Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          blJVxSr7gZlfJ6pUDGWQn0XjYbG78PsvhwViScinUM8=
Subject key identifier:   E0:FC:0C:EB:3E:4F:69:DD:84:A4:12:1D:85:09:98:05:3F:8B:C0:C8
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       2A72A6A655D16BCC47213ED6E0F5A9B612BCB308
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:30 +0000
ROA not before:           Tue 20 Jun 2023 13:48:30 +0000
ROA not after:            Tue 18 Jun 2024 13:53:30 +0000
asID:                     262765
IP address blocks:        168.232.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:72:a6:a6:55:d1:6b:cc:47:21:3e:d6:e0:f5:a9:b6:12:bc:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:30 2023 GMT
            Not After : Jun 18 13:53:30 2024 GMT
        Subject: CN=E0FC0CEB3E4F69DD84A4121D850998053F8BC0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:7d:f9:1e:7c:6e:ef:73:24:34:4c:8d:fc:
                    7c:5c:39:50:83:72:62:82:a4:b0:8f:8c:43:1e:a2:
                    44:95:f1:cb:5b:c3:ea:a1:e3:57:c7:30:39:b8:e0:
                    0d:2c:8f:4c:1e:86:90:dc:ce:b7:04:c6:7b:39:e7:
                    24:b6:39:df:7d:cb:7e:f8:2d:f8:83:ef:04:28:49:
                    1e:ec:e0:bf:34:4f:5e:24:36:08:d7:f3:4c:16:03:
                    11:da:af:b2:1e:0b:ff:85:21:f3:49:43:ff:fd:a9:
                    63:ba:dd:cd:c4:ec:17:e3:6f:cc:39:03:1b:c0:ab:
                    68:19:11:af:b9:66:c1:a1:60:ff:b9:21:71:8b:b8:
                    6c:8f:d3:d5:aa:00:d2:b6:5d:70:0e:9c:fa:0a:94:
                    7b:a5:8e:b9:7b:07:6e:cb:81:89:b0:50:0d:61:93:
                    30:41:72:6f:1f:00:2d:37:a6:cb:75:14:34:28:f5:
                    b3:de:ba:82:5a:a8:e7:2d:ce:30:59:a3:1d:94:99:
                    29:0a:e6:c4:bc:50:cc:58:1f:e3:a6:c4:90:e6:26:
                    9a:ba:ea:c9:1f:c6:7e:63:13:1d:e5:a6:5b:26:85:
                    b8:91:c6:78:a6:e8:a4:dd:80:b8:31:44:99:d4:e2:
                    91:f8:26:3e:8b:fd:84:a4:8d:7a:93:2d:cf:93:88:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:0C:EB:3E:4F:69:DD:84:A4:12:1D:85:09:98:05:3F:8B:C0:C8
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:f0:a1:7c:0c:a3:00:38:ee:ab:49:c1:23:de:05:68:e2:
         12:09:d5:fe:a3:97:7c:1d:3f:87:42:20:b1:c7:1d:19:ab:44:
         39:8c:ea:19:82:4f:6b:51:18:25:e0:07:b0:c9:3d:ed:c8:0d:
         2e:58:32:6e:71:64:41:80:1c:b1:7b:3d:9d:50:e6:45:63:4d:
         2d:a7:d1:09:01:58:88:f5:90:19:7d:78:99:5e:9f:d4:78:e1:
         2a:6e:75:f7:2d:a6:31:c8:4b:49:d1:e1:79:aa:87:62:a6:1a:
         87:fa:0f:49:2b:7f:b7:0e:93:9f:5a:63:83:81:f2:a8:12:d7:
         81:9d:2a:ad:57:a8:15:c4:58:a4:3d:8a:16:81:43:63:e1:ea:
         80:6c:e6:67:4c:a8:df:f8:05:e1:7a:51:ff:c0:7e:a9:1d:f7:
         07:48:9d:4e:0a:79:00:49:73:30:6a:71:bd:f5:6c:d9:73:db:
         67:1f:5c:d3:3b:e2:34:4a:0a:72:7e:bb:79:7d:41:32:a4:1d:
         99:d9:82:de:8c:ce:b4:78:08:82:fd:fa:68:27:36:4e:db:6c:
         bf:cf:f1:ca:49:2b:8a:50:e5:09:45:ce:98:65:8b:62:06:1f:
         df:ea:a3:5e:4c:07:3d:ae:3b:21:35:31:2f:7a:1e:c0:ba:a1:
         e6:70:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:11 2025 by rpki-client