Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34362e302f32332d3233203d3e20323636363136.roa
File:                     3132382e3230312e34362e302f32332d3233203d3e20323636363136.roa (raw, json)
Hash identifier:          xBM7mGeY/EtHtDo9FmVJG8acNYjypUvQa/FEphsCuDs=
Subject key identifier:   9B:D5:F6:16:4C:AE:09:88:FB:BC:C0:09:02:01:D3:18:35:DB:9B:82
Certificate issuer:       /CN=E581529EEECB200B306C61DF6FC49ADD84C9D239
Certificate serial:       67BF4C6A2DB65FF07076CA3F82E234AE30B09DD2
Authority key identifier: E5:81:52:9E:EE:CB:20:0B:30:6C:61:DF:6F:C4:9A:DD:84:C9:D2:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E581529EEECB200B306C61DF6FC49ADD84C9D239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34362e302f32332d3233203d3e20323636363136.roa
Signing time:             Mon 03 Apr 2023 16:04:44 +0000
ROA not before:           Mon 03 Apr 2023 15:59:44 +0000
ROA not after:            Mon 01 Apr 2024 16:04:44 +0000
asID:                     266616
IP address blocks:        128.201.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:4c:6a:2d:b6:5f:f0:70:76:ca:3f:82:e2:34:ae:30:b0:9d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E581529EEECB200B306C61DF6FC49ADD84C9D239
        Validity
            Not Before: Apr  3 15:59:44 2023 GMT
            Not After : Apr  1 16:04:44 2024 GMT
        Subject: CN=9BD5F6164CAE0988FBBCC0090201D31835DB9B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:50:dd:2e:52:62:63:ca:3f:31:60:be:2e:
                    9d:fc:56:cf:84:ff:11:08:b2:19:f2:bf:d2:31:82:
                    37:55:cd:8f:fc:7c:be:93:ab:dd:73:20:92:0e:da:
                    6c:3d:dc:83:bd:79:4d:9c:0c:27:35:6d:1d:4c:89:
                    aa:8f:a4:d2:ea:e4:29:f9:2e:29:8b:18:98:72:d3:
                    6d:60:aa:d1:34:ce:04:36:58:5a:0f:e7:a2:e0:a9:
                    9c:ad:af:91:86:d9:f3:24:40:19:3c:51:77:55:30:
                    50:2f:81:84:65:86:d6:9e:7b:6c:d7:75:20:a4:fa:
                    3e:34:6c:97:e2:47:6a:e2:75:e3:97:f7:da:71:b0:
                    14:92:d8:05:f6:c6:9b:87:d6:ed:df:bd:db:b6:44:
                    af:ee:98:ec:90:1a:ee:38:45:b8:e6:e9:11:08:f7:
                    1d:dd:ec:44:a5:6b:e1:7a:c7:8f:fc:57:2a:02:59:
                    26:19:ad:e4:04:f9:b3:9d:f0:17:2a:30:cf:6a:39:
                    4c:3f:0b:42:59:d3:e0:2e:f5:98:6a:79:3a:d8:e7:
                    8c:7d:dd:31:10:2a:db:1e:95:8d:31:0d:75:2f:40:
                    46:db:b8:13:c7:29:bd:a5:d0:09:71:66:be:99:a8:
                    43:e4:1b:cb:df:62:4d:05:58:52:f6:08:38:2b:85:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:F6:16:4C:AE:09:88:FB:BC:C0:09:02:01:D3:18:35:DB:9B:82
            X509v3 Authority Key Identifier:
                keyid:E5:81:52:9E:EE:CB:20:0B:30:6C:61:DF:6F:C4:9A:DD:84:C9:D2:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/E581529EEECB200B306C61DF6FC49ADD84C9D239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E581529EEECB200B306C61DF6FC49ADD84C9D239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34362e302f32332d3233203d3e20323636363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:44:9c:2b:e0:c3:b5:6c:93:cc:49:48:b8:60:ee:da:c1:
         86:84:a1:c4:e8:03:91:a3:c2:fe:b1:b6:27:51:b4:39:17:1c:
         9d:f4:79:50:d7:0e:11:71:c9:20:18:6e:16:dc:c5:03:0c:eb:
         37:67:37:ae:a6:e0:9b:d9:af:6b:59:ad:f0:6a:bd:9f:ed:33:
         4d:93:32:f7:be:f5:a9:b1:f3:fb:ec:fc:76:e2:d7:8f:a3:36:
         55:ed:8b:d8:16:d1:99:00:24:66:b3:ab:4f:ff:f3:07:c7:3c:
         e0:21:60:26:51:dd:93:3c:a7:c5:1a:23:1d:c0:39:38:98:04:
         ee:7f:ea:f5:6f:c6:a9:a7:c8:66:31:2f:5d:ba:e3:a6:c7:54:
         92:6b:90:1d:45:04:d6:9f:32:b6:f7:6b:8b:43:ef:b3:ab:e1:
         15:a7:5e:ec:bd:1a:e6:7e:27:ac:6e:d3:3b:05:37:36:11:8f:
         1b:10:88:35:1a:8a:51:7a:12:26:a2:f8:aa:f8:ce:b0:b0:ba:
         a3:4c:f9:f7:61:db:f2:1b:92:e5:d8:06:98:c1:b5:e3:02:0e:
         53:1a:62:2d:52:4f:66:9b:e8:18:89:f7:f0:aa:47:9b:b0:a8:
         52:10:ee:55:c6:a7:aa:b5:d5:35:c4:a7:44:48:97:9b:fd:0f:
         7f:ac:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:47 2025 by rpki-client