Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/3137302e3233392e3231322e302f32342d3234203d3e20323636333538.roa
File:                     3137302e3233392e3231322e302f32342d3234203d3e20323636333538.roa (raw, json)
Hash identifier:          CBd+1yz9dqJIR9rijJIPFlZ8NiKoGiVRJKWvlqw4bQM=
Subject key identifier:   DE:B2:0F:15:72:15:01:0E:82:8C:C6:EE:46:26:F4:81:4F:01:EF:19
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       0B36B5023799CA872901D520766ECCECD56B6CB6
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/3137302e3233392e3231322e302f32342d3234203d3e20323636333538.roa
Signing time:             Tue 08 Aug 2023 00:46:59 +0000
ROA not before:           Tue 08 Aug 2023 00:41:59 +0000
ROA not after:            Tue 06 Aug 2024 00:46:59 +0000
asID:                     266358
IP address blocks:        170.239.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:36:b5:02:37:99:ca:87:29:01:d5:20:76:6e:cc:ec:d5:6b:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Aug  8 00:41:59 2023 GMT
            Not After : Aug  6 00:46:59 2024 GMT
        Subject: CN=DEB20F157215010E828CC6EE4626F4814F01EF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:81:74:06:68:ae:d2:b2:2b:bb:53:74:18:
                    d2:bf:7b:0c:c9:80:54:3d:29:32:37:dd:dd:02:4b:
                    ff:b8:82:ed:be:1a:24:91:6a:59:82:14:ce:96:2c:
                    1e:7f:c8:f5:44:78:58:db:51:80:1b:cc:dd:0d:fc:
                    94:82:cd:6d:23:0f:fa:37:b7:16:f5:f4:bc:3b:af:
                    0e:0c:5b:9f:3c:54:eb:57:a0:94:e8:26:f0:34:e3:
                    88:83:07:d9:8b:62:24:e9:b8:db:bb:6d:d2:bd:58:
                    e6:ed:80:e1:4c:22:3a:49:5d:fc:6c:9b:3f:70:0a:
                    a5:71:d5:85:b2:70:89:44:82:33:6a:10:b4:6d:fe:
                    8f:15:23:23:d3:66:ca:4d:d7:d0:fc:55:72:d3:43:
                    21:ec:71:80:98:11:fe:1b:d8:b5:3d:42:10:e3:fe:
                    4e:67:c3:01:02:17:20:89:39:a3:d7:36:58:39:e1:
                    c4:3b:ca:a9:17:1b:55:86:7d:58:6e:66:a8:a1:70:
                    96:31:d6:64:aa:35:85:00:e3:f6:31:5a:d3:93:9a:
                    3e:1f:55:75:c0:63:46:06:fb:0c:05:bd:ad:82:1c:
                    e6:53:fd:ac:65:b6:bc:c4:17:2c:d6:eb:89:f4:82:
                    5d:34:64:bb:fe:43:dd:fd:05:db:7f:31:e5:8d:02:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B2:0F:15:72:15:01:0E:82:8C:C6:EE:46:26:F4:81:4F:01:EF:19
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/3137302e3233392e3231322e302f32342d3234203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:2a:67:39:21:82:4d:91:12:4e:a7:aa:c2:f9:bc:1a:bc:
         c7:8f:37:37:bb:20:1c:7e:59:62:bd:3d:c6:ec:23:69:f4:c5:
         1d:41:c1:98:e5:f5:d4:6c:37:87:b5:3e:25:9d:7d:d9:66:3a:
         94:f1:67:f8:85:03:a5:6c:bf:f8:4c:c6:ff:97:62:b1:46:87:
         c9:0e:30:97:27:00:6c:1f:ca:07:ab:a7:b8:93:56:d4:38:2e:
         39:be:60:7a:da:0a:c3:7e:14:5d:59:a1:96:c4:77:10:6a:2a:
         3e:5e:8f:ab:8c:57:1a:90:49:20:09:5a:88:59:33:33:f2:c0:
         28:dc:e2:74:2b:ed:bd:54:8a:62:27:c4:df:50:4c:e2:d2:24:
         25:53:27:94:37:5e:90:d1:1a:f2:d4:ad:b6:44:32:7d:23:d1:
         52:1a:f4:b3:81:36:3f:8f:dc:3a:64:ac:b3:ee:70:08:b4:2b:
         c9:f3:9c:18:21:56:21:c0:c7:58:6d:c9:1a:3f:3e:ce:c7:de:
         bc:ac:94:0c:c9:8f:99:73:8e:07:e4:95:8c:ce:50:94:f8:35:
         6b:b7:be:f9:33:db:1c:ae:06:8c:db:f0:18:61:8b:b8:6e:a4:
         d9:21:f8:0f:ee:a8:5c:ac:df:41:91:f7:37:30:c6:1c:e0:17:
         1b:58:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:09:57 2025 by rpki-client