Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa
File:                     3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          GWAI1QujwNXfcoNQstqjOcUk48Vb59obF2GLGX0nGYc=
Subject key identifier:   00:10:A0:88:E2:20:01:AF:9C:2F:86:75:14:DA:14:F3:DD:8C:C9:B4
Certificate issuer:       /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial:       43256708D72C2CA9BC58E3B4845CBD57666952CC
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa
Signing time:             Thu 27 Mar 2025 18:15:55 +0000
ROA not before:           Thu 27 Mar 2025 18:10:55 +0000
ROA not after:            Thu 26 Mar 2026 18:15:55 +0000
asID:                     262346
IP address blocks:        143.202.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:25:67:08:d7:2c:2c:a9:bc:58:e3:b4:84:5c:bd:57:66:69:52:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
        Validity
            Not Before: Mar 27 18:10:55 2025 GMT
            Not After : Mar 26 18:15:55 2026 GMT
        Subject: CN=0010A088E22001AF9C2F867514DA14F3DD8CC9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:81:1b:3d:8e:25:97:05:aa:3e:57:8c:3c:
                    90:9e:b4:31:f2:d2:51:4f:9d:96:e2:92:df:7c:e9:
                    e1:1f:91:43:50:c3:34:04:c3:1e:29:ef:c2:09:d3:
                    d5:95:23:c8:40:6b:72:86:27:9d:a3:97:ed:2f:2b:
                    02:c8:95:cd:e4:b9:47:a1:a7:fc:42:fd:7b:14:fc:
                    95:2e:fb:43:89:35:36:4b:88:8c:ca:96:00:e2:87:
                    9d:f4:ed:d7:76:f3:9f:e7:ac:22:f2:4e:2d:8f:ac:
                    f8:7f:00:8a:25:b9:83:c4:0a:e4:b1:fb:26:93:3b:
                    cc:d5:2e:84:94:e2:a0:0f:08:f7:43:d4:f5:77:d9:
                    aa:f0:3c:70:b0:33:09:7f:a9:45:43:ab:9e:ff:7a:
                    8e:e9:30:0f:62:e5:80:36:d0:a8:2f:78:1a:14:04:
                    78:0d:21:2f:b6:15:a4:d9:d9:4f:73:36:f9:fb:ce:
                    f0:4e:1e:9b:c4:8b:6a:1d:0f:a8:04:d6:15:0f:d9:
                    20:83:92:8a:95:59:12:3c:d0:7e:96:f2:80:10:a5:
                    61:55:0b:4a:de:ff:e0:de:de:e5:fa:c4:fb:b3:fb:
                    f4:5a:86:eb:e2:db:90:e1:fa:54:03:f3:69:d5:7a:
                    aa:2b:6e:8a:19:13:cf:14:d1:16:f0:ee:5e:aa:02:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:A0:88:E2:20:01:AF:9C:2F:86:75:14:DA:14:F3:DD:8C:C9:B4
            X509v3 Authority Key Identifier:
                keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:23:3e:e2:45:d5:f6:a5:fc:df:b6:8f:eb:5c:1d:81:62:fe:
         3a:51:26:89:48:cf:2a:c8:5f:bd:2f:3b:57:47:45:de:68:c4:
         4d:72:60:10:ac:6e:70:73:58:aa:bc:03:40:9e:d3:3c:20:b1:
         6b:ad:8d:e6:03:98:84:d7:40:5e:47:ea:04:99:dd:a4:a2:65:
         68:fd:af:47:5d:af:3c:cc:8d:6a:47:80:67:af:f3:9d:01:e5:
         3c:ee:d8:fc:cc:54:0c:3a:f2:0b:3a:d2:fd:53:a4:f4:71:ee:
         8e:cb:fc:1e:6e:ff:38:af:2b:ed:7b:12:06:2d:3b:09:97:d8:
         be:b6:c6:c6:a9:73:75:3c:07:b6:33:d9:2b:72:5a:4b:a3:74:
         64:df:40:b5:bf:21:bd:b1:a6:c8:f8:b2:a2:34:b0:a9:04:f5:
         43:a0:45:c6:6b:f8:e3:5b:13:cd:22:4c:10:90:03:3d:99:a7:
         d1:eb:92:93:50:28:fa:a8:fd:b1:96:b6:55:2f:55:f2:45:c8:
         50:82:87:13:18:a5:84:74:5c:8a:3e:e3:87:6f:68:04:86:97:
         de:7f:59:7e:3e:af:d8:7e:02:87:e4:a5:2d:05:c9:ba:5d:bd:
         fc:71:a2:37:88:15:41:80:f6:0f:aa:b6:dc:53:4d:de:e5:20:
         ee:b3:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:43:27 2025 by rpki-client