Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230302e302f32332d3233203d3e20323636303133.roa
File:                     3137302e3234342e3230302e302f32332d3233203d3e20323636303133.roa (raw, json)
Hash identifier:          mREgyB6Ld4tH+VP3CdGLsjg0vvfvSRUEQaYIhMMucTs=
Subject key identifier:   16:E8:EA:69:16:0E:3D:BB:F1:98:AF:D3:02:30:51:79:D9:20:5A:18
Certificate issuer:       /CN=0CF49321F81789A195BED10A6CB07A13AF657F42
Certificate serial:       395708A817F94C68EADC063A932B318AEAD2EB26
Authority key identifier: 0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230302e302f32332d3233203d3e20323636303133.roa
Signing time:             Thu 06 Mar 2025 13:27:24 +0000
ROA not before:           Thu 06 Mar 2025 13:22:24 +0000
ROA not after:            Thu 05 Mar 2026 13:27:24 +0000
asID:                     266013
IP address blocks:        170.244.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:57:08:a8:17:f9:4c:68:ea:dc:06:3a:93:2b:31:8a:ea:d2:eb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF49321F81789A195BED10A6CB07A13AF657F42
        Validity
            Not Before: Mar  6 13:22:24 2025 GMT
            Not After : Mar  5 13:27:24 2026 GMT
        Subject: CN=16E8EA69160E3DBBF198AFD302305179D9205A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:13:11:f8:ac:5d:87:98:b6:10:03:2b:d2:
                    cd:3f:42:4c:2a:ca:9b:80:70:6e:46:55:b8:07:20:
                    a8:67:d7:1f:55:6f:9e:b1:9c:ee:33:4a:cb:8a:09:
                    eb:36:fb:f4:e4:4d:36:fb:9c:e0:42:11:15:81:42:
                    9e:fd:5e:39:55:f9:53:95:97:14:2c:15:98:c6:bb:
                    b6:43:52:ed:f6:c6:42:e3:56:80:82:27:1b:e4:56:
                    e8:d4:13:af:84:75:13:20:ec:f6:7b:3c:9d:ff:75:
                    af:95:f3:dd:6b:ce:d9:7d:9f:ae:47:f6:9c:e6:b7:
                    33:ca:8d:98:4e:f8:bb:85:ea:8f:e9:86:ec:29:e9:
                    f8:16:89:0b:3e:2a:a3:35:0c:db:10:51:45:47:fb:
                    b4:4b:3a:4f:4b:38:92:4a:42:bc:7a:39:49:87:dd:
                    25:1c:2a:92:e4:33:f4:a9:83:39:74:7b:db:be:c1:
                    c1:93:ae:de:43:13:1c:f7:8e:50:3d:da:da:86:52:
                    78:c7:e9:6a:34:3e:dc:98:81:e5:9a:95:b3:dc:d1:
                    29:a9:49:23:f1:17:e2:b2:00:23:2b:6e:2c:9a:d1:
                    05:94:09:fa:9d:a2:2c:6d:77:ce:d8:c8:ce:e3:7b:
                    c1:c2:eb:55:13:bf:d0:27:ba:2f:7a:3f:58:a2:87:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:EA:69:16:0E:3D:BB:F1:98:AF:D3:02:30:51:79:D9:20:5A:18
            X509v3 Authority Key Identifier:
                keyid:0C:F4:93:21:F8:17:89:A1:95:BE:D1:0A:6C:B0:7A:13:AF:65:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/0CF49321F81789A195BED10A6CB07A13AF657F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF49321F81789A195BED10A6CB07A13AF657F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/2/3137302e3234342e3230302e302f32332d3233203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:cd:ec:62:5f:99:91:71:9f:91:48:78:3b:27:8e:76:b9:
         e8:67:79:40:37:3f:30:7c:8c:f5:63:d1:b1:9b:27:39:84:12:
         ca:54:69:41:e0:ab:40:1a:c8:92:0c:35:5f:50:33:ef:60:b3:
         31:66:ae:b0:f4:e8:a4:67:ff:84:76:ef:d3:b3:68:29:d4:82:
         d3:f5:39:e4:aa:75:ef:48:97:d3:73:60:6c:fa:52:e8:85:d0:
         16:9f:ae:06:fb:3f:a1:a1:f2:ef:dc:f6:d6:2e:3d:6a:c0:28:
         66:8d:91:de:82:fc:f2:66:d6:0f:8f:7c:95:5d:35:b4:b1:a8:
         f7:90:c3:fd:f4:72:5d:49:62:e7:71:98:98:60:7d:58:41:3b:
         79:87:7a:aa:83:85:6b:1b:dc:be:91:d8:c6:cf:b8:8a:76:9e:
         32:3b:17:c2:9f:be:6b:83:2f:3e:f9:e4:94:67:f6:71:4d:a3:
         40:0d:9c:55:b7:ff:ed:e1:34:65:68:1e:9b:2d:fa:36:a4:42:
         ce:51:2c:6b:a9:e6:04:9f:3d:e0:7e:1f:c0:61:c8:3d:28:4b:
         e4:fb:4f:35:62:c9:06:e3:74:62:f2:dd:13:6b:6d:40:eb:c3:
         65:b4:3d:11:da:4f:6c:39:8b:95:ef:79:c9:a4:b3:39:08:4b:
         cd:73:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:19 2025 by rpki-client