Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32322d3332203d3e20323635313532.roa
File:                     3134332e3235352e3133322e302f32322d3332203d3e20323635313532.roa (raw, json)
Hash identifier:          ZRt+jaTotXBcnNyGIONqMNQKE7OHiIcfYdHfFfRwRXo=
Subject key identifier:   9B:5E:01:D6:2C:6D:1A:BC:40:29:F0:4E:50:E4:26:4C:5D:47:FE:B2
Certificate issuer:       /CN=81322C566E24B41E61B4AD67166BF432862840AC
Certificate serial:       4FCF3D4EB3B72CF2AEF04F941FF1428D6AE4AAE7
Authority key identifier: 81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32322d3332203d3e20323635313532.roa
Signing time:             Fri 23 Feb 2024 18:11:36 +0000
ROA not before:           Fri 23 Feb 2024 18:06:36 +0000
ROA not after:            Fri 21 Feb 2025 18:11:36 +0000
asID:                     265152
IP address blocks:        143.255.132.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:3d:4e:b3:b7:2c:f2:ae:f0:4f:94:1f:f1:42:8d:6a:e4:aa:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81322C566E24B41E61B4AD67166BF432862840AC
        Validity
            Not Before: Feb 23 18:06:36 2024 GMT
            Not After : Feb 21 18:11:36 2025 GMT
        Subject: CN=9B5E01D62C6D1ABC4029F04E50E4264C5D47FEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:97:16:1f:06:a1:2d:a4:ec:0e:87:09:e8:
                    d1:ed:a1:42:17:21:6d:0b:c3:7c:fa:cb:30:92:cc:
                    35:ac:45:81:2c:2d:52:7f:3a:05:23:78:78:b5:20:
                    7b:63:e0:0d:bf:40:fe:89:ea:c5:24:72:10:1c:5f:
                    32:84:76:b6:c1:52:03:88:bc:f8:66:11:eb:88:f4:
                    07:d6:86:c6:62:74:41:a0:37:9e:f4:7d:67:b0:b4:
                    36:ae:88:60:00:47:8a:7d:09:2e:a6:aa:89:0f:9a:
                    95:6b:2b:f6:1e:97:9c:06:29:86:1b:7a:10:15:d3:
                    1d:9f:9f:7c:45:99:32:77:f7:1c:ea:b8:20:ea:c8:
                    e6:6c:7d:8f:db:a2:25:e9:54:47:a7:c7:7d:b0:fc:
                    7a:35:fd:67:17:03:2d:57:e4:e7:fd:16:45:7c:ca:
                    2d:fc:b8:3d:6b:2b:fd:e0:3a:9b:70:c6:4e:13:11:
                    22:26:99:03:fd:3b:51:9c:2f:23:b3:55:5d:4a:ee:
                    f5:b5:de:7b:f8:dd:4c:e6:7e:00:9c:a0:3f:e3:5d:
                    4a:a6:95:dd:86:92:1d:0a:0c:c5:e0:15:4d:ec:4f:
                    61:f6:dd:eb:48:8a:a2:47:db:8c:b8:cc:8d:72:73:
                    9a:fd:a9:a1:ac:a5:65:bc:45:58:86:37:2d:43:a2:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5E:01:D6:2C:6D:1A:BC:40:29:F0:4E:50:E4:26:4C:5D:47:FE:B2
            X509v3 Authority Key Identifier:
                keyid:81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/81322C566E24B41E61B4AD67166BF432862840AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32322d3332203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:64:28:f7:f5:85:0b:2f:42:b9:28:23:74:a5:88:8d:f7:8e:
         51:1e:2a:14:f6:a4:ab:5d:86:06:bd:df:d8:f6:c1:03:6e:53:
         5d:ce:8a:3e:9e:bb:3a:6e:27:a2:19:68:59:9a:ec:07:47:12:
         da:b2:37:4b:69:f3:b7:30:b1:a9:8f:12:6a:40:07:b3:1b:1e:
         3a:e8:05:fa:90:7f:9a:42:b4:3e:5e:99:9e:1d:1f:37:f0:7c:
         30:4d:0e:4b:f7:83:99:96:bf:4d:8f:40:34:a5:7b:ec:df:ea:
         a0:59:09:ee:e3:ac:8e:c9:89:e2:e7:7b:4a:85:89:5a:d4:43:
         7e:31:1a:e1:03:3c:04:c8:72:24:4f:9b:09:e2:81:51:88:05:
         38:67:ba:94:af:9d:5d:95:b4:78:39:4a:e7:2f:66:7b:1d:f3:
         7d:89:62:22:7a:41:09:04:88:0e:9b:1b:8d:03:0e:2e:2e:17:
         da:cc:78:d6:d5:76:b5:ba:87:1d:6c:1e:90:29:53:e6:0c:d1:
         80:d6:35:5b:1d:8c:ed:80:59:f1:ad:f4:8f:01:7b:b3:af:11:
         87:de:05:2c:8b:a1:68:eb:39:70:a6:c8:71:68:23:ae:1a:d3:
         aa:0c:d1:54:7e:be:91:16:3b:1c:bc:47:7c:58:71:db:f7:6a:
         85:8d:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:50:52 2025 by rpki-client