Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa
File:                     3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          9MrfPDah04yMdE+Y8FMwL9Y6b3p9Su0kSzInYb/QOOI=
Subject key identifier:   08:7B:11:19:52:5A:DA:2B:38:10:0D:F0:42:6C:2A:1D:01:22:A3:A5
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       3987138A5366D279153AF9AECB9A6753CAD0A10B
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:19 +0000
ROA not before:           Wed 05 Mar 2025 22:05:19 +0000
ROA not after:            Wed 04 Mar 2026 22:10:19 +0000
asID:                     263073
IP address blocks:        168.121.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:87:13:8a:53:66:d2:79:15:3a:f9:ae:cb:9a:67:53:ca:d0:a1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:19 2025 GMT
            Not After : Mar  4 22:10:19 2026 GMT
        Subject: CN=087B1119525ADA2B38100DF0426C2A1D0122A3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:1e:2c:e4:b4:e4:2b:f5:ac:34:20:46:37:
                    5f:fb:9d:f8:53:82:d8:35:02:97:9a:6a:7c:1c:92:
                    bb:60:db:be:76:76:bb:bc:65:c9:05:60:40:52:be:
                    1f:86:da:98:8d:f0:49:07:bb:ac:ee:81:94:19:99:
                    f5:5b:92:39:82:d9:e8:e0:da:a0:50:a6:a0:f2:5e:
                    8c:dd:d1:9d:a4:3f:9f:ac:f9:42:37:0d:88:b7:23:
                    a3:d8:dd:f1:b1:30:f2:e7:37:37:e0:56:7b:05:4c:
                    6c:15:10:ef:db:eb:2f:b0:69:66:73:36:88:f4:80:
                    a4:93:19:02:46:62:d1:e6:0a:5c:40:68:ac:4c:71:
                    54:52:1d:49:a6:c0:c6:c8:6c:96:fc:22:74:2a:01:
                    0d:b2:9f:11:5d:ac:c1:97:6c:31:cb:23:6c:20:e6:
                    bf:57:51:10:eb:78:c4:6e:32:4f:45:8b:df:31:f4:
                    ba:23:ac:0f:2d:99:c3:13:d2:19:c2:13:d6:a3:9a:
                    73:45:3e:22:aa:6d:77:47:40:67:58:ff:6a:1b:5e:
                    da:ae:88:1c:72:9b:76:3f:46:df:8e:a5:c7:50:76:
                    67:07:72:f8:d6:b3:fd:1d:c9:c8:eb:4c:a7:63:bd:
                    36:aa:2c:29:51:fe:e8:5d:04:3e:7d:a4:c2:a6:55:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7B:11:19:52:5A:DA:2B:38:10:0D:F0:42:6C:2A:1D:01:22:A3:A5
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136382e3132312e3139332e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:98:45:da:cc:16:71:2f:b2:2f:d2:06:90:3d:6f:d2:97:
         a5:b8:48:25:72:9d:79:dc:17:38:f1:ec:d6:5c:b6:93:7c:59:
         38:52:14:33:c8:35:83:5d:59:2a:15:d6:21:79:51:81:bc:15:
         75:f4:bb:2f:2e:eb:bc:2f:c4:f2:5d:aa:15:88:d1:e9:61:4d:
         78:68:dd:3a:ce:83:10:45:23:22:9f:27:b6:24:88:14:e3:a4:
         dd:50:34:09:da:7a:d0:8c:d9:eb:05:fb:0e:08:72:b1:34:47:
         c1:ec:14:64:b4:4b:ae:82:5c:7f:6f:33:7a:3d:e0:6f:98:22:
         67:65:d6:53:d5:0d:72:fd:d8:a8:b6:37:41:53:4a:ef:d3:c5:
         a6:8e:ce:7f:23:a5:56:1a:1e:9d:95:70:ad:7f:4a:7e:79:92:
         03:2c:25:84:c9:7b:3e:fd:28:34:9e:10:fd:f4:d0:d5:07:56:
         6f:42:a5:1f:22:c0:d8:e1:a6:51:a3:29:13:19:52:bf:73:1b:
         9e:14:00:06:75:50:1b:90:d7:af:d2:65:44:e5:70:fa:85:05:
         87:bf:52:25:9f:31:bd:10:84:31:a7:ee:ac:86:9d:f3:1a:79:
         70:1f:f6:db:a4:85:e3:8f:3b:4e:11:b8:80:4e:41:95:9a:85:
         33:33:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:00:41 2025 by rpki-client