Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          THzsd+6sUt20AUSH4DmMLsGOcu6kYfFMmO1mWjj0S0M=
Subject key identifier:   19:D7:1F:22:91:1D:A9:A2:59:C2:C1:E5:AB:AA:1A:AB:39:1A:50:1B
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       5CA7958FE68C65C585D1D97551DB785A59EABD58
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa
Signing time:             Sat 18 May 2024 20:11:56 +0000
ROA not before:           Sat 18 May 2024 20:06:56 +0000
ROA not after:            Sat 17 May 2025 20:11:56 +0000
asID:                     266178
IP address blocks:        192.144.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:95:8f:e6:8c:65:c5:85:d1:d9:75:51:db:78:5a:59:ea:bd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: May 18 20:06:56 2024 GMT
            Not After : May 17 20:11:56 2025 GMT
        Subject: CN=19D71F22911DA9A259C2C1E5ABAA1AAB391A501B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:56:ee:71:c5:88:a7:f6:5f:83:25:cd:49:
                    03:78:7c:a7:04:7a:d3:5a:a1:6a:03:50:f5:b6:66:
                    1b:9e:39:a9:2e:2d:83:90:e0:55:64:af:2d:e5:ed:
                    57:f6:b8:bb:19:b0:53:af:bb:d5:76:00:1f:40:fd:
                    70:67:d4:db:bf:9b:7a:b4:9d:7e:a0:cf:72:2d:02:
                    f7:a6:ce:67:0c:66:de:d7:6d:7e:1e:5b:a4:8a:63:
                    eb:25:16:f1:33:03:16:d5:89:9c:e8:6f:4c:55:66:
                    93:b6:26:07:ee:1a:40:a3:48:a4:f0:8f:95:1a:67:
                    5c:06:4e:ff:b6:67:42:c2:ed:53:ac:5e:e3:de:d8:
                    93:a7:7e:f2:04:af:19:c5:18:1e:a3:9f:6a:fb:90:
                    df:3e:51:70:c6:6b:04:a0:fb:dc:75:80:4c:34:a1:
                    68:ec:d6:19:b3:25:04:53:3c:56:ce:fd:d1:65:ca:
                    ec:a3:03:45:d4:fe:74:8d:3f:24:1c:c4:c6:1a:5d:
                    cb:da:03:78:8f:5b:53:70:fa:da:a9:4e:73:ce:8f:
                    89:d3:6e:99:b6:40:97:85:16:c7:25:5e:31:5d:bf:
                    f0:b3:19:19:c0:0f:2a:72:f3:59:b0:eb:31:40:8f:
                    d8:06:71:be:5b:17:37:99:04:10:9b:18:6c:95:91:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D7:1F:22:91:1D:A9:A2:59:C2:C1:E5:AB:AA:1A:AB:39:1A:50:1B
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:53:3d:26:8b:61:5f:e0:b7:85:16:2e:d6:67:db:7b:a3:
         e9:20:93:c2:51:9f:9f:8f:fb:d6:79:03:77:a3:85:fc:79:77:
         c2:2d:f1:43:03:69:dc:35:4e:b1:0f:8f:7c:9c:76:ed:46:7e:
         c8:54:5f:2a:ce:7c:71:40:4c:67:6a:c6:82:49:1a:26:8e:56:
         60:86:f5:ef:5b:47:93:22:76:c9:75:85:47:63:a5:6d:12:d9:
         c5:54:d1:05:f8:e4:7e:24:ba:c2:d5:16:c4:52:c5:d3:09:48:
         c3:d4:a9:62:11:e3:8b:fa:51:75:87:69:b2:10:b1:47:38:c1:
         3c:b4:09:24:e3:57:df:76:bd:d0:58:ac:b2:67:92:b4:6f:f8:
         2c:4c:42:5e:e8:0e:68:ed:10:07:1f:aa:ee:9c:26:91:30:9a:
         82:dd:9f:45:cd:98:9e:e2:69:54:f2:fe:6b:e4:3f:a4:8a:d8:
         5d:e3:62:67:08:97:aa:70:6b:ee:e1:b5:b2:fc:38:cd:cb:fa:
         5c:06:86:1b:61:12:e0:26:3d:23:84:ab:94:92:b4:99:85:d2:
         3d:d1:a9:73:42:97:2a:95:e6:37:eb:0c:e7:b8:72:42:e1:cf:
         39:84:8d:97:f8:21:e8:1b:34:75:2a:3b:83:d2:b8:1b:88:7c:
         81:cf:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:58 2025 by rpki-client