Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa
File:                     3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (raw, json)
Hash identifier:          LrwNNV0+p6YAn+mna1FsJg7fhl6nJyfaL9jlNnqN2eY=
Subject key identifier:   47:D7:79:FC:D1:EA:1A:EF:BB:C4:5A:E4:D4:EA:5B:26:8A:F6:76:FB
Certificate issuer:       /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial:       1963EBF2BC84405B231B6FD79C5403CAE272E4ED
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa
Signing time:             Wed 18 Dec 2024 17:31:57 +0000
ROA not before:           Wed 18 Dec 2024 17:26:57 +0000
ROA not after:            Wed 17 Dec 2025 17:31:57 +0000
asID:                     52848
IP address blocks:        168.196.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:eb:f2:bc:84:40:5b:23:1b:6f:d7:9c:54:03:ca:e2:72:e4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
        Validity
            Not Before: Dec 18 17:26:57 2024 GMT
            Not After : Dec 17 17:31:57 2025 GMT
        Subject: CN=47D779FCD1EA1AEFBBC45AE4D4EA5B268AF676FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:15:64:06:be:44:8a:f9:1c:28:ea:c8:de:
                    54:77:fc:4f:8c:7c:51:d8:80:44:0c:44:53:8b:02:
                    c3:87:74:7e:66:1e:3b:52:64:f2:57:57:43:24:d3:
                    ad:06:45:ca:0c:97:e2:e8:17:53:e8:71:a1:8a:62:
                    cc:74:4c:56:c5:c9:71:32:ef:0b:2e:e9:19:b5:dc:
                    85:68:7f:d6:91:0b:8e:bc:7a:6d:30:3a:d8:00:fb:
                    a3:3f:ee:18:e0:c8:fb:52:15:63:36:ad:c8:a5:7a:
                    d0:27:8a:30:1c:9e:aa:07:0a:9f:bf:fd:1e:54:63:
                    4e:38:a9:bf:44:5f:24:ab:da:76:b9:95:9b:04:4d:
                    3f:ac:c3:2f:fb:8d:fa:75:30:cc:d2:28:31:b2:51:
                    31:a1:8f:51:b0:9e:55:cd:f8:07:12:70:0d:17:49:
                    0c:46:d8:70:c2:33:3d:47:70:45:42:7b:68:1f:7a:
                    14:38:70:2c:04:a1:5e:63:26:0f:e6:7d:8d:7e:fd:
                    05:94:ee:22:3f:34:d6:ea:38:30:15:dd:c7:0b:e0:
                    c8:dd:b1:68:ca:73:48:b8:64:54:5a:73:3b:b7:cc:
                    31:6a:43:4c:8b:9e:41:8a:f3:1a:76:2c:8a:93:fa:
                    fc:df:cf:bb:66:a8:48:e3:b5:96:5e:41:60:b2:4c:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D7:79:FC:D1:EA:1A:EF:BB:C4:5A:E4:D4:EA:5B:26:8A:F6:76:FB
            X509v3 Authority Key Identifier:
                keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:4c:d3:14:b2:cb:07:7e:db:a1:5e:b0:4e:7e:f7:13:f2:
         1a:ce:1c:6d:7b:0d:be:97:ba:c1:1b:f8:2e:f9:61:34:df:6e:
         f1:16:8d:92:a2:b2:2e:de:92:c6:4c:11:07:0e:a2:33:4f:6e:
         50:45:7b:f7:d4:27:78:39:69:60:59:e6:41:da:e9:c7:78:39:
         ac:e8:76:ab:6a:f5:ae:aa:62:f3:70:cc:2b:37:d5:34:0c:b0:
         ed:3f:57:d8:d7:13:af:f8:fb:40:08:fe:34:88:6e:ec:29:ee:
         ae:7a:7c:5e:be:3b:62:55:31:25:29:62:7c:43:6d:12:7c:da:
         41:c7:d7:2b:0b:3e:f6:d1:f6:18:0b:c1:61:56:c7:25:34:52:
         34:fd:ad:13:0b:de:d6:61:39:3f:f5:61:27:ff:47:99:bb:20:
         2b:b5:ef:ba:e6:de:87:3b:1b:ab:76:cc:54:ef:d3:35:03:01:
         24:b0:f0:5a:f9:22:e8:36:bd:9e:c1:28:51:27:b4:e0:f1:db:
         e7:64:06:7a:e5:ef:76:0a:b4:8d:6b:b8:d9:3f:ee:d8:ad:c8:
         24:a2:44:63:a5:8a:5c:6b:ad:d5:55:65:19:a9:8e:42:e4:96:
         ac:84:8d:ae:6a:e7:62:45:ec:4a:f6:7f:56:c2:39:90:de:bc:
         dc:e8:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:17 2025 by rpki-client