Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32332d3233203d3e20323633303639.roa
File:                     3136382e302e3132382e302f32332d3233203d3e20323633303639.roa (raw, json)
Hash identifier:          3zan8Y0hG11YHjzfT5pY8DW5wnc2x7aAPKahoeUMme0=
Subject key identifier:   F3:82:B4:9B:AC:CC:B1:A9:DB:DE:14:2F:EF:BE:E9:4D:55:9D:04:69
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       44BFEBA00AED0B6DCFE09EA8CC91FFD0B4A35DCF
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32332d3233203d3e20323633303639.roa
Signing time:             Fri 11 Aug 2023 15:12:38 +0000
ROA not before:           Fri 11 Aug 2023 15:07:38 +0000
ROA not after:            Fri 09 Aug 2024 15:12:38 +0000
asID:                     263069
IP address blocks:        168.0.128.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:eb:a0:0a:ed:0b:6d:cf:e0:9e:a8:cc:91:ff:d0:b4:a3:5d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Aug 11 15:07:38 2023 GMT
            Not After : Aug  9 15:12:38 2024 GMT
        Subject: CN=F382B49BACCCB1A9DBDE142FEFBEE94D559D0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:1c:ae:b4:d5:2b:cc:d5:b2:90:9a:28:51:
                    b1:c8:a6:fc:6a:e6:db:fc:25:2d:e2:d2:4c:9d:58:
                    24:93:bf:aa:21:ab:b6:c0:12:d6:37:e8:d4:4a:b8:
                    c9:44:4c:c7:fb:bb:82:3f:3d:4a:2d:bc:ea:8e:bf:
                    a2:6f:02:58:e8:02:8c:72:18:3e:f4:de:5a:b5:73:
                    0a:23:b9:69:3f:8a:bd:ad:9a:ae:d3:6b:d7:2a:9c:
                    ce:a9:7d:40:13:84:81:c9:4f:06:58:a8:68:b3:3c:
                    d0:a8:8a:7e:b0:34:cd:df:17:f1:65:31:f8:2c:d7:
                    4c:aa:a5:24:aa:9a:fd:25:5d:19:5b:0f:98:6e:47:
                    cb:cf:f4:b4:7b:70:ea:7d:08:71:b7:0f:d5:63:04:
                    ca:d6:a6:63:cd:3b:ec:e8:19:6e:44:e5:e1:9b:cc:
                    01:ab:2d:48:6a:02:a8:8b:6e:57:fd:5f:c0:6b:bb:
                    7f:4e:d5:b4:8a:77:5a:69:ff:a8:17:bb:22:1c:15:
                    12:86:be:f8:31:f1:96:1c:6f:3c:98:dc:88:7e:3b:
                    e1:0d:32:b0:35:06:d0:e5:9a:1c:24:eb:77:b8:c7:
                    46:7b:97:03:18:88:50:68:19:d9:a1:33:2b:cc:e1:
                    c8:6b:88:b0:f5:ee:df:5d:7e:3e:75:b9:0a:38:68:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:B4:9B:AC:CC:B1:A9:DB:DE:14:2F:EF:BE:E9:4D:55:9D:04:69
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32332d3233203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:8b:aa:60:83:1e:f6:b9:88:74:93:2e:22:94:fa:64:9e:
         91:b4:e8:58:2d:72:f5:a1:1c:e1:fd:d5:bf:f1:fe:fe:9f:22:
         d4:18:d3:5f:76:a5:49:7d:d9:70:98:be:fd:9f:4a:0f:81:b6:
         1d:2a:2c:a6:a6:53:27:8d:60:4a:5c:a2:b1:5e:3d:47:23:95:
         24:58:25:88:41:16:b1:5c:10:21:55:f8:e9:ae:25:a7:af:cf:
         6d:1c:c6:70:97:55:0a:3b:d4:aa:f9:1d:9c:65:47:3e:0b:66:
         2d:76:2a:cb:b8:6f:04:b6:d8:fe:ce:b1:07:a9:5e:8a:1f:60:
         2f:ce:84:74:68:3f:ad:87:6e:65:ee:6a:f0:5b:8d:db:59:0a:
         ff:7e:dd:bb:0b:bc:b8:f0:51:f6:91:24:8b:23:08:ba:bd:93:
         b8:83:1c:ee:e8:37:39:c1:cc:4f:5d:9c:d9:bf:b9:8c:35:73:
         24:46:8a:8a:3b:5b:7c:66:90:74:0c:ba:90:3e:70:00:83:b5:
         e0:03:19:6a:73:ef:19:55:7b:9c:e4:73:05:b8:27:39:41:7d:
         7f:e7:84:53:f8:12:23:bb:8c:b8:fb:1f:f9:7b:53:83:06:72:
         f4:78:60:ad:4b:bc:1b:e3:b6:88:c6:68:cb:fd:f1:03:c2:77:
         c3:8a:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:10 2025 by rpki-client