Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa
File:                     3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          xLjpZS9fouJQSQpPIqj9HsIURPIZ4qUfwpn4ZHXTk9w=
Subject key identifier:   65:AE:66:93:0B:C9:9F:22:EE:62:62:2F:67:4B:BB:C3:A9:18:C0:65
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       73986967CD5242371B45394D717A7DCC155DF36A
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:15 +0000
ROA not before:           Wed 05 Mar 2025 22:05:15 +0000
ROA not after:            Wed 04 Mar 2026 22:10:15 +0000
asID:                     263073
IP address blocks:        164.163.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:98:69:67:cd:52:42:37:1b:45:39:4d:71:7a:7d:cc:15:5d:f3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:15 2025 GMT
            Not After : Mar  4 22:10:15 2026 GMT
        Subject: CN=65AE66930BC99F22EE62622F674BBBC3A918C065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:a2:bf:0f:a0:6d:c0:d6:d0:9f:a6:ed:bd:
                    bb:00:f5:9c:1a:80:e7:d3:b2:cb:ef:a2:ee:f1:7e:
                    4a:d6:12:f5:ad:23:ed:d0:29:a2:ee:08:fa:26:c7:
                    64:55:c8:cd:d1:0a:88:2d:53:d1:49:1d:ea:d1:20:
                    90:ea:d9:dc:e9:e0:dd:13:13:d8:d7:7d:35:ea:29:
                    ad:48:35:10:2e:48:bb:2b:83:dc:aa:e2:8b:3d:4f:
                    2a:2b:17:e4:2e:37:8a:41:16:47:cd:b5:84:ca:37:
                    2a:b3:71:86:df:62:11:6b:ee:dd:02:5d:0d:85:49:
                    8c:90:ce:46:74:ec:db:58:d3:9d:89:fb:a8:ca:e9:
                    8e:a4:fc:73:87:d6:98:4c:3e:c9:d9:cf:59:85:52:
                    df:19:65:ed:5a:b7:68:c1:bc:c8:d4:b1:04:44:1d:
                    58:8a:b6:83:95:7c:15:3f:68:10:97:ff:90:c3:14:
                    13:68:d9:a4:ac:e4:41:53:74:d3:84:89:6e:5d:14:
                    f4:30:b9:ae:ad:96:cb:a2:a4:7b:16:1c:ea:dc:98:
                    53:86:29:d8:58:b5:39:8c:50:a1:4d:e6:cd:25:7d:
                    cf:de:d9:d7:fc:2d:cc:21:f4:e5:26:3d:ce:ff:74:
                    81:d6:a3:15:25:90:2f:7c:eb:84:a6:38:fb:a4:35:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AE:66:93:0B:C9:9F:22:EE:62:62:2F:67:4B:BB:C3:A9:18:C0:65
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31322e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:db:9a:10:4a:3f:f5:4b:e1:62:5c:34:8d:b0:b9:9d:fa:56:
         bc:c1:cf:3f:6b:7c:51:30:7d:12:02:90:74:fb:f0:c1:25:0d:
         87:48:90:bc:a8:dc:b8:4d:fc:df:5b:31:06:d4:6e:51:9e:f2:
         18:fb:e0:62:25:9b:ac:1c:3a:cc:30:ea:a7:ba:c9:92:23:35:
         60:c5:bb:cb:bc:f4:cf:68:fd:e6:73:6a:bd:2c:f6:fd:70:af:
         af:d4:3a:93:12:97:4b:b4:cb:51:44:34:38:d4:b1:e6:01:e1:
         b0:82:ae:9e:71:9d:21:df:97:3d:ce:e2:dc:cc:06:aa:c0:bc:
         6a:fc:89:5f:6f:6b:7e:6c:9b:dc:40:05:70:21:6f:f0:a3:4f:
         82:7c:5f:38:9f:aa:d7:9b:7b:d5:0e:48:53:8f:22:99:82:07:
         58:14:dd:07:4f:09:20:dd:ba:f2:6d:ae:83:c3:b9:0c:f4:39:
         f6:0a:c1:4e:b5:21:86:58:c1:b5:4e:28:ca:b3:88:68:86:55:
         b7:23:51:ca:4e:2b:3c:c1:ca:f6:fc:ec:5b:65:f0:42:a7:c2:
         e3:6f:ca:f5:84:7c:ff:7f:04:ed:50:69:71:32:88:40:b5:13:
         21:af:01:74:fe:ae:38:48:e3:b5:3c:2a:69:15:55:6f:f6:14:
         9b:7e:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:45:41 2025 by rpki-client