Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/3139312e33362e3232342e302f32332d3233203d3e20323633333432.roa
File:                     3139312e33362e3232342e302f32332d3233203d3e20323633333432.roa (raw, json)
Hash identifier:          vlIxUwycFQ9TJobfr7Jj3NbNiolhRSvz0DvkdGB434c=
Subject key identifier:   2D:6E:68:6F:27:6B:D2:DB:E9:17:35:5B:B6:F5:F1:2D:8E:52:70:9D
Certificate issuer:       /CN=318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A
Certificate serial:       4DBE68FF100491C483D6BF23E37604C5FC8DF09B
Authority key identifier: 31:8D:12:C0:C3:BC:AB:7F:A9:52:93:BD:6E:D3:A5:8C:BA:34:D6:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/3139312e33362e3232342e302f32332d3233203d3e20323633333432.roa
Signing time:             Mon 26 Jun 2023 07:59:36 +0000
ROA not before:           Mon 26 Jun 2023 07:54:36 +0000
ROA not after:            Mon 24 Jun 2024 07:59:36 +0000
asID:                     263342
IP address blocks:        191.36.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:be:68:ff:10:04:91:c4:83:d6:bf:23:e3:76:04:c5:fc:8d:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A
        Validity
            Not Before: Jun 26 07:54:36 2023 GMT
            Not After : Jun 24 07:59:36 2024 GMT
        Subject: CN=2D6E686F276BD2DBE917355BB6F5F12D8E52709D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:70:33:5f:1c:6b:55:ad:2e:58:8c:67:9a:
                    20:c1:7a:fb:f5:3c:ba:6b:94:90:ff:84:59:ca:cb:
                    db:e7:e8:ed:f9:ca:e3:8f:2f:ae:bf:30:49:15:19:
                    bd:fe:76:34:0a:71:94:e3:ce:10:59:b8:1b:78:9c:
                    3f:84:25:3b:49:67:71:b1:f3:34:7a:c1:79:ef:61:
                    63:dd:3c:23:20:e4:0b:51:06:56:af:c0:e5:bf:fe:
                    f8:26:50:3b:76:17:4a:40:d8:d1:dd:6a:79:8d:45:
                    a5:da:d0:93:a5:45:ed:b2:87:cd:de:d1:3f:42:55:
                    65:36:ea:83:18:78:33:c2:a4:81:cb:d9:42:45:97:
                    6e:8f:a8:59:ca:87:c8:a5:ae:a4:03:0e:33:9b:fd:
                    28:24:17:12:08:6b:2a:a6:c2:30:1a:3c:1c:c3:ad:
                    14:c8:93:4a:19:2e:3a:6a:05:2b:c9:cc:f9:93:5f:
                    0e:e6:73:80:75:7d:76:5c:a6:c0:37:ef:e5:13:2a:
                    d4:ee:dc:e8:1a:eb:37:35:ff:8f:51:7c:02:3c:21:
                    58:0c:19:76:1c:94:b1:4e:19:35:3b:d8:da:64:83:
                    c3:a7:ab:fe:bb:d0:26:31:16:8a:3a:01:6a:7c:47:
                    31:3b:66:5d:28:be:fa:6d:2e:47:a7:50:9d:11:e4:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:68:6F:27:6B:D2:DB:E9:17:35:5B:B6:F5:F1:2D:8E:52:70:9D
            X509v3 Authority Key Identifier:
                keyid:31:8D:12:C0:C3:BC:AB:7F:A9:52:93:BD:6E:D3:A5:8C:BA:34:D6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/3139312e33362e3232342e302f32332d3233203d3e20323633333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:69:db:b7:f6:a8:df:e2:36:5d:b0:45:63:df:b4:2d:fc:f5:
         50:ed:cc:07:ce:ac:29:33:98:c6:18:87:c6:d4:fe:38:30:6c:
         d1:94:8a:d4:57:95:c4:a5:22:0b:80:9c:57:5d:1b:d3:b9:4a:
         44:66:fc:8d:18:42:3e:69:81:2c:24:ad:61:85:b1:f2:68:49:
         22:05:bf:d8:83:df:28:fe:ad:06:20:55:c8:57:1b:cc:bb:d2:
         04:e4:2c:44:7f:b2:fd:df:21:aa:15:e2:5c:26:f0:dc:a5:b1:
         81:78:a7:77:ce:38:8c:d8:d5:1c:48:56:86:69:2b:a9:21:3a:
         43:da:3c:c8:32:f5:06:fb:b9:a2:48:aa:b1:64:5e:3d:2b:50:
         2a:3a:4c:e5:01:d1:80:70:fe:d7:3d:60:96:8a:fd:a4:ba:33:
         cc:64:03:ed:ff:c5:71:36:2b:fd:96:5e:9a:83:bc:df:84:da:
         d3:a6:3d:26:6a:2e:86:a2:c9:85:e1:6e:ff:c2:29:d1:fb:55:
         08:0c:71:4a:eb:fa:65:7c:1a:39:bc:d5:98:23:33:04:a2:26:
         05:9c:40:0e:77:3f:8a:ee:75:a3:2a:f0:f6:6d:b6:ce:c6:fa:
         78:b4:93:ae:75:a1:74:4e:e6:2a:5b:78:09:26:6a:8f:f7:b3:
         21:e1:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:19:31 2025 by rpki-client