Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
File:                     3136382e3139352e342e302f32342d3234203d3e20323635343036.roa (raw, json)
Hash identifier:          noaHPEvcvAkXJCZ7QgwpIM2Bv04TJUCHQuLxhFuvTvs=
Subject key identifier:   D4:2A:4D:AD:FD:C7:5B:E5:42:63:F5:73:A5:82:34:1C:BD:1A:5C:3B
Certificate issuer:       /CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
Certificate serial:       1294B51B16E2B2422D121E6E10CBAFF43DD636C0
Authority key identifier: 09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
Signing time:             Tue 02 Jan 2024 15:47:37 +0000
ROA not before:           Tue 02 Jan 2024 15:42:37 +0000
ROA not after:            Tue 31 Dec 2024 15:47:37 +0000
asID:                     265406
IP address blocks:        168.195.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:94:b5:1b:16:e2:b2:42:2d:12:1e:6e:10:cb:af:f4:3d:d6:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0946ABC0E4F85CE0FC04F4D0512F90597B724859
        Validity
            Not Before: Jan  2 15:42:37 2024 GMT
            Not After : Dec 31 15:47:37 2024 GMT
        Subject: CN=D42A4DADFDC75BE54263F573A582341CBD1A5C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:53:97:7d:50:66:30:8c:94:97:40:8c:19:
                    83:c8:e8:78:20:b3:bb:1e:47:7b:7c:52:31:7f:e8:
                    42:19:57:0c:80:96:82:1a:7b:d7:74:39:c1:b9:5a:
                    8e:61:42:4b:d5:73:f1:f3:ab:59:fa:b0:96:6f:3a:
                    68:0a:6c:7b:3c:ad:d3:6b:18:a8:ca:3a:df:07:5b:
                    79:9c:c0:a0:b3:eb:50:30:f0:0b:62:d1:b4:cb:28:
                    2f:18:5e:3b:62:1b:57:1b:f5:31:0f:fc:ee:a6:c5:
                    64:c2:a1:13:a9:a2:38:16:45:30:e9:bd:67:a4:87:
                    7a:1b:3c:a7:05:c5:6b:ac:7c:67:b4:38:a1:fd:d9:
                    a1:36:71:55:da:d0:70:eb:57:78:76:44:86:7c:73:
                    7c:36:7b:6f:3c:1a:e5:1a:14:30:35:a2:8b:16:80:
                    fc:08:15:68:f3:44:ae:9c:a6:ad:a3:2e:5c:7b:da:
                    35:7f:03:21:79:97:22:9f:e4:d8:20:4f:52:81:b7:
                    ed:02:ee:e7:71:35:21:0a:fc:1e:68:c9:b1:f3:17:
                    a8:64:84:71:e7:27:31:b3:cc:46:22:a1:07:f2:7a:
                    bf:da:c8:16:09:f3:2b:0b:e9:6b:bb:bc:4e:96:ea:
                    9c:1f:ee:3e:cd:05:5f:bd:1c:0d:0b:e7:30:08:77:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:4D:AD:FD:C7:5B:E5:42:63:F5:73:A5:82:34:1C:BD:1A:5C:3B
            X509v3 Authority Key Identifier:
                keyid:09:46:AB:C0:E4:F8:5C:E0:FC:04:F4:D0:51:2F:90:59:7B:72:48:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/0946ABC0E4F85CE0FC04F4D0512F90597B724859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0946ABC0E4F85CE0FC04F4D0512F90597B724859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/1/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:77:b3:8a:38:dd:82:70:b2:1c:0a:e3:52:df:e6:92:e7:9d:
         12:62:88:87:c0:20:96:c6:48:e8:10:f3:51:a9:42:20:ea:ce:
         d3:15:02:bf:33:51:55:b9:49:ee:ca:b2:a2:f4:81:b5:a8:a4:
         ff:09:8f:cd:76:79:48:67:67:bd:65:89:fb:53:0b:2a:14:2b:
         ee:bb:7f:d0:de:aa:d7:ca:27:cc:a6:8f:d5:4c:7b:59:a8:07:
         66:5c:43:e2:bb:35:f4:9c:ff:63:86:87:ff:ee:c8:15:ee:8a:
         0a:c9:ce:ef:2e:e6:25:1a:ac:9f:43:b1:76:5a:fb:8b:b6:5d:
         79:9d:23:c8:30:21:ec:18:cc:0c:ff:e5:fe:80:66:99:f8:7f:
         6d:1d:bb:ff:4b:7b:27:93:14:2d:ba:27:75:3f:3f:d7:ff:64:
         fc:25:d0:0c:ac:b7:f9:69:d4:ed:b2:f7:f0:20:49:9e:1f:85:
         46:1c:6b:d5:f3:93:f0:41:11:2c:f9:af:7a:b4:ef:97:13:f0:
         60:5d:7e:05:be:28:68:ec:86:2a:9e:84:60:ae:78:d6:75:99:
         45:6a:45:53:2c:ae:45:f4:28:7b:ad:7e:15:fc:18:a1:91:07:
         fb:5f:83:eb:1e:6e:b9:d4:22:90:d9:e8:10:98:47:81:ed:e3:
         78:0b:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:00 2025 by rpki-client