Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32322d3332203d3e20323635323536.roa
File:                     3136382e302e3135362e302f32322d3332203d3e20323635323536.roa (raw, json)
Hash identifier:          u11NRxwUvHXo5UzS33l2XOtyqZtoTiaTUI37bQ+AG4s=
Subject key identifier:   B6:E1:A8:6C:34:B0:E8:11:6E:3E:22:7F:40:CE:99:F4:33:68:6E:73
Certificate issuer:       /CN=DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C
Certificate serial:       1E1FE8FECD43DEAA319DF9E1DBDB76169ED4B80A
Authority key identifier: DA:BC:DC:54:DC:ED:C3:35:85:5A:F5:AC:9F:C0:4C:9A:E3:DB:0E:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32322d3332203d3e20323635323536.roa
Signing time:             Mon 21 Jul 2025 18:43:17 +0000
ROA not before:           Mon 21 Jul 2025 18:38:17 +0000
ROA not after:            Mon 20 Jul 2026 18:43:17 +0000
asID:                     265256
IP address blocks:        168.0.156.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1f:e8:fe:cd:43:de:aa:31:9d:f9:e1:db:db:76:16:9e:d4:b8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C
        Validity
            Not Before: Jul 21 18:38:17 2025 GMT
            Not After : Jul 20 18:43:17 2026 GMT
        Subject: CN=B6E1A86C34B0E8116E3E227F40CE99F433686E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:fb:13:e3:50:5f:95:e0:76:ff:8b:ae:9f:
                    92:41:fb:13:6b:5a:bf:40:c6:50:d4:85:e9:0a:14:
                    c4:60:ee:26:64:61:5a:df:5d:6d:8c:1d:a0:e3:40:
                    d6:80:e6:5b:21:9a:40:8b:7f:1d:13:f1:63:68:a6:
                    e4:24:04:c2:72:cb:57:d5:cd:fd:f2:75:ca:bf:e4:
                    08:9e:39:77:b0:0f:52:34:1d:0c:b7:82:f2:95:e4:
                    b4:e8:49:7c:4b:46:c6:e5:23:7d:15:a2:44:ee:b7:
                    19:14:d2:b4:e6:cf:60:ef:28:b4:fd:5f:cb:15:9c:
                    71:c8:4a:56:12:54:0f:78:0a:61:e2:76:fd:32:65:
                    4e:60:9b:5b:45:29:55:d9:fe:65:3f:75:3e:05:6c:
                    f6:3d:86:78:d1:b6:78:bb:b2:71:53:75:51:21:f2:
                    df:7f:b0:14:5c:00:97:6f:2b:cb:0b:20:69:fd:b9:
                    ee:55:73:b2:58:72:a3:5d:b3:a0:76:5e:88:f8:11:
                    18:04:24:4a:76:ee:e7:60:8e:86:b3:a2:19:1d:67:
                    4d:ec:ae:6f:23:e3:c9:ad:06:53:9f:1a:d0:15:0a:
                    39:f4:ee:04:8f:ac:8b:1e:d9:7b:41:43:d7:b8:81:
                    59:a7:f2:a9:9f:d1:7d:31:97:a0:a7:0e:d1:ea:97:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:A8:6C:34:B0:E8:11:6E:3E:22:7F:40:CE:99:F4:33:68:6E:73
            X509v3 Authority Key Identifier:
                keyid:DA:BC:DC:54:DC:ED:C3:35:85:5A:F5:AC:9F:C0:4C:9A:E3:DB:0E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DABCDC54DCEDC335855AF5AC9FC04C9AE3DB0E7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3136382e302e3135362e302f32322d3332203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:d5:7c:52:b6:95:8a:33:ba:7d:c2:70:f9:68:f5:bb:41:
         37:6f:ff:3f:a4:08:72:fc:39:2d:9e:8e:54:e9:46:c2:74:d3:
         c6:b2:7b:b2:8e:59:9b:fb:af:62:df:b3:31:f3:8f:1e:20:60:
         78:e7:b5:76:56:04:6a:81:3d:cb:4a:4a:e5:29:71:ad:95:e8:
         1d:fa:5b:c2:62:cb:dc:fd:0f:26:e4:db:ec:a0:ae:90:a6:32:
         4f:1d:05:e2:94:a6:f8:7b:a6:a3:00:02:73:ed:a5:d8:f0:0f:
         b9:ce:87:fd:d8:47:8c:7f:b5:f7:28:b9:d9:5e:78:58:48:83:
         12:a6:4e:5b:f7:46:1f:f4:05:1f:c6:57:c8:d9:e1:fa:49:3a:
         db:ff:d7:af:01:df:d3:9c:1b:43:60:ca:0a:2a:53:e0:0f:0f:
         5f:50:af:36:bd:16:8e:a3:ab:75:9c:57:06:56:7f:74:c7:39:
         fb:76:89:32:a8:0c:08:e8:70:02:7f:e1:00:ae:ed:13:ed:77:
         a2:d1:2f:41:2c:cf:58:d2:1a:ef:dd:7b:e4:db:83:54:50:59:
         1a:de:e8:81:3f:3e:57:96:4d:10:c0:fc:ca:54:20:77:9d:bd:
         5c:7b:a2:c7:ef:a6:55:6f:81:b4:76:7f:94:4d:98:a9:eb:24:
         ee:ba:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:23:26 2025 by rpki-client