Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa
File:                     3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          L4CbNotfKzMEm4VlU7+9G9/LKsAD9fyTBvSnS0tsbpQ=
Subject key identifier:   D4:70:E1:ED:58:EC:CC:AA:61:CA:96:27:C5:0C:D4:87:12:B2:FD:0E
Certificate issuer:       /CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Certificate serial:       793E63EC005236FB86EE0F86994C6F8FFF5F84C0
Authority key identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa
Signing time:             Sat 14 Dec 2024 12:12:50 +0000
ROA not before:           Sat 14 Dec 2024 12:07:50 +0000
ROA not after:            Sat 13 Dec 2025 12:12:50 +0000
asID:                     263544
IP address blocks:        168.227.84.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3e:63:ec:00:52:36:fb:86:ee:0f:86:99:4c:6f:8f:ff:5f:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
        Validity
            Not Before: Dec 14 12:07:50 2024 GMT
            Not After : Dec 13 12:12:50 2025 GMT
        Subject: CN=D470E1ED58ECCCAA61CA9627C50CD48712B2FD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:ff:34:67:82:0b:10:20:c3:ba:96:4b:98:
                    3a:b4:7c:61:e3:42:85:ea:ec:6e:42:fd:4d:5c:0d:
                    4f:e8:77:a3:2d:3b:4f:79:48:b0:e9:c1:a4:b9:ab:
                    9c:66:11:55:4e:39:b4:95:93:96:d7:6b:e7:67:91:
                    5d:09:e1:94:81:49:b6:23:b9:4b:39:11:a9:20:51:
                    a7:58:60:55:c0:d0:8a:bf:fd:19:60:c8:78:4b:d8:
                    d0:77:31:58:a0:6d:53:07:db:14:9a:76:e3:81:3d:
                    00:5e:bf:b4:29:5f:03:2e:42:ca:39:9e:31:09:5c:
                    7f:01:57:0c:4e:91:9f:4b:a5:a0:1d:e6:8f:fe:3b:
                    87:ca:9e:d0:fe:1a:d8:a7:8b:f7:20:2e:f7:fd:b9:
                    d0:61:7f:86:17:5c:5a:b6:49:50:b0:4b:be:e1:0d:
                    8e:0e:7f:b7:a6:b4:dd:40:fe:13:f9:98:9a:79:73:
                    c1:b3:61:3f:45:34:2e:02:e4:dc:fd:42:46:9c:9b:
                    91:9f:cf:1b:a1:30:84:1c:ca:50:d1:d7:b0:59:13:
                    72:99:67:6d:9d:d7:6a:55:71:ab:19:62:71:80:4c:
                    66:3f:cb:f3:4b:8b:9c:9f:04:18:9a:2f:04:68:69:
                    a1:9d:07:20:5c:3d:7a:44:cd:77:18:62:df:e5:0e:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:E1:ED:58:EC:CC:AA:61:CA:96:27:C5:0C:D4:87:12:B2:FD:0E
            X509v3 Authority Key Identifier:
                keyid:8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a8:21:3e:6b:b3:ec:ee:af:0a:94:ec:76:91:b1:cf:38:0a:
         9d:b0:a8:66:f8:73:7b:e9:ea:6e:37:0e:c1:29:5d:86:15:6c:
         90:35:8d:1d:80:56:67:35:a4:be:3d:49:70:1a:b2:9f:3c:e8:
         58:b4:a4:e1:c5:5b:71:50:7b:73:1d:4c:f5:32:2b:49:dd:84:
         b7:c3:48:7f:9f:c6:d7:4f:78:68:9a:0b:b9:ba:c9:78:f2:30:
         b1:87:05:5a:9c:ca:ec:3b:f4:f8:3f:dd:6b:3b:60:97:3b:f3:
         89:d9:11:6f:a1:76:4b:76:ef:88:96:3a:47:b3:c7:66:ec:ad:
         6c:a3:79:c7:00:1e:a4:30:c4:57:8f:64:3b:8c:59:47:ae:c8:
         a3:98:b4:53:27:10:15:c8:a4:16:53:0a:34:fb:58:51:18:ec:
         b1:b4:f9:22:01:50:23:fd:38:d8:19:81:fd:d7:0d:8e:73:d9:
         63:32:44:66:47:9b:86:0c:6a:6f:fc:59:68:5c:19:5f:3e:e7:
         54:d6:c2:67:6e:26:fd:ed:a6:c4:9d:1b:9a:a7:4a:4c:d7:a6:
         39:db:8b:7b:9e:48:e3:14:96:39:45:40:40:52:f5:93:1c:96:
         cc:b3:b3:c4:26:7c:55:3b:88:04:32:44:d5:3f:6f:d5:0d:c8:
         2b:af:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:08:54 2025 by rpki-client