Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa
File:                     3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa (raw, json)
Hash identifier:          NWnp+c7LxAiGOgxxwwduZi5kqaeupBD/93u81JYi3os=
Subject key identifier:   19:87:75:B1:63:0E:26:D1:6A:75:5E:22:69:9E:68:BF:B6:79:06:9F
Certificate issuer:       /CN=E098788220DC9B9F9EB517AEFC6B76A6FD019F77
Certificate serial:       7C9F270E2E3C2A0EE967B2A9E7F5207BA4E76708
Authority key identifier: E0:98:78:82:20:DC:9B:9F:9E:B5:17:AE:FC:6B:76:A6:FD:01:9F:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa
Signing time:             Wed 03 Apr 2024 20:17:58 +0000
ROA not before:           Wed 03 Apr 2024 20:12:58 +0000
ROA not after:            Wed 02 Apr 2025 20:17:58 +0000
asID:                     267448
IP address blocks:        192.141.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9f:27:0e:2e:3c:2a:0e:e9:67:b2:a9:e7:f5:20:7b:a4:e7:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E098788220DC9B9F9EB517AEFC6B76A6FD019F77
        Validity
            Not Before: Apr  3 20:12:58 2024 GMT
            Not After : Apr  2 20:17:58 2025 GMT
        Subject: CN=198775B1630E26D16A755E22699E68BFB679069F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:92:1b:f2:1e:00:2a:76:08:15:ee:33:e1:
                    9c:d0:9d:04:61:f4:79:df:83:46:9a:b1:a4:5c:ad:
                    bf:95:af:88:71:fb:73:b6:47:76:a6:c9:e7:09:ec:
                    bc:b7:92:45:1a:65:29:55:37:8d:ed:f3:b4:21:0d:
                    38:b0:43:8d:4e:6b:ca:7f:6a:4c:02:42:cf:9a:45:
                    fb:71:54:2f:4e:ac:82:88:b5:2b:18:e4:9c:22:f6:
                    3a:19:f7:23:e5:42:a0:48:fd:bf:b1:e3:50:60:41:
                    54:95:51:c0:a4:e3:2c:c3:e8:83:50:e8:34:26:20:
                    ff:08:e2:51:8d:eb:3e:b7:97:89:c3:aa:84:7d:31:
                    23:94:f1:b2:ac:cb:32:c9:92:f3:07:86:b4:03:eb:
                    8f:48:8d:3c:ae:0d:17:9c:02:8b:70:9e:c8:1e:00:
                    f6:ac:6c:06:d1:00:c4:e5:0b:20:5f:11:19:5b:ea:
                    f2:15:a0:e5:e1:57:5e:00:a1:bf:e4:5a:d1:8c:69:
                    cf:30:38:b6:ae:5d:c5:71:0b:69:70:e1:06:4e:c9:
                    17:38:1b:91:7f:40:97:30:6a:60:35:fd:e5:c4:53:
                    62:dc:5c:dc:fe:1a:ab:ce:e4:c8:98:d8:41:05:0c:
                    dd:6c:79:3b:a2:85:f5:d6:1f:9c:df:9a:3a:ae:b3:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:75:B1:63:0E:26:D1:6A:75:5E:22:69:9E:68:BF:B6:79:06:9F
            X509v3 Authority Key Identifier:
                keyid:E0:98:78:82:20:DC:9B:9F:9E:B5:17:AE:FC:6B:76:A6:FD:01:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E098788220DC9B9F9EB517AEFC6B76A6FD019F77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/1/3139322e3134312e36302e302f32332d3233203d3e20323637343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:7a:f5:2d:fd:8e:03:2e:bd:50:04:c6:e8:4e:7e:0d:33:e4:
         d6:23:70:49:17:6c:6f:a0:7e:97:7e:5e:40:df:06:6e:25:45:
         c4:68:20:18:c9:77:c7:3c:1d:83:5b:85:98:e2:8b:53:6b:cc:
         aa:fa:8b:bc:bd:1a:77:ae:48:49:e7:b7:58:19:1d:35:b2:a9:
         ed:31:14:d8:60:cc:a6:dd:27:cf:b3:2e:1c:92:15:d9:88:9c:
         f6:c4:e6:a4:3b:30:82:59:93:95:5e:05:b1:f5:aa:75:64:73:
         b3:cb:f0:8c:66:00:05:ab:04:e5:43:9c:16:22:b6:ae:84:9d:
         96:5a:02:4a:2d:4c:7c:f2:14:c2:de:03:b7:95:17:59:68:57:
         cb:5b:4a:b0:f5:64:e4:9a:98:23:eb:5f:5e:7e:0a:e5:c0:78:
         96:08:3b:df:ea:ff:a4:6d:81:49:0e:2f:6b:5a:7a:12:93:bf:
         1f:a0:73:9c:ab:7c:c9:f9:eb:b1:c8:17:2b:53:2b:23:0b:ad:
         af:9b:dd:f9:72:fa:78:2a:b8:d6:e8:34:8f:94:15:ed:14:6d:
         46:80:3c:a2:3d:15:47:e4:99:34:99:a3:b0:83:8b:bc:2e:ff:
         90:ad:c9:8a:b8:ca:68:78:7c:1a:f5:99:c5:4c:4f:47:59:15:
         d0:85:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:30:02 2025 by rpki-client