Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa
File:                     3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa (raw, json)
Hash identifier:          WcKC1sN5ziX22RXbUzReSfmeECyh9hVWahDEtFhDIzk=
Subject key identifier:   14:A5:5A:B4:9C:CD:18:25:2A:33:B4:4C:B2:F2:BB:9E:5D:51:D9:F8
Certificate issuer:       /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
Certificate serial:       0F5A1B0A3B2870F02FD4384F7EA897216D3F8BF1
Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa
Signing time:             Wed 18 Dec 2024 12:40:29 +0000
ROA not before:           Wed 18 Dec 2024 12:35:29 +0000
ROA not after:            Wed 17 Dec 2025 12:40:29 +0000
asID:                     61750
IP address blocks:        143.208.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:1b:0a:3b:28:70:f0:2f:d4:38:4f:7e:a8:97:21:6d:3f:8b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
        Validity
            Not Before: Dec 18 12:35:29 2024 GMT
            Not After : Dec 17 12:40:29 2025 GMT
        Subject: CN=14A55AB49CCD18252A33B44CB2F2BB9E5D51D9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:cb:f8:26:3f:84:3d:e0:da:bb:48:fc:be:
                    0d:22:55:e5:4f:1c:d8:f2:b7:c0:9c:fe:c7:27:b2:
                    4c:d2:48:9f:0f:e6:33:29:f0:8d:05:e9:4c:1f:90:
                    13:5b:6b:95:2b:33:a9:55:03:3f:a2:a1:ce:2d:1a:
                    e1:39:a9:a9:89:22:6c:6d:69:40:77:09:8b:a5:a5:
                    d7:8a:21:17:5c:f9:b1:10:f1:6b:35:2c:95:7a:7c:
                    b8:21:cf:dc:93:02:e1:50:ca:30:74:4c:55:1c:c2:
                    9a:16:9a:66:3e:46:fc:82:7d:30:62:e8:fb:0c:71:
                    ba:f4:c4:bf:e6:71:43:44:2c:a6:07:27:55:d5:23:
                    f2:29:3c:1a:d9:ef:5f:f7:f7:fa:db:69:cc:de:0f:
                    f1:ab:aa:eb:99:19:b6:70:80:27:3f:89:44:ab:e5:
                    b8:c2:a3:a5:ce:ee:3a:2c:85:a6:44:7a:ef:aa:a7:
                    79:09:27:48:b5:13:52:52:c4:62:ac:f1:c9:ef:ae:
                    2e:d8:3a:95:b4:e2:57:23:63:f5:e8:66:5a:c6:a8:
                    51:dd:00:2f:9e:2b:20:db:3f:36:5e:c1:eb:7c:1f:
                    38:6a:0b:ee:9d:65:b9:3a:57:6a:2f:b5:bf:ce:49:
                    e2:8f:e5:3f:c8:22:11:8c:00:05:c4:26:3f:23:e4:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A5:5A:B4:9C:CD:18:25:2A:33:B4:4C:B2:F2:BB:9E:5D:51:D9:F8
            X509v3 Authority Key Identifier:
                keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:dd:f4:f7:27:ad:a2:bb:0a:33:75:54:26:0c:7c:1f:58:
         49:96:4a:32:26:18:94:cf:1b:7f:ce:e2:2f:bd:a0:76:b4:d5:
         25:13:a2:e0:84:dc:9a:44:17:26:c6:6d:d3:85:b7:dc:94:a2:
         b9:f8:18:17:94:c5:b3:91:6b:b3:5a:15:11:88:66:d5:7e:c6:
         5f:16:c2:bb:95:7c:04:f3:b4:2a:a8:5c:e5:35:e9:d5:3e:88:
         39:50:f1:aa:65:fc:8e:23:61:96:f5:1b:aa:91:b1:86:b2:d2:
         82:39:8d:cf:7c:8a:8c:ba:23:76:cb:ce:ee:69:58:b6:f4:e5:
         1c:7e:64:d2:5d:74:c6:57:b4:48:ce:71:e0:9e:b6:5b:67:cb:
         de:49:d5:27:f6:28:90:7e:6f:4f:2b:34:c5:0f:91:30:5c:7e:
         91:1f:8b:43:c5:7d:1f:37:4b:cc:92:cc:f0:a2:25:72:2d:5b:
         fc:53:f2:1e:d3:97:b2:db:3a:31:8e:72:55:b5:3c:75:b5:b3:
         81:64:8f:c4:d2:06:11:ba:8d:f6:d6:a8:4e:5e:c8:ca:ee:73:
         64:3e:9c:2c:a5:9b:d7:b9:86:60:a7:7b:3f:5c:49:d4:e5:7c:
         dd:b8:bd:76:6e:b1:29:93:32:67:a7:e2:f4:d3:5f:c2:12:0d:
         d4:c6:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:30:02 2025 by rpki-client