Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32372e302f32342d3234203d3e20323733333039.roa
File:                     3136382e3232382e32372e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          /hhLHO0fe4Jsx7j6AuAejuqewn1+R6UwjnlWSeCMeQA=
Subject key identifier:   B6:B0:53:65:7E:60:AF:5D:FC:CF:3D:15:11:CD:50:E3:20:F0:0D:60
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       474F64266B8E33C9518B5B44F00C2392791F4A54
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32372e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 22 Jan 2025 18:51:55 +0000
ROA not before:           Wed 22 Jan 2025 18:46:55 +0000
ROA not after:            Wed 21 Jan 2026 18:51:55 +0000
asID:                     273309
IP address blocks:        168.228.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4f:64:26:6b:8e:33:c9:51:8b:5b:44:f0:0c:23:92:79:1f:4a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Jan 22 18:46:55 2025 GMT
            Not After : Jan 21 18:51:55 2026 GMT
        Subject: CN=B6B053657E60AF5DFCCF3D1511CD50E320F00D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:5e:da:2c:5c:76:4d:8e:1d:bb:72:3e:68:
                    56:68:44:aa:4c:8a:68:0d:96:b9:1e:e2:cc:ea:ec:
                    11:16:ea:75:e9:df:7e:13:34:f9:fa:03:23:e9:4d:
                    a2:f0:77:bc:80:9a:f4:92:47:fd:f4:8c:b0:a6:a0:
                    a5:76:f2:2a:d9:bd:bb:f0:66:51:4e:9f:75:83:c8:
                    c2:4e:04:21:f9:78:3b:6a:86:ab:53:4a:12:67:a8:
                    38:55:fd:0f:4b:57:87:63:0f:b4:7c:76:94:a5:e4:
                    73:7c:8a:04:71:c2:b5:72:03:76:90:40:2d:45:cd:
                    b1:58:b4:cf:6f:45:82:d4:78:d2:7a:6f:e1:f5:f1:
                    df:7a:2a:df:f4:c4:62:26:57:06:d5:f3:98:40:0e:
                    6f:19:68:0c:2e:b0:ff:8c:5f:1c:f0:d2:bb:4b:f6:
                    45:1d:e2:e4:95:d9:17:08:bd:a3:4f:cb:30:a7:47:
                    a5:7f:56:61:94:c8:c3:bd:40:20:ab:8a:41:02:81:
                    05:97:5a:d7:bf:96:ec:99:c4:fc:a0:5d:a6:c0:ee:
                    31:4a:57:84:84:19:a9:e7:c5:67:c3:dd:9d:57:30:
                    c8:cd:66:7d:eb:17:0a:aa:bf:bf:7a:eb:da:b4:12:
                    f9:86:60:f8:ca:95:14:e3:83:05:5c:5e:c8:4b:0d:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B0:53:65:7E:60:AF:5D:FC:CF:3D:15:11:CD:50:E3:20:F0:0D:60
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32372e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:33:ec:c4:93:02:4b:99:2f:3a:43:c7:95:98:a4:7f:85:65:
         71:b2:04:a0:37:b4:a3:79:b0:10:b8:49:05:80:4f:32:b8:46:
         56:98:b2:be:20:9c:64:e4:46:e1:2a:50:ea:43:c0:c3:90:ff:
         7a:71:67:61:c8:9f:d2:31:2e:ef:f6:0d:06:2b:8a:13:5f:d5:
         ad:60:7b:88:58:33:35:e6:c0:23:a7:f6:6d:22:49:da:88:3c:
         92:40:84:3e:d8:7c:bb:13:1f:e1:0b:fa:84:76:7b:56:e9:87:
         9f:fb:cb:07:2b:58:f8:d7:4e:de:5e:06:44:31:32:14:f8:4e:
         5f:69:10:a8:d4:e9:3a:83:d5:b4:93:4a:34:8d:1e:b0:ef:f0:
         3b:2c:8d:53:fa:fb:13:43:2b:f6:7b:3a:df:a9:63:f7:7d:ed:
         50:6a:ce:55:cb:6a:37:b7:75:c5:44:c2:70:9f:99:fc:e0:19:
         13:95:f3:02:56:71:a3:ea:89:90:ac:f8:8b:8a:41:bd:fb:e4:
         55:76:88:8f:c2:cb:2f:8d:66:e5:3a:f5:42:5d:46:0d:d0:2c:
         5e:a7:d9:02:1e:08:1c:2a:29:7e:d3:1f:ac:78:1a:3b:7a:8d:
         9f:69:96:3f:9b:1a:ed:24:89:c1:79:e4:30:64:ff:88:9c:0a:
         35:16:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:29:12 2025 by rpki-client