Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135322e302f32332d3233203d3e203532393434.roa
File:                     3136382e3230352e3135322e302f32332d3233203d3e203532393434.roa (raw, json)
Hash identifier:          CInwx4fqykS67M4g7i215Zc+EdA5tbrG48DwMHvJa/M=
Subject key identifier:   EF:30:39:CA:A7:46:F4:4E:3A:5F:DF:BD:26:66:4F:F6:A9:39:A7:55
Certificate issuer:       /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial:       6C198D6C346126E57BC872F0965EB2D76710B191
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135322e302f32332d3233203d3e203532393434.roa
Signing time:             Wed 04 Sep 2024 22:46:06 +0000
ROA not before:           Wed 04 Sep 2024 22:41:06 +0000
ROA not after:            Wed 03 Sep 2025 22:46:06 +0000
asID:                     52944
IP address blocks:        168.205.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:8d:6c:34:61:26:e5:7b:c8:72:f0:96:5e:b2:d7:67:10:b1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
        Validity
            Not Before: Sep  4 22:41:06 2024 GMT
            Not After : Sep  3 22:46:06 2025 GMT
        Subject: CN=EF3039CAA746F44E3A5FDFBD26664FF6A939A755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:71:67:78:6f:c5:c1:b3:a0:21:ec:4e:4b:
                    70:82:e6:2e:38:a3:1d:da:2f:41:93:7c:32:78:e9:
                    a6:9a:96:fc:99:05:68:af:b6:cb:64:36:bc:c9:ee:
                    93:57:95:bd:4e:31:d2:12:54:1e:2e:b1:a3:7b:02:
                    5e:be:41:39:6f:6d:e1:b7:63:32:ef:fa:86:fb:83:
                    f0:dd:7e:b3:76:a2:bf:b5:b2:91:c6:d5:69:d4:a5:
                    b7:34:11:be:a9:9a:1e:30:40:fe:77:cd:a8:cc:93:
                    ff:1b:70:ed:37:41:a1:0b:05:11:48:3e:ce:c5:fd:
                    d0:b1:e8:49:eb:8e:58:51:ea:c1:ea:cb:74:10:94:
                    53:b1:78:af:7a:09:b9:dc:57:4b:e4:79:56:61:d1:
                    7f:6c:d2:4b:1e:27:e3:dc:76:be:51:b9:8d:a2:07:
                    fa:b2:e3:3d:85:78:9c:f8:f9:46:0c:fe:d1:bb:9f:
                    9f:3d:a8:2d:b2:3d:62:8d:5d:9f:7c:b1:19:2a:d3:
                    d5:79:c6:4e:60:30:4d:58:23:32:95:0f:02:0b:96:
                    60:d1:68:6e:ce:79:63:c4:58:ec:ab:fb:62:4c:55:
                    ab:f6:8a:27:a3:52:22:97:2a:05:34:6e:4a:26:02:
                    7d:e0:d8:81:f6:ca:8e:ff:c2:fe:80:89:ca:08:34:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:39:CA:A7:46:F4:4E:3A:5F:DF:BD:26:66:4F:F6:A9:39:A7:55
            X509v3 Authority Key Identifier:
                keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135322e302f32332d3233203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:d5:d3:66:cf:c8:63:18:e3:76:02:04:f6:9a:1d:fc:44:f3:
         55:13:33:4e:5b:63:02:e2:93:de:48:b6:5e:fa:76:0c:1a:ca:
         ab:b2:2b:68:5b:12:97:0f:39:24:d5:47:be:08:a3:85:86:f1:
         1b:d2:62:97:f6:f6:b5:b4:57:ed:74:71:e3:fd:cb:2e:16:7a:
         40:02:10:0c:e8:b4:7e:d7:9a:cb:a9:ce:2f:51:17:4a:e7:79:
         a3:16:c4:22:5d:e9:dc:72:0c:0c:a4:be:f7:09:a6:a4:5f:22:
         ba:10:33:23:44:bc:ad:28:b6:42:22:30:67:48:e4:0c:10:c8:
         50:d7:da:6a:d5:f5:44:95:68:0b:88:56:39:d1:28:3c:d3:8b:
         5d:d1:34:e1:aa:7b:3f:b0:10:ec:d9:db:b3:7d:4d:ec:29:1b:
         88:fd:6b:f0:70:1b:87:f0:78:04:85:c8:7c:cb:3d:a3:0c:59:
         1e:ab:9a:1d:39:b3:b1:3e:4b:7f:08:6b:c2:ed:02:f3:06:6d:
         e1:c7:16:21:95:e9:d3:c9:6a:c1:55:c6:e9:6f:f1:fd:43:ba:
         01:25:4c:bc:74:52:8d:7c:d7:5f:50:3d:40:d6:a6:c0:7b:d9:
         5a:20:94:c9:c2:61:f7:48:05:01:69:76:44:f8:6b:04:57:36:
         d8:cf:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:22 2025 by rpki-client