Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/3133322e3235352e3232302e302f32322d3232203d3e20323731343231.roa
File:                     3133322e3235352e3232302e302f32322d3232203d3e20323731343231.roa (raw, json)
Hash identifier:          aWwnigWtQFc0PdIq6kwH/PhVlvTN6iKLQ6NfCqoCr+s=
Subject key identifier:   9A:46:16:2E:1A:D8:C3:05:12:98:33:BA:E4:98:75:2F:15:BE:82:D0
Certificate issuer:       /CN=28B1145835559C99231C2C909D01409CF3D71842
Certificate serial:       55D94B71891CFF5A52D91754009B842C722AB7E9
Authority key identifier: 28:B1:14:58:35:55:9C:99:23:1C:2C:90:9D:01:40:9C:F3:D7:18:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28B1145835559C99231C2C909D01409CF3D71842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/3133322e3235352e3232302e302f32322d3232203d3e20323731343231.roa
Signing time:             Tue 16 May 2023 18:21:37 +0000
ROA not before:           Tue 16 May 2023 18:16:37 +0000
ROA not after:            Tue 14 May 2024 18:21:37 +0000
asID:                     271421
IP address blocks:        132.255.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d9:4b:71:89:1c:ff:5a:52:d9:17:54:00:9b:84:2c:72:2a:b7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28B1145835559C99231C2C909D01409CF3D71842
        Validity
            Not Before: May 16 18:16:37 2023 GMT
            Not After : May 14 18:21:37 2024 GMT
        Subject: CN=9A46162E1AD8C305129833BAE498752F15BE82D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:aa:b5:72:08:34:29:d4:4e:6c:57:14:fd:
                    88:c2:f5:c6:e6:08:97:a1:25:50:1b:c4:5b:ff:93:
                    8c:0b:90:2f:74:74:61:f0:cd:8d:af:54:8f:19:ef:
                    c3:8d:80:f6:a4:8d:cc:f6:66:9a:40:12:e5:8a:17:
                    b6:94:c3:16:60:33:3f:b8:39:43:4c:02:e9:ec:5b:
                    f5:16:53:9f:d0:f3:a8:8d:1d:1a:14:d6:83:50:a8:
                    2c:88:61:53:7c:6c:ea:be:c8:fc:3f:73:f0:bc:3c:
                    95:a3:44:dd:65:c1:5c:5f:18:57:4e:d3:98:a7:8c:
                    40:53:2c:bf:9f:66:12:49:56:69:46:fa:53:b4:23:
                    8a:e1:49:54:b2:c7:6a:de:3e:64:08:be:62:bb:88:
                    5a:d8:ce:5e:01:0f:30:b1:df:35:ef:32:09:13:cc:
                    1d:8a:e5:7b:e9:81:8f:b0:42:d9:7a:58:3c:23:e4:
                    62:ae:c4:fd:4f:1c:d0:bf:e6:91:7e:eb:f1:36:90:
                    49:50:a6:0f:18:cc:41:2d:25:64:7e:4e:36:cf:d8:
                    ec:1d:f5:67:81:a1:0b:52:8e:66:c7:3c:4f:68:3e:
                    1b:39:18:81:0a:f5:36:95:05:19:33:7a:5e:ec:95:
                    38:d9:83:dd:48:ad:d8:6e:56:0f:7d:ab:f0:69:f2:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:16:2E:1A:D8:C3:05:12:98:33:BA:E4:98:75:2F:15:BE:82:D0
            X509v3 Authority Key Identifier:
                keyid:28:B1:14:58:35:55:9C:99:23:1C:2C:90:9D:01:40:9C:F3:D7:18:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/28B1145835559C99231C2C909D01409CF3D71842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28B1145835559C99231C2C909D01409CF3D71842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dgqbbj1TFCmGXPTeU8nfuN6iSkwLkHYjdrVWpM6fHeRt/0/3133322e3235352e3232302e302f32322d3232203d3e20323731343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:90:4c:f2:8a:92:24:4b:90:e8:65:75:63:41:88:a2:44:
         38:30:71:55:a1:22:e9:77:5b:66:b1:0c:8c:74:96:86:a4:8f:
         89:23:8e:ea:1f:9e:a1:fc:f0:a1:b9:23:d0:a5:ff:95:04:ff:
         7f:b1:3d:bf:22:ed:c1:30:7f:88:38:41:8d:63:8f:e2:52:00:
         d0:8f:a6:b0:1a:d4:ac:05:10:c8:cf:3f:c3:3f:b0:57:ce:68:
         24:0e:38:ea:63:b2:bc:b3:4f:14:04:57:1c:25:b9:a8:20:27:
         e7:2e:82:7e:2d:dd:a2:1c:f0:ff:6b:f2:a2:1b:72:31:49:ba:
         e6:1e:ae:bc:f7:88:5f:6b:fc:2d:75:02:52:c7:3f:95:58:58:
         4f:3c:b0:69:6c:e2:00:bf:65:b0:74:e2:b7:ee:e8:38:89:7a:
         8f:1e:8b:9a:2c:d3:e9:29:9e:f1:4d:97:67:21:f3:e6:19:80:
         7b:1d:a2:6e:44:4a:71:5e:79:a6:30:82:a3:a4:13:33:55:d9:
         38:2a:0a:94:e0:41:19:84:4e:64:2e:ec:b5:b2:e7:c2:87:8f:
         18:fd:89:69:0f:3b:87:40:c8:c9:14:94:15:86:12:a0:7f:10:
         d7:82:3c:7c:a4:ab:ca:d0:bc:bf:c7:ba:38:b2:a2:87:d7:26:
         ee:bd:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:10:31 2025 by rpki-client