ef:3a:e1:18:
         10:4e:fa:5c:a3:d0:61:5c:19:a4:88:e4:0f:f7:5c:5c:9b:40:
         2e:95:60:63:66:2d:2e:0f:b7:4b:69:ea:8e:93:54:4f:83:11:
         b4:48:bb:16:52:38:53:fb:51:02:e1:3c:51:69:7b:a6:44:fa:
         cc:a9:29:5b:b2:c2:e8:b9:0a:e8:6f:d6:bf:80:ce:ca:03:10:
         75:04:72:e4:df:c6:1a:06:b3:43:d1:8e:73:cf:00:2a:eb:62:
         2d:66:5e:4b:fe:55:5a:7d:23:64:68:1d:95:42:d5:36:6e:82:
         aa:25:02:db:11:a9:10:ac:68:6d:1b:eb:e8:55:3a:88:71:40:
         c2:06:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:17:42 2025 by rpki-client