Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3232203d3e20323639313934.roa
File:                     3136382e3138312e3235322e302f32322d3232203d3e20323639313934.roa (raw, json)
Hash identifier:          CTuUfyoPUmwUxNuwPDjdGWgeyby40I2CKuFgJ2418Bw=
Subject key identifier:   E7:63:E2:FD:14:2D:D6:E4:24:38:9C:84:CD:AC:67:89:5D:22:94:FA
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       022D0ADC4A986A5F18E96DDCEE78E6401B2ADF54
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3232203d3e20323639313934.roa
Signing time:             Sat 19 Aug 2023 21:02:51 +0000
ROA not before:           Sat 19 Aug 2023 20:57:51 +0000
ROA not after:            Sat 17 Aug 2024 21:02:51 +0000
asID:                     269194
IP address blocks:        168.181.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2d:0a:dc:4a:98:6a:5f:18:e9:6d:dc:ee:78:e6:40:1b:2a:df:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Aug 19 20:57:51 2023 GMT
            Not After : Aug 17 21:02:51 2024 GMT
        Subject: CN=E763E2FD142DD6E424389C84CDAC67895D2294FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:cc:e8:ed:77:f7:ec:9b:10:15:d2:b6:e6:
                    55:20:b6:7f:89:de:f2:a1:39:23:0c:53:08:e6:c1:
                    56:d2:c6:3c:b5:30:a6:25:5d:2a:3a:33:da:9d:80:
                    18:a8:f0:3f:78:71:82:50:3a:f9:7c:c1:c5:64:c2:
                    6a:74:6b:07:2f:ab:0c:20:99:0d:a5:64:8d:aa:cc:
                    15:f1:ac:62:7e:a9:50:51:66:ad:c0:a3:66:bc:ad:
                    f6:3c:90:65:29:41:a6:04:dd:2a:44:fd:30:1a:ab:
                    b9:31:95:10:37:3c:69:f0:ac:0b:8c:2b:73:59:e4:
                    31:5c:34:d6:ee:d7:a0:a3:f9:57:cc:d4:d5:17:cf:
                    76:82:4a:69:fe:80:7b:a7:8a:6c:3c:7e:b9:ab:55:
                    b7:b1:2f:03:48:68:d8:01:42:68:f2:ed:70:00:b0:
                    b4:c7:53:75:50:6c:94:8f:70:00:98:30:ec:0e:55:
                    82:b8:51:17:97:8c:76:c1:a4:2c:17:d7:e6:33:01:
                    e9:36:bd:63:60:0b:f0:bd:bc:93:94:2a:de:7f:23:
                    29:e3:c3:4a:88:4c:9f:95:bf:21:bb:4c:38:e1:72:
                    bf:60:a3:29:ec:64:c8:09:8b:dd:6a:13:97:85:ba:
                    a3:90:8c:cf:f4:6b:a2:2b:32:10:21:b1:a7:7d:c4:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:E2:FD:14:2D:D6:E4:24:38:9C:84:CD:AC:67:89:5D:22:94:FA
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3136382e3138312e3235322e302f32322d3232203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:94:02:c8:59:30:00:86:a7:55:54:b7:c2:72:2e:1a:b5:
         cc:ed:d2:29:d1:3f:c5:90:0a:7f:9e:79:ef:e1:2b:cc:92:b0:
         8f:69:a3:2f:3a:6d:cb:3d:fc:2b:ae:7e:c8:63:69:e1:9f:6a:
         a2:5b:5c:c4:2d:e6:0e:e5:07:a3:38:2d:f0:b9:19:2e:7e:d9:
         69:f4:30:cc:0a:f0:23:e1:7b:c6:64:46:37:35:75:53:1d:43:
         35:e7:16:87:b3:22:e8:64:29:bd:c3:53:ee:58:a9:5a:12:d6:
         b9:3d:bd:5a:3b:47:da:a0:06:73:65:8c:3e:ab:8c:46:6a:0c:
         a9:c7:19:a0:51:23:58:78:e7:b0:a1:71:14:7a:25:b7:18:81:
         d3:3e:ca:d6:bd:90:55:00:20:b2:e2:9d:10:fc:c6:8a:85:b7:
         5b:69:1b:f3:08:ec:e6:1f:95:59:78:57:15:b1:ce:0a:04:91:
         5a:b3:cc:7b:33:04:ec:ea:d5:f7:5c:4e:5c:97:91:be:61:52:
         01:dc:e8:32:f9:30:06:be:7f:74:48:70:05:fd:76:13:f6:d9:
         76:5e:94:ee:84:25:d7:2d:35:24:92:ea:1c:66:9f:29:95:b5:
         b4:7d:e4:1d:a0:6a:10:c4:b7:42:18:5c:cc:0d:3d:78:f9:cb:
         41:1c:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:04:28 2025 by rpki-client