Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32332d3233203d3e20323635343039.roa
File:                     3136382e3139342e3231322e302f32332d3233203d3e20323635343039.roa (raw, json)
Hash identifier:          BJYNr8JTHIFVBhgj345iF4pq8Je+8BPk2FMtTzM3SIU=
Subject key identifier:   85:AF:3E:F6:60:C7:38:A6:14:3C:D2:92:75:CE:59:0F:50:57:2B:FB
Certificate issuer:       /CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
Certificate serial:       02F5A0FD9D75616E3A482FF53B113480C3CACC63
Authority key identifier: A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32332d3233203d3e20323635343039.roa
Signing time:             Tue 09 May 2023 17:44:16 +0000
ROA not before:           Tue 09 May 2023 17:39:16 +0000
ROA not after:            Tue 07 May 2024 17:44:16 +0000
asID:                     265409
IP address blocks:        168.194.212.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f5:a0:fd:9d:75:61:6e:3a:48:2f:f5:3b:11:34:80:c3:ca:cc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
        Validity
            Not Before: May  9 17:39:16 2023 GMT
            Not After : May  7 17:44:16 2024 GMT
        Subject: CN=85AF3EF660C738A6143CD29275CE590F50572BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:81:b8:1a:d2:ff:70:53:b3:66:64:aa:f5:
                    7f:64:32:0a:dc:ee:ea:0e:e7:53:39:c0:a6:49:64:
                    41:c0:6c:e2:8b:a7:49:b4:73:db:27:d6:87:75:bb:
                    bf:ea:88:c9:d1:0f:56:7b:cb:86:07:c1:3f:98:57:
                    e9:be:da:05:0e:1f:2a:3a:d8:a1:76:ba:dd:d3:36:
                    7e:cd:b3:6f:9a:22:6d:1c:ca:ca:16:15:f6:d2:73:
                    17:58:f2:86:f1:b3:e4:a6:09:be:c5:05:a6:d1:d7:
                    41:c2:de:a2:c4:8d:24:7a:fc:de:a5:a2:ae:d4:cb:
                    28:88:3d:2f:af:f5:8a:1a:da:6a:0b:05:54:45:87:
                    07:a3:5e:42:19:5f:d9:96:b4:69:d0:10:8c:af:a4:
                    7c:16:73:a8:89:55:f6:bf:1d:96:ea:19:45:af:17:
                    af:f6:29:4f:fa:a6:11:f3:ee:db:23:b2:93:6c:4b:
                    16:fa:8a:fb:f1:7d:d3:64:7e:68:77:c8:31:b4:2e:
                    5d:f0:ec:15:e2:57:68:8d:96:57:42:fc:7b:c2:3c:
                    6a:74:b0:18:f6:12:6c:ba:b9:a0:eb:af:a1:fa:04:
                    99:35:d9:ea:d9:5d:be:11:61:dd:1b:80:71:25:b3:
                    58:a8:e7:fa:83:7b:62:27:20:d8:a8:73:31:13:6f:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:3E:F6:60:C7:38:A6:14:3C:D2:92:75:CE:59:0F:50:57:2B:FB
            X509v3 Authority Key Identifier:
                keyid:A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32332d3233203d3e20323635343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:15:e0:36:49:08:22:3a:b8:fa:e2:b9:25:1b:6a:c8:e7:1c:
         54:10:1f:8a:74:24:5d:bd:8c:6b:2b:11:22:d9:62:83:f6:fb:
         a4:20:f1:53:2d:d7:bc:5f:df:80:c2:7e:2a:d5:c0:ae:b7:d8:
         e1:fa:4c:48:97:aa:03:f4:23:b6:00:32:85:04:5f:ec:b2:cb:
         9e:4c:df:75:ca:05:9b:e1:f4:82:9d:4a:e0:f7:1e:7a:c2:ae:
         19:0d:c4:9c:2c:09:db:3b:93:39:bf:fa:c2:04:7d:e4:f0:9b:
         a0:b6:70:18:5a:20:4d:ad:11:8d:3e:13:d1:77:75:d5:61:9c:
         1a:b4:4f:0b:ed:66:57:bd:6e:2c:43:7f:61:b8:cf:ac:1e:07:
         c0:58:fb:af:8c:60:9f:1c:f4:3d:a7:cf:d2:36:1c:46:91:81:
         13:25:ea:d7:b2:85:93:b1:c8:0b:d9:b1:6b:93:58:8d:67:16:
         b6:9c:a8:73:64:1d:da:07:dd:8a:51:64:ae:99:4d:45:68:e9:
         3f:93:f0:77:55:0f:34:be:19:0d:1f:43:b2:b6:e4:31:76:bb:
         65:2b:1c:c8:21:68:07:ad:0a:b8:78:96:93:50:00:08:3d:75:
         c5:c5:b1:a1:2a:d1:ab:88:00:9b:2a:d7:42:56:bc:8c:33:db:
         37:27:23:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:35 2025 by rpki-client