Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3232203d3e20323636363136.roa
File:                     3132382e3230312e34342e302f32322d3232203d3e20323636363136.roa (raw, json)
Hash identifier:          5XYbCrWDAtooYO1urMb0KQT6dN5xBNIJaisQn8yLoOo=
Subject key identifier:   6F:5B:5B:A8:36:19:66:8B:5B:2C:92:FD:0E:86:2A:F1:3E:FB:E7:30
Certificate issuer:       /CN=E581529EEECB200B306C61DF6FC49ADD84C9D239
Certificate serial:       54DC7ED92775E921B8377209CC8B1F18F6916AE2
Authority key identifier: E5:81:52:9E:EE:CB:20:0B:30:6C:61:DF:6F:C4:9A:DD:84:C9:D2:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E581529EEECB200B306C61DF6FC49ADD84C9D239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3232203d3e20323636363136.roa
Signing time:             Mon 03 Apr 2023 16:03:59 +0000
ROA not before:           Mon 03 Apr 2023 15:58:59 +0000
ROA not after:            Mon 01 Apr 2024 16:03:59 +0000
asID:                     266616
IP address blocks:        128.201.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:dc:7e:d9:27:75:e9:21:b8:37:72:09:cc:8b:1f:18:f6:91:6a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E581529EEECB200B306C61DF6FC49ADD84C9D239
        Validity
            Not Before: Apr  3 15:58:59 2023 GMT
            Not After : Apr  1 16:03:59 2024 GMT
        Subject: CN=6F5B5BA83619668B5B2C92FD0E862AF13EFBE730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:76:89:23:76:c3:b5:d5:8b:b0:9f:56:b2:
                    a2:fc:45:07:c0:92:17:36:40:f9:f6:a4:9e:7b:cd:
                    28:28:e7:e6:df:9e:70:51:6b:a9:40:34:f3:c5:b7:
                    1f:9b:56:26:4d:cf:fc:63:df:1d:29:55:41:d9:3b:
                    32:79:71:dd:31:fb:e6:53:0f:69:bd:94:34:96:56:
                    82:7e:12:bf:da:fa:b3:08:f4:0c:96:08:59:49:b6:
                    42:cf:88:e2:07:e3:15:de:ce:d7:ad:7a:a0:93:05:
                    e6:1f:3e:fd:ca:0f:52:79:a4:06:fa:f9:08:3c:a4:
                    a5:48:41:b5:c0:b6:01:88:8d:4e:04:f3:be:6b:30:
                    9c:5a:a3:a2:53:07:9c:7d:4d:e7:12:84:18:a2:85:
                    0d:7a:b1:15:78:ec:82:52:b1:59:fe:63:b7:36:5d:
                    47:85:74:b1:06:b6:40:56:74:8a:06:67:97:c4:af:
                    90:21:44:e3:7d:c4:57:42:2e:45:e3:c3:64:df:13:
                    a6:8a:d9:0a:f5:dc:a4:4b:65:ec:81:b1:83:fb:5d:
                    70:16:9b:d3:33:c8:a7:41:74:20:2c:ae:67:52:a4:
                    26:2b:e6:3e:8d:b6:5d:ce:55:2a:94:79:43:ff:ca:
                    7d:2d:9d:dc:85:e6:ab:4c:ba:3d:c4:2a:fa:35:48:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:5B:A8:36:19:66:8B:5B:2C:92:FD:0E:86:2A:F1:3E:FB:E7:30
            X509v3 Authority Key Identifier:
                keyid:E5:81:52:9E:EE:CB:20:0B:30:6C:61:DF:6F:C4:9A:DD:84:C9:D2:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/E581529EEECB200B306C61DF6FC49ADD84C9D239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E581529EEECB200B306C61DF6FC49ADD84C9D239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3232203d3e20323636363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:8d:87:b2:02:69:2c:a2:86:11:78:87:df:81:ae:f0:f3:b0:
         12:80:b1:9e:32:89:23:73:b3:b0:07:55:f9:1b:a5:f3:c1:01:
         cf:27:ac:6d:b6:06:61:c0:94:b4:83:36:0c:0b:07:7d:2c:91:
         f5:bd:96:03:a7:0a:8c:50:3e:43:01:76:4f:26:17:92:9f:ca:
         d7:f4:38:c7:4d:ac:e7:b4:99:6b:f6:47:b1:a2:88:4d:b4:c0:
         8f:64:b9:f0:50:f6:75:bf:c5:33:26:ea:98:44:71:77:34:ee:
         8a:be:03:a6:e9:4f:27:63:61:0d:cf:47:ab:75:26:ad:90:51:
         95:db:1a:86:20:17:5d:43:76:71:5c:5e:3a:8e:69:01:ce:41:
         4e:b2:5e:04:0b:51:f4:ce:d9:ed:2c:fe:92:2b:2e:63:be:96:
         a1:e0:4d:4a:93:aa:c6:55:d5:4b:6d:bf:f4:fd:49:5a:cd:69:
         bc:9b:af:55:b2:77:36:be:b2:d4:27:c9:3f:a9:fd:a4:96:c5:
         59:89:7d:4c:22:c9:0b:ad:22:a5:3b:e0:15:f0:13:dd:b5:6b:
         d3:32:27:b7:a6:a9:23:b7:b3:46:ff:01:05:9e:be:77:09:86:
         50:46:12:8b:b4:d5:fb:12:43:2e:ad:44:83:e7:ec:8d:0e:9d:
         58:74:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:49 2025 by rpki-client