Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/3136372e3234392e32352e302f32342d3234203d3e20323635313636.roa
File:                     3136372e3234392e32352e302f32342d3234203d3e20323635313636.roa (raw, json)
Hash identifier:          FBRY/zA0UG1dHGh736gayMbCsrQ8YyWGLiArA2XIa0c=
Subject key identifier:   9A:8C:36:5D:FD:AA:86:88:0F:E2:5C:7A:DC:16:0F:A3:93:2C:72:49
Certificate issuer:       /CN=921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979
Certificate serial:       6DF850E555D050D1C2C7130F936D46D4AE835FA6
Authority key identifier: 92:1B:04:DA:6E:7A:E8:B4:90:8B:2A:8A:2C:F8:DE:FD:63:BF:79:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/3136372e3234392e32352e302f32342d3234203d3e20323635313636.roa
Signing time:             Mon 24 Oct 2022 13:58:50 +0000
ROA not before:           Mon 24 Oct 2022 13:53:50 +0000
ROA not after:            Mon 23 Oct 2023 13:58:50 +0000
asID:                     265166
IP address blocks:        167.249.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f8:50:e5:55:d0:50:d1:c2:c7:13:0f:93:6d:46:d4:ae:83:5f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979
        Validity
            Not Before: Oct 24 13:53:50 2022 GMT
            Not After : Oct 23 13:58:50 2023 GMT
        Subject: CN=9A8C365DFDAA86880FE25C7ADC160FA3932C7249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:c7:0b:dd:94:79:05:cf:04:85:c4:8a:2b:
                    25:34:b8:c3:0b:39:e0:59:44:2f:57:8e:4d:65:9f:
                    c6:f1:b8:db:37:a4:e7:c5:ae:e6:0d:c7:6c:07:13:
                    bc:df:1d:47:f2:8d:0c:14:95:c9:f8:8b:0a:89:78:
                    0b:a1:03:9d:af:a3:ee:11:1c:50:cb:1c:ec:2f:e9:
                    76:dd:ab:74:89:0a:fa:4e:46:0b:fd:1a:fc:a2:a2:
                    bc:4c:3f:a3:ad:96:05:eb:e9:eb:fd:87:f1:fa:9b:
                    27:01:f0:2e:e3:cc:63:0a:b2:51:3b:7f:d2:66:48:
                    29:64:ca:8a:bc:24:5c:5e:52:57:a2:16:5e:67:d8:
                    02:64:50:c6:02:c7:28:aa:cf:31:2b:86:ae:6d:98:
                    1e:42:12:c8:ff:75:06:46:9a:16:ba:34:e0:31:50:
                    26:be:1a:2b:15:1d:52:c7:e5:80:d1:44:18:51:f9:
                    23:b2:8b:a5:90:5a:dd:7c:ef:d9:2e:b2:7a:cf:c3:
                    95:19:b5:6a:98:88:cb:bb:32:35:d0:18:d9:02:06:
                    a5:d7:50:10:a7:ee:25:ed:fd:fa:1a:fa:5e:97:88:
                    fe:22:68:f1:51:5f:e9:04:ae:d6:92:96:cd:7c:92:
                    25:9a:1e:03:c7:56:4a:9a:2a:21:24:ee:ae:2c:2e:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:36:5D:FD:AA:86:88:0F:E2:5C:7A:DC:16:0F:A3:93:2C:72:49
            X509v3 Authority Key Identifier:
                keyid:92:1B:04:DA:6E:7A:E8:B4:90:8B:2A:8A:2C:F8:DE:FD:63:BF:79:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/921B04DA6E7AE8B4908B2A8A2CF8DEFD63BF7979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/3136372e3234392e32352e302f32342d3234203d3e20323635313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:77:a3:92:3f:93:40:b5:dd:b9:e0:10:5b:b4:ed:5f:e7:f2:
         e5:7c:13:10:05:aa:a8:85:5e:c6:f6:f4:20:00:fb:dc:64:4c:
         4a:c8:18:e4:78:89:fd:3b:95:48:40:6f:a3:b0:3d:86:8d:13:
         0b:3c:af:bf:a0:20:e8:f4:ee:f2:75:e0:68:23:d5:1b:c0:11:
         16:c3:ac:e1:29:1a:05:a1:29:0f:38:5c:97:8b:19:a0:90:da:
         a1:3e:9a:78:12:19:47:f7:b4:f5:aa:2f:69:0f:2f:3a:94:5e:
         8a:85:fd:e5:69:61:d5:20:de:48:d5:13:a0:d9:39:41:5d:8a:
         46:13:e1:c5:99:8b:83:ca:d5:a0:b9:19:6c:3c:2b:70:d4:f7:
         6b:a0:bb:10:a2:cb:ab:f0:7b:e4:25:2e:61:34:fe:7d:55:9f:
         86:3e:2b:9a:a7:93:4f:cf:f6:15:ac:9b:8f:0b:b0:07:95:9f:
         bb:c8:ec:41:b5:3b:cf:79:0f:3b:f1:ef:3b:59:60:ce:88:aa:
         b7:e0:57:9b:9f:89:d2:a2:24:47:78:a3:b0:b6:f3:88:e7:0e:
         03:fa:b4:cd:58:81:73:01:a0:d7:c2:c7:4b:b7:3a:ba:d9:b7:
         cb:40:0f:69:2b:72:da:df:44:25:dc:db:94:d2:47:81:7a:31:
         fb:1d:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:14 2025 by rpki-client