Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
File:                     3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          +CsP/qCuyZDWwmHmsgZ9ieb9JAhcLIXUV3glHnDvdyg=
Subject key identifier:   30:7F:6C:E0:39:C6:56:F1:63:03:F4:9F:6A:FF:99:B2:D2:15:E8:C1
Certificate issuer:       /CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
Certificate serial:       62BF524C3C763C562009CB355C175941814AAC9F
Authority key identifier: FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
Signing time:             Mon 10 Feb 2025 19:17:45 +0000
ROA not before:           Mon 10 Feb 2025 19:12:45 +0000
ROA not after:            Mon 09 Feb 2026 19:17:45 +0000
asID:                     262391
IP address blocks:        168.181.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:52:4c:3c:76:3c:56:20:09:cb:35:5c:17:59:41:81:4a:ac:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
        Validity
            Not Before: Feb 10 19:12:45 2025 GMT
            Not After : Feb  9 19:17:45 2026 GMT
        Subject: CN=307F6CE039C656F16303F49F6AFF99B2D215E8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:43:f3:0d:a7:f4:35:26:56:f5:c2:95:fc:
                    d7:1f:7f:cc:e9:c9:97:45:b4:e5:70:6a:7c:2e:ba:
                    26:60:3c:67:3b:b9:b7:04:f9:57:c2:3f:9f:00:a6:
                    a5:98:95:0f:a5:81:48:59:21:41:a0:c2:f0:dd:55:
                    1a:44:0a:63:1e:c5:97:69:0d:f2:6b:32:26:65:0d:
                    65:e7:ba:62:a7:3b:e8:56:9e:64:20:e6:0d:23:84:
                    2a:14:a6:9c:f0:d9:69:99:80:3e:01:a0:d1:1f:ec:
                    85:39:bc:69:6b:3e:b2:0b:6a:30:34:69:6d:33:21:
                    ff:cc:62:ca:cc:0d:8e:22:97:6f:2f:90:b9:50:4e:
                    45:1b:54:7f:9d:66:19:89:0c:9c:f8:b5:21:70:4f:
                    4a:a3:00:16:d1:f9:0a:d2:9c:85:d6:f5:66:c3:db:
                    b5:d4:e2:28:ea:18:30:3c:b5:5b:d0:b4:63:76:a0:
                    b7:b1:88:3a:ef:93:bb:88:4a:cd:b8:2e:34:98:9f:
                    2d:84:1c:33:45:1f:ee:50:a4:68:8b:1b:80:85:0e:
                    9f:03:28:5d:e3:ed:af:3f:81:a9:dd:cd:41:fe:08:
                    b2:68:7c:11:fe:d4:77:a5:51:c3:5a:46:13:58:df:
                    d0:0c:d2:5e:d0:cb:a9:62:45:d8:7b:5d:cf:b5:d9:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:6C:E0:39:C6:56:F1:63:03:F4:9F:6A:FF:99:B2:D2:15:E8:C1
            X509v3 Authority Key Identifier:
                keyid:FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:8c:10:12:ad:ec:e5:e6:dd:8c:a8:df:08:fd:9c:af:96:e7:
         c6:24:1e:18:f9:dd:39:94:5a:d1:52:d1:55:f7:4e:2c:e7:aa:
         cc:3a:f8:ab:99:18:45:4b:5b:20:c3:fb:65:13:ba:08:d7:a4:
         df:0e:87:86:6b:aa:64:bb:90:b2:64:09:79:e7:f5:83:e4:1d:
         50:05:83:ed:40:1f:33:30:e6:c8:5f:dc:ef:40:06:24:b8:50:
         be:b3:a7:66:8a:af:64:4a:22:6d:ac:e7:fe:0e:38:e1:d5:13:
         de:9a:fa:ba:9f:61:ee:b3:78:1e:49:cc:be:cf:d9:3a:29:d7:
         81:fc:b2:5f:c4:72:08:78:3e:02:26:dd:d4:c8:37:71:20:26:
         f4:fc:66:21:61:06:28:26:69:8e:e2:9e:60:f6:b2:f6:e0:66:
         b5:b5:f1:0b:e1:e2:58:81:6e:95:0c:df:69:b1:c3:9d:3c:2a:
         97:af:7f:66:a8:e9:01:a7:a0:d9:de:9b:2e:73:22:44:4a:ee:
         af:62:cf:8d:0a:5a:cf:9c:19:2d:0c:f3:71:b2:f2:8e:ed:6b:
         e5:9e:ce:c9:29:60:67:f8:a6:0c:d8:de:bc:3a:35:39:6c:d0:
         86:36:4f:b2:4e:48:6e:ee:2e:4d:df:62:bf:4a:f0:14:fc:f0:
         5c:6e:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:42 2025 by rpki-client