Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36342e302f32322d3233203d3e20323636353530.roa
File:                     3139322e3134302e36342e302f32322d3233203d3e20323636353530.roa (raw, json)
Hash identifier:          MiYzqOkA75337sDga4tVNG3AheQvlv4CsHW/Hpc38fA=
Subject key identifier:   B4:7C:8E:1A:9D:A0:50:00:F3:98:3B:32:5C:8B:B0:A6:D7:76:92:27
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       7DB561954382F00030E6F6819FEB0ECE5E8BDDC1
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36342e302f32322d3233203d3e20323636353530.roa
Signing time:             Thu 26 Oct 2023 19:55:01 +0000
ROA not before:           Thu 26 Oct 2023 19:50:01 +0000
ROA not after:            Thu 24 Oct 2024 19:55:01 +0000
asID:                     266550
IP address blocks:        192.140.64.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b5:61:95:43:82:f0:00:30:e6:f6:81:9f:eb:0e:ce:5e:8b:dd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Oct 26 19:50:01 2023 GMT
            Not After : Oct 24 19:55:01 2024 GMT
        Subject: CN=B47C8E1A9DA05000F3983B325C8BB0A6D7769227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:c7:1a:ed:03:75:75:dc:90:f5:2f:b2:28:
                    96:7c:71:6b:49:cc:f5:e9:b1:e3:45:39:51:94:7a:
                    71:9b:75:1a:33:2d:96:17:71:0f:db:c4:ee:91:28:
                    f9:3a:cc:ca:0b:6b:63:93:88:f9:63:03:fb:af:10:
                    c5:f2:74:b4:96:bf:3b:5f:95:ff:af:50:30:5b:39:
                    0b:a1:7a:6e:31:5f:43:aa:69:29:6c:8a:ed:09:59:
                    6b:18:85:05:b2:31:95:ff:3b:9f:fd:78:09:b5:cc:
                    4e:68:a1:ba:e6:3d:7d:01:e6:b2:a8:5f:e4:ef:4d:
                    9f:59:5c:e0:c9:ba:87:b9:48:de:c2:26:38:d9:c2:
                    82:64:49:68:f9:70:ee:40:3e:28:a9:e6:e8:d1:c2:
                    64:65:83:b0:71:c3:cf:73:c1:40:d0:ac:a7:f3:68:
                    4e:b2:c3:26:fc:14:84:5f:f8:f8:11:1c:51:8a:07:
                    e6:7d:36:f4:a8:00:87:59:05:9b:78:fe:2e:1b:46:
                    1e:f6:b1:6d:1c:a5:70:1d:9a:84:05:72:14:c1:ca:
                    a3:51:66:7e:15:3a:36:d1:8f:83:2f:23:f6:67:46:
                    02:1f:c0:b9:10:fd:59:43:1f:b8:e5:9f:ca:19:00:
                    9e:5f:23:f5:be:03:bc:b0:7f:45:b7:98:06:a4:89:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7C:8E:1A:9D:A0:50:00:F3:98:3B:32:5C:8B:B0:A6:D7:76:92:27
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36342e302f32322d3233203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:73:71:57:74:ab:2b:7f:b1:ba:b5:01:a2:28:55:d4:de:
         a0:12:07:43:5b:f9:4a:d7:dd:bf:b5:b8:1a:77:f7:6f:97:72:
         0b:8c:33:3b:fd:24:df:3d:31:a2:ba:74:ee:fa:bb:a5:88:b8:
         a0:5e:1f:8e:fc:75:7c:f8:19:3a:d0:76:ce:44:d9:77:36:45:
         16:69:50:8d:da:76:41:c7:56:b6:4d:59:2a:2f:5f:3a:1a:30:
         6c:5d:55:91:3b:06:d6:34:7b:5a:7e:df:50:98:03:25:d7:1c:
         c2:02:6c:78:de:0f:29:0c:0c:04:aa:05:e5:a6:85:7d:02:2c:
         57:a8:55:80:15:55:43:92:08:30:34:57:6d:ab:07:34:0d:5f:
         33:14:01:d0:1c:e2:b4:73:bf:30:46:42:1e:46:d1:81:47:5c:
         5f:c2:49:8a:ae:1e:ae:2a:17:0b:57:07:41:40:16:e3:c4:f4:
         49:44:c5:bb:24:80:e9:64:f7:88:29:c3:23:eb:cb:72:72:79:
         9f:6f:43:59:35:0b:d6:8b:db:ee:13:96:38:4b:a1:25:52:a6:
         0d:d0:e5:6a:ba:85:97:40:bc:4f:dd:33:d8:f5:c8:f6:e9:fe:
         a2:d0:d1:a1:ae:45:bd:a4:f0:96:81:0d:95:ca:90:9a:75:07:
         be:68:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:16 2025 by rpki-client