Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3136382e3139352e31322e302f32322d3332203d3e203533313836.roa
File:                     3136382e3139352e31322e302f32322d3332203d3e203533313836.roa (raw, json)
Hash identifier:          v8TgT83/76PLUQPV0HOd0WlOzzkCGs65R2fqRtX6a44=
Subject key identifier:   07:F5:3F:59:74:C2:4E:B2:D7:91:4B:42:3D:1B:88:35:B0:CD:85:E1
Certificate issuer:       /CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
Certificate serial:       1DEA8B4CC169CB36EB4B85A33C8F14A2B5F074D7
Authority key identifier: 6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3136382e3139352e31322e302f32322d3332203d3e203533313836.roa
Signing time:             Thu 13 Mar 2025 17:12:18 +0000
ROA not before:           Thu 13 Mar 2025 17:07:18 +0000
ROA not after:            Thu 12 Mar 2026 17:12:18 +0000
asID:                     53186
IP address blocks:        168.195.12.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ea:8b:4c:c1:69:cb:36:eb:4b:85:a3:3c:8f:14:a2:b5:f0:74:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
        Validity
            Not Before: Mar 13 17:07:18 2025 GMT
            Not After : Mar 12 17:12:18 2026 GMT
        Subject: CN=07F53F5974C24EB2D7914B423D1B8835B0CD85E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:1a:04:3d:67:d0:a8:95:ea:03:fa:fb:fb:
                    0d:27:5e:81:1e:8a:47:a9:5d:08:c2:55:a4:b3:5e:
                    b3:2f:18:30:18:32:6d:1a:44:2b:06:b1:08:78:88:
                    63:48:68:41:ca:4f:56:5d:63:2d:c4:02:eb:fa:bb:
                    72:e2:c1:fb:f1:cc:69:d7:26:4b:e2:8c:be:6c:50:
                    59:75:bc:59:a6:65:58:cb:d6:e9:09:cc:94:3e:b4:
                    94:22:44:2d:0d:1d:98:3d:e3:33:74:a7:1d:7e:31:
                    88:77:f6:60:1b:b1:87:2f:4d:d3:aa:cb:6c:23:4c:
                    3c:45:bb:68:98:73:d6:05:76:06:d5:f6:7b:2d:31:
                    03:66:f6:e8:af:1e:81:c6:78:4a:dd:12:b7:92:95:
                    f0:92:86:34:3d:ac:2b:c2:5d:86:dc:b7:75:c7:3a:
                    3a:e0:5c:2a:ea:f5:98:22:be:6e:f9:25:96:8d:47:
                    2e:30:3f:2c:43:98:e9:71:2d:d6:1a:76:99:b0:7d:
                    aa:66:e5:04:fa:bc:90:02:46:cd:4c:8a:10:5e:75:
                    37:8a:04:8b:47:91:ab:4f:a2:bd:c2:0c:8c:a8:5f:
                    43:06:21:e5:e3:61:61:35:11:fa:dd:f5:da:3e:32:
                    f1:6e:0f:74:e1:af:59:f5:4f:17:c5:50:18:d1:b7:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:3F:59:74:C2:4E:B2:D7:91:4B:42:3D:1B:88:35:B0:CD:85:E1
            X509v3 Authority Key Identifier:
                keyid:6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/6F6E41F37AB48469D1CE88AD1951EB232B517B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3136382e3139352e31322e302f32322d3332203d3e203533313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:c7:21:63:37:0d:fa:a4:6d:3c:90:9f:50:f3:35:2a:44:
         82:88:a0:8e:a4:f8:ea:84:ca:ed:ec:6b:39:a4:e9:62:7c:e8:
         c1:68:d6:33:8e:1d:21:5c:4a:27:54:a2:c9:24:00:57:c6:ff:
         40:96:18:f6:4f:2a:cf:d0:dd:73:31:ff:db:61:d2:d9:3e:03:
         56:f6:5d:1d:0a:40:b9:73:be:5b:7f:91:bb:32:51:8f:0a:fe:
         65:d3:f5:19:2e:d7:47:20:42:a8:6a:07:64:71:f4:83:15:b7:
         aa:10:76:38:99:42:cf:5e:8c:4b:da:fe:09:f0:4b:66:58:b7:
         23:2e:1b:7d:50:5d:5a:86:25:b5:9e:6c:17:e2:15:b7:fb:75:
         bb:b8:f9:e0:33:e6:3f:96:17:63:42:99:c0:8d:12:0e:7d:40:
         98:e0:49:36:41:92:73:88:34:e8:48:ba:a2:be:66:e9:bd:24:
         2c:f3:5d:af:fe:25:9e:b3:6d:34:9c:22:d4:af:1b:64:6f:4f:
         9b:c4:0a:d4:b0:31:78:0e:d2:48:bb:b1:d4:97:fe:3d:8c:0b:
         e5:fb:6b:50:b3:1e:a3:fa:57:93:ef:48:af:c9:d8:5a:72:3f:
         21:8f:5f:42:5e:60:ba:7e:97:77:eb:3a:1f:da:60:fa:24:5a:
         f5:db:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:01 2025 by rpki-client