Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          riNASsPLu2OrKPH+9g4kDUAqZQtte++yC60qx3DAMCs=
Subject key identifier:   64:87:42:80:B5:CE:91:28:C5:0C:BB:04:8A:D7:7C:95:3A:39:0F:F0
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       39BC08B0DF730487A7C27E4AB56BDC3A707E2715
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 23 Jan 2025 20:46:18 +0000
ROA not before:           Thu 23 Jan 2025 20:41:18 +0000
ROA not after:            Thu 22 Jan 2026 20:46:18 +0000
asID:                     263518
IP address blocks:        168.197.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bc:08:b0:df:73:04:87:a7:c2:7e:4a:b5:6b:dc:3a:70:7e:27:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Jan 23 20:41:18 2025 GMT
            Not After : Jan 22 20:46:18 2026 GMT
        Subject: CN=64874280B5CE9128C50CBB048AD77C953A390FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:2d:43:e0:f3:8c:04:86:23:86:3e:78:fa:
                    c2:58:f2:8c:73:36:34:4a:1a:3e:90:0c:1e:9d:db:
                    1c:e8:1e:44:87:66:dc:6c:c7:b1:c3:36:d6:f9:e8:
                    02:66:a3:69:0c:35:f3:49:6f:8f:f5:41:07:ad:6c:
                    d7:11:cc:f1:8a:6f:ff:10:71:6e:69:dc:fb:dc:c7:
                    ce:aa:1d:2f:6c:56:51:e6:cf:30:c9:3a:e0:d6:0f:
                    ba:c6:46:99:01:8b:18:f0:fe:c0:02:69:ef:4c:4f:
                    d5:d7:bb:11:e6:2d:2b:36:21:83:16:94:cb:8a:d6:
                    4f:38:0b:73:7d:22:96:76:0c:f4:58:e9:13:2e:4f:
                    23:ef:09:51:82:61:9a:20:d1:bc:49:a1:ad:cb:f5:
                    72:b5:d0:9f:a9:8c:ab:43:cb:e6:56:c5:c0:7b:4b:
                    00:e5:94:c1:64:41:12:52:a5:af:0b:23:71:e3:44:
                    6a:7f:6c:87:db:f6:51:2b:30:cd:f7:6e:a6:c0:26:
                    70:62:ba:90:06:88:74:2f:c6:da:d9:63:15:ed:01:
                    4c:a9:3a:cc:4c:d5:7c:af:9f:ef:80:56:7c:ae:85:
                    50:ba:b7:b8:fb:0c:33:53:65:aa:d9:e6:52:d5:f4:
                    dd:17:5b:b0:b5:93:91:01:af:6b:71:ef:4d:68:c5:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:42:80:B5:CE:91:28:C5:0C:BB:04:8A:D7:7C:95:3A:39:0F:F0
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:2b:17:57:db:eb:f6:f3:d6:2e:18:8a:a2:32:4e:64:26:
         fb:71:88:a1:1c:dc:ce:2f:74:06:4e:37:08:ec:70:e8:01:b0:
         77:c5:58:f6:e1:54:e6:bb:ba:89:9c:8b:e5:8f:2b:87:1c:70:
         45:79:8c:e8:5a:08:42:58:e0:9d:b9:f9:8d:50:ca:45:d0:e6:
         41:cc:ac:e5:38:35:66:7f:c0:7e:76:11:37:cc:cd:a1:c4:32:
         2b:81:28:2c:45:70:a3:70:30:e9:ab:79:3c:0d:00:30:20:d9:
         f6:68:3b:e5:3e:24:30:86:12:bf:34:4b:0c:fa:5d:1d:f2:c4:
         4b:db:30:90:3f:2a:8e:70:85:db:92:23:d8:18:9d:2c:34:45:
         7e:14:78:44:ae:ca:59:2c:e9:f7:3a:7c:38:63:22:7d:38:e4:
         39:f2:3e:78:1d:ff:f5:ea:10:ea:b2:db:ac:d3:78:88:4b:40:
         e6:dd:ff:b4:d8:3b:5c:ca:03:91:00:7e:49:66:14:39:66:23:
         7b:89:87:75:7b:4f:22:4a:c9:67:f5:5e:6d:e4:3f:af:3b:cb:
         68:86:7f:c7:de:5d:f7:9b:5b:70:c7:11:c6:16:fa:ab:60:25:
         7d:94:fa:b8:4f:ae:57:e0:51:0d:db:f1:0c:e2:c5:12:f0:73:
         7e:f0:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:38:51 2025 by rpki-client