Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa
File:                     3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa (raw, json)
Hash identifier:          MjyGntER/Jq9Aa/dIFnejoo6keC+OMH3J+rJS1AET9Y=
Subject key identifier:   E3:04:46:82:E7:1D:F3:F1:CB:76:04:97:8B:51:73:C0:90:67:AF:CB
Certificate issuer:       /CN=E35DBE2041EBF34AAB0D87561D88726CB15142C5
Certificate serial:       1C77D1174F674E4047C60D7508BD470249A580BC
Authority key identifier: E3:5D:BE:20:41:EB:F3:4A:AB:0D:87:56:1D:88:72:6C:B1:51:42:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa
Signing time:             Thu 10 Nov 2022 18:34:35 +0000
ROA not before:           Thu 10 Nov 2022 18:29:35 +0000
ROA not after:            Thu 09 Nov 2023 18:34:35 +0000
asID:                     265301
IP address blocks:        168.121.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:77:d1:17:4f:67:4e:40:47:c6:0d:75:08:bd:47:02:49:a5:80:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DBE2041EBF34AAB0D87561D88726CB15142C5
        Validity
            Not Before: Nov 10 18:29:35 2022 GMT
            Not After : Nov  9 18:34:35 2023 GMT
        Subject: CN=E3044682E71DF3F1CB7604978B5173C09067AFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:af:36:5a:73:56:f8:f2:97:3a:f1:e0:32:
                    3f:39:d8:4e:28:c4:7d:bc:a6:8d:71:51:24:13:99:
                    e2:4c:13:7e:0f:c3:3e:24:f9:ef:fe:6d:9e:bf:af:
                    be:9c:26:08:0d:b4:a5:58:f7:cd:08:58:35:a8:a3:
                    aa:40:2c:48:10:fa:40:5e:35:04:1f:cb:37:0f:8f:
                    b3:33:bd:d3:56:a9:93:fc:9a:80:c0:c0:c5:6e:96:
                    7b:3a:db:31:fa:be:34:15:9a:32:03:1c:37:91:70:
                    35:9f:0f:1e:a8:a5:37:10:c5:df:51:fc:cb:19:3c:
                    4f:48:25:a4:08:22:32:7d:7e:b8:b0:00:8c:06:cd:
                    08:47:79:8f:38:90:14:e6:d3:d7:94:60:41:0f:4d:
                    10:69:2b:bf:ad:58:47:57:a5:65:4a:78:64:b8:6b:
                    14:39:a7:a1:73:c9:70:98:93:08:fd:db:0e:74:30:
                    27:95:b7:dc:e0:79:46:4e:df:6c:07:d7:17:ab:8a:
                    14:66:c2:80:bd:26:1f:d5:f5:26:6a:60:46:c9:cd:
                    9f:b4:9f:43:fe:e8:90:29:9d:8a:c6:85:6a:58:b7:
                    09:03:c4:81:2c:f0:77:7c:80:98:b2:8d:8c:e6:36:
                    09:0e:80:f1:53:d9:19:43:ee:cd:da:1d:d8:2d:ec:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:46:82:E7:1D:F3:F1:CB:76:04:97:8B:51:73:C0:90:67:AF:CB
            X509v3 Authority Key Identifier:
                keyid:E3:5D:BE:20:41:EB:F3:4A:AB:0D:87:56:1D:88:72:6C:B1:51:42:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/3136382e3132312e37362e302f32332d3233203d3e20323635333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:ba:19:41:6a:45:4b:a4:80:9f:8b:5f:14:d6:da:2d:83:
         9f:39:5c:64:e2:d3:94:b5:b3:e1:cc:04:b6:b7:b2:bc:db:2b:
         3d:f2:5a:8e:3b:30:61:35:09:4f:6e:99:00:ba:93:03:9e:9b:
         56:52:8a:4a:21:6a:4f:66:97:b4:f4:ef:3a:d2:48:ff:c3:c5:
         b5:0e:88:69:b5:3e:c8:dc:31:62:1f:59:c2:47:ea:66:fb:27:
         9b:54:f8:a9:8f:1a:2d:01:01:3c:6f:a9:25:98:29:1a:83:f3:
         29:d2:8b:f7:1b:61:02:29:88:13:0c:77:8d:bd:9d:21:66:1e:
         37:ff:42:6f:a3:4d:40:4f:eb:d0:a1:f7:12:cc:2a:40:37:d9:
         e1:fd:75:d9:f2:4a:6d:cb:be:64:d7:c3:d4:32:1c:78:c2:3a:
         a3:87:0c:22:46:0d:a3:01:1d:40:c9:b1:43:b6:dd:37:da:bc:
         f8:c9:cc:59:cc:88:5e:be:90:ba:ef:6a:4b:94:89:e1:ba:50:
         7d:99:05:49:99:c7:de:cd:0e:da:04:c9:41:ba:5e:55:9a:a3:
         bf:25:88:e0:1c:40:2a:fb:ee:03:57:11:26:3a:73:37:b9:16:
         d9:c1:15:91:00:78:5f:52:02:72:9c:22:cf:91:a0:5e:53:e8:
         7d:78:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:02 2025 by rpki-client