Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32322d3234203d3e203532383338.roa
File:                     3134332e3230322e39322e302f32322d3234203d3e203532383338.roa (raw, json)
Hash identifier:          8gFHbtVmaPmxkUdYCc0FGPpmMiUS+Thfp8D97R/osug=
Subject key identifier:   90:3C:F4:C4:0F:C7:B3:FB:BB:E2:24:6D:ED:48:BE:B0:62:23:EB:C5
Certificate issuer:       /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial:       6E9461A461865A5472ACCDDFB17B4AD0C8BBA16D
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32322d3234203d3e203532383338.roa
Signing time:             Tue 14 Jun 2022 20:06:52 +0000
ROA not before:           Tue 14 Jun 2022 20:01:52 +0000
ROA not after:            Tue 13 Jun 2023 20:06:52 +0000
asID:                     52838
IP address blocks:        143.202.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:94:61:a4:61:86:5a:54:72:ac:cd:df:b1:7b:4a:d0:c8:bb:a1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Validity
            Not Before: Jun 14 20:01:52 2022 GMT
            Not After : Jun 13 20:06:52 2023 GMT
        Subject: CN=903CF4C40FC7B3FBBBE2246DED48BEB06223EBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:6a:72:58:4a:ae:2a:c7:59:6e:8b:b0:ef:
                    7f:57:e5:66:4b:16:ed:fe:31:2d:80:7b:18:7a:d0:
                    2e:f8:2d:55:98:9b:3a:82:25:e3:98:31:ed:b1:f2:
                    d1:36:6e:47:34:98:25:28:8b:52:97:5a:ac:43:df:
                    b8:e2:05:8a:c9:9a:d2:fe:80:69:51:7f:ba:48:80:
                    6c:e5:62:fd:bc:d2:ce:1c:21:bc:e2:44:a0:74:76:
                    46:6e:82:6b:54:f3:22:f4:af:e0:c0:e6:08:de:ef:
                    11:5b:52:e7:d9:7c:b5:73:81:5e:66:fd:2c:5f:b5:
                    5b:72:03:d3:6f:6b:04:b2:f2:b7:cd:3f:40:5b:26:
                    84:5f:66:0d:f7:0e:3b:54:d7:8e:d2:fd:2d:b5:f9:
                    15:b5:c0:85:ac:d8:fa:11:81:60:fd:de:91:26:f7:
                    75:c5:e1:f7:2c:20:97:1b:5a:bb:2d:bc:ff:c0:6b:
                    b3:17:b2:60:5f:f8:43:44:0b:94:78:72:8f:5d:5b:
                    08:62:e6:22:b0:d6:82:e0:97:92:16:4d:e5:5f:8b:
                    ac:d0:a8:b2:2e:84:fa:c2:07:ed:e4:11:b9:ab:c8:
                    ae:5c:eb:2c:6f:3f:47:6f:f1:40:01:13:88:95:60:
                    e6:2d:6a:96:90:94:b0:ce:97:64:be:4c:4e:6d:1f:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3C:F4:C4:0F:C7:B3:FB:BB:E2:24:6D:ED:48:BE:B0:62:23:EB:C5
            X509v3 Authority Key Identifier:
                keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3134332e3230322e39322e302f32322d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:49:5f:e3:c3:a8:e8:f8:a4:f4:12:cc:49:a4:b3:98:6e:49:
         84:4e:07:ca:17:1f:5c:f0:d3:b2:4f:b1:28:dd:f8:c9:c5:ea:
         87:ad:7b:7e:e5:01:b2:0c:0a:e4:99:e7:e0:54:24:0c:d5:10:
         76:25:31:b7:80:af:66:ca:85:d1:66:a2:2d:01:1f:f1:21:3e:
         1e:cc:38:48:82:02:97:05:93:d7:2f:60:42:01:ad:26:81:13:
         84:0c:bd:74:5b:38:37:dd:c2:6b:7f:1d:36:29:40:c5:b5:98:
         fc:a6:b8:88:f6:44:c7:12:c2:db:a9:c3:59:dd:29:09:b3:cf:
         fc:ad:d2:d0:7e:17:2b:48:be:ae:9a:06:7b:96:37:03:61:74:
         1f:0f:45:a4:74:22:cc:3c:7d:9d:f5:76:bb:b6:48:b3:db:51:
         f3:ca:e3:f3:7d:61:51:c1:58:ed:a4:d6:fd:a8:4f:11:a1:e2:
         00:22:94:02:e6:c7:0d:f2:14:97:11:ac:53:8c:87:c3:f2:6b:
         ae:30:9b:78:16:15:dc:97:e4:79:cf:53:43:62:62:f5:2c:0a:
         cf:c7:cb:ce:50:8d:47:e8:69:bc:0a:99:00:9b:e0:5d:b7:44:
         9a:fc:f0:94:05:0e:f8:d1:41:56:3b:f2:f5:2c:9e:a6:00:38:
         cc:6c:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:01:42 2025 by rpki-client