Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa
File:                     3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          hF4j/D2aAi0avieEGM7wOdTvWnXw4rlNIwHDmnmY9TA=
Subject key identifier:   26:E9:7F:7A:53:9C:60:15:48:6A:97:38:5C:6A:02:94:CC:AB:C4:3D
Certificate issuer:       /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial:       741D0E0D00A0F593F960D2BA032EAEE9C6E76222
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa
Signing time:             Fri 24 Jan 2025 18:46:37 +0000
ROA not before:           Fri 24 Jan 2025 18:41:37 +0000
ROA not after:            Fri 23 Jan 2026 18:46:37 +0000
asID:                     263569
IP address blocks:        168.232.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1d:0e:0d:00:a0:f5:93:f9:60:d2:ba:03:2e:ae:e9:c6:e7:62:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
        Validity
            Not Before: Jan 24 18:41:37 2025 GMT
            Not After : Jan 23 18:46:37 2026 GMT
        Subject: CN=26E97F7A539C6015486A97385C6A0294CCABC43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:81:49:45:97:67:d7:a5:75:f5:52:4e:51:
                    86:c7:d3:a0:e5:bd:5f:8b:c4:98:92:49:04:f9:95:
                    c9:b1:93:05:c7:d0:fa:64:25:15:a9:b9:35:23:f6:
                    44:be:29:24:74:41:74:c3:7d:23:aa:be:6d:99:72:
                    1f:5d:84:21:dd:59:19:f0:0e:8c:a8:e1:1f:d4:90:
                    74:36:f7:1a:22:f3:6e:c9:e1:57:c7:5d:26:bc:fe:
                    58:61:35:0e:26:17:e3:6b:39:ad:35:42:7a:9e:61:
                    1f:7c:e0:53:a6:51:23:6a:7b:a9:55:89:a2:7c:c4:
                    fc:fd:0d:5f:fa:cd:f8:9a:ad:2d:bd:f2:bf:e0:95:
                    7e:f7:42:8e:f6:8b:72:55:1a:3a:c8:ec:a0:0f:c8:
                    a1:3f:73:aa:c0:63:2b:77:7c:cc:8e:07:b4:84:c0:
                    6e:78:78:36:de:c2:11:67:b7:d5:4b:09:a5:ed:11:
                    8e:17:c7:ed:f0:85:35:2f:99:2a:04:a1:6e:d9:7b:
                    9d:a2:be:90:40:4d:ac:40:23:7c:f4:d5:d4:8a:cd:
                    62:fb:89:4d:b0:eb:a4:b2:9e:b3:9d:2b:f7:99:af:
                    56:cd:e1:8c:90:4f:15:01:41:07:86:ac:81:14:20:
                    e1:30:ad:54:8a:84:42:3b:94:04:4c:45:d1:3a:99:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:7F:7A:53:9C:60:15:48:6A:97:38:5C:6A:02:94:CC:AB:C4:3D
            X509v3 Authority Key Identifier:
                keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3136382e3233322e3231362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:33:c6:ce:99:3e:d7:1f:44:38:e9:cc:b7:eb:11:ef:2b:58:
         2d:ef:2d:a4:d4:b2:60:07:69:2f:48:f5:44:8f:9a:45:b8:29:
         40:3e:89:15:ca:28:6f:ee:d5:02:17:c0:08:c6:b9:db:3a:9f:
         cf:21:ca:6f:a1:05:47:ba:47:25:d5:11:f5:f1:57:5d:f4:c9:
         c3:2c:69:eb:e4:6b:8b:e0:77:25:09:08:9c:28:82:6f:41:9a:
         cc:db:78:a0:b8:46:db:1c:c1:3a:f1:65:b4:67:f9:ef:c9:db:
         41:97:a8:8a:ae:73:be:fd:94:5f:aa:ed:f6:e6:b0:4e:d4:8e:
         fd:aa:cd:bd:29:1e:52:4d:d0:9d:cf:6d:d6:20:89:81:a2:6c:
         09:ae:d8:35:6a:f7:63:01:a8:b4:c0:15:f4:fc:de:ff:ee:02:
         5d:d4:cf:7b:21:a1:bc:cd:d6:16:34:fa:85:b2:6f:09:ef:e4:
         9b:91:1d:78:37:14:b7:d3:53:c3:78:c7:98:92:07:6a:41:80:
         6e:59:c0:60:05:72:be:08:80:4e:0d:9f:3d:48:32:6b:68:d5:
         66:06:be:07:30:92:93:7c:0a:f9:d3:29:5f:b3:db:01:0e:70:
         63:bd:68:0e:02:c5:da:cb:25:c1:98:20:c4:53:e6:c4:3c:77:
         40:df:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:06 2025 by rpki-client