Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132362e302f32332d3233203d3e20323633363631.roa
File:                     3136382e3230352e3132362e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          /k13Lz83Fmhui1XQ0MoV8z/PrjFmgaORj3axow3pZKM=
Subject key identifier:   2C:84:79:40:B1:AC:A2:5F:B8:A1:68:78:DD:C5:F4:12:CE:54:78:CC
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       604F203F14755AD198DBE056C7D746D8A2DC2A59
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132362e302f32332d3233203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:22:57 +0000
ROA not before:           Mon 04 Mar 2024 21:17:57 +0000
ROA not after:            Mon 03 Mar 2025 21:22:57 +0000
asID:                     263661
IP address blocks:        168.205.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4f:20:3f:14:75:5a:d1:98:db:e0:56:c7:d7:46:d8:a2:dc:2a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:17:57 2024 GMT
            Not After : Mar  3 21:22:57 2025 GMT
        Subject: CN=2C847940B1ACA25FB8A16878DDC5F412CE5478CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:37:ae:08:80:1c:ff:11:ed:41:f0:fa:0e:
                    9e:99:5b:ca:29:c2:1a:8c:d6:96:75:1d:9d:ce:d4:
                    be:e4:63:91:d9:a7:af:45:e5:28:5d:58:dd:de:24:
                    a8:bc:2e:56:55:da:73:ae:02:36:ce:0f:e6:3f:39:
                    aa:a0:50:f0:1d:a3:05:34:97:f7:f8:61:45:fc:92:
                    15:d2:23:10:39:ad:a0:57:b0:30:f7:86:c1:ce:c8:
                    0b:97:a6:ff:24:9f:9c:88:c4:8b:4a:05:7e:36:70:
                    69:94:f0:53:27:1d:38:05:e5:af:66:b6:28:af:af:
                    5f:fc:c5:4e:e3:41:6d:b9:48:b5:9f:ec:0c:43:68:
                    d4:90:90:00:ba:77:e5:09:34:30:bc:e5:8c:7d:7d:
                    9f:4a:f5:84:9c:00:60:19:dd:3e:93:fa:39:51:c3:
                    e9:42:0c:b5:97:3a:45:3c:2f:ef:bd:2d:e7:97:bc:
                    bd:a1:94:bb:af:76:d4:12:d5:db:fa:76:89:5a:d0:
                    ec:e6:14:ec:18:c3:00:ea:fd:6f:40:40:aa:3f:34:
                    77:de:4a:fe:74:f5:f8:50:34:68:36:29:50:61:25:
                    77:16:22:8c:72:a0:b6:57:9e:54:7a:93:9a:a5:5a:
                    0c:a0:7d:9d:1c:6f:bc:98:f9:ea:e6:1d:42:8e:18:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:84:79:40:B1:AC:A2:5F:B8:A1:68:78:DD:C5:F4:12:CE:54:78:CC
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3136382e3230352e3132362e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:cb:49:19:4d:a1:48:bd:23:aa:78:48:25:f3:7b:b0:3e:
         2b:da:e1:83:b5:8b:9d:19:a0:c2:d6:0f:0b:f4:fd:36:6c:1f:
         b2:74:e0:09:61:c0:8c:0f:5d:1d:1e:45:b9:f8:ff:95:f3:49:
         dd:32:b5:e6:d7:14:a6:1b:f3:e5:18:41:7d:b0:a5:77:d9:ee:
         ed:57:b9:28:33:a0:76:e7:63:ff:83:8a:4a:61:be:d0:8b:23:
         ad:cd:27:88:7e:7a:f0:0e:08:eb:a0:7b:3f:4c:3c:95:d4:3d:
         ce:1a:8f:0d:ab:92:d1:df:33:dc:28:56:94:62:01:e1:4f:5f:
         b9:20:cb:5e:14:63:cf:50:78:95:66:50:a3:c7:a9:60:93:fa:
         df:12:bd:5f:8a:74:b6:dd:fb:c3:20:ce:b7:26:ec:c6:9f:2d:
         d4:3a:90:f0:7e:c0:c2:61:7f:dd:fd:d7:9d:56:5c:04:44:32:
         db:6e:a3:b9:4a:a3:9d:be:86:8e:ba:90:25:ad:8d:5b:a6:3e:
         9a:78:2d:10:3e:a3:95:36:5b:ae:67:68:b2:2b:54:cd:e1:82:
         0b:ec:c1:e7:eb:7b:6a:40:12:80:98:2b:ea:c6:88:f3:e5:e9:
         74:da:42:29:d0:b6:40:51:ac:d8:92:8d:97:ff:e7:63:59:4f:
         89:2a:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:08:23 2025 by rpki-client