Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          MYw4UBKPlenwmXqM+dlf2sZfviNBS97Gb8w5Y7yFSUQ=
Subject key identifier:   02:46:2A:C6:58:BC:C5:C7:5F:6E:39:B9:37:2A:96:8D:0C:F2:23:EB
Certificate issuer:       /CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
Certificate serial:       1F48C34BB3CDA93C92925C8FA9109B4DD7B9BA53
Authority key identifier: CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa
Signing time:             Mon 12 Feb 2024 15:13:31 +0000
ROA not before:           Mon 12 Feb 2024 15:08:31 +0000
ROA not after:            Mon 10 Feb 2025 15:13:31 +0000
asID:                     265477
IP address blocks:        168.197.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:c3:4b:b3:cd:a9:3c:92:92:5c:8f:a9:10:9b:4d:d7:b9:ba:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Validity
            Not Before: Feb 12 15:08:31 2024 GMT
            Not After : Feb 10 15:13:31 2025 GMT
        Subject: CN=02462AC658BCC5C75F6E39B9372A968D0CF223EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:4a:7d:36:99:31:b2:e2:51:c5:57:9c:2c:
                    0d:10:ba:16:26:40:2c:95:0f:3a:3e:1a:ee:a3:86:
                    82:f7:26:6f:13:e4:1f:2f:d5:6f:b1:b8:5e:df:73:
                    a7:fb:52:ff:cb:51:52:ca:71:15:f4:83:36:6b:69:
                    ff:8b:05:eb:14:7b:f0:97:18:07:4e:08:27:0f:96:
                    e9:fa:8f:d8:9c:a7:a0:5b:02:59:30:bd:23:d8:9c:
                    4f:3d:60:15:a7:a3:3b:80:e9:fd:eb:d4:92:4f:56:
                    14:5d:6b:6a:76:21:ba:7e:98:b0:c3:b6:5d:47:f8:
                    bf:73:47:e8:30:e8:a4:c8:c2:86:3f:d1:ef:52:87:
                    dc:8f:f3:79:6f:70:6b:dd:72:1e:bb:d8:07:34:55:
                    7b:bd:6e:5e:d5:56:98:ce:7e:a8:73:20:af:5b:f6:
                    d3:32:c5:f0:1e:97:0f:d4:61:d1:7a:9c:6c:74:bc:
                    cc:8c:02:cd:00:81:64:b1:02:8b:23:bb:1b:7f:c7:
                    86:fd:82:3f:58:d8:db:f6:0f:11:40:64:fd:e7:cc:
                    b1:df:8e:58:ce:1f:a8:05:4c:b1:f1:fa:88:4f:1f:
                    45:dd:f2:c9:f7:4d:db:98:41:ea:a5:dd:1f:e6:6f:
                    3e:ee:9d:57:dd:72:7a:d2:51:ed:6f:d7:a6:8d:5e:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:2A:C6:58:BC:C5:C7:5F:6E:39:B9:37:2A:96:8D:0C:F2:23:EB
            X509v3 Authority Key Identifier:
                keyid:CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a7:7e:95:71:d4:47:ef:81:a2:46:fe:42:f6:0b:28:29:02:
         e7:9c:89:a2:30:79:2b:70:3b:5c:d1:3d:8f:ed:15:6f:19:f3:
         15:1c:3b:87:87:a4:a3:a7:dd:eb:d5:c0:38:05:f6:85:6b:70:
         88:92:45:23:aa:5d:74:57:02:51:99:cf:7a:0d:80:8e:50:24:
         e0:66:92:7c:ca:7f:a9:a2:83:ba:25:4c:83:e0:57:63:74:fa:
         24:ae:50:54:27:66:da:0e:03:cd:d4:1b:f3:ff:df:96:7c:da:
         9f:8e:63:fa:ce:b6:f8:b0:62:69:71:08:ac:fb:32:d6:d7:27:
         0e:e9:f6:ac:12:a4:d2:c8:28:0c:cd:64:4c:dc:98:51:54:e9:
         f8:ca:be:37:6d:de:a3:24:bc:c9:be:63:5d:f6:99:d4:11:c4:
         f4:2c:d2:ce:e6:73:f8:5a:d1:2b:11:3d:dc:61:c9:f2:ee:9f:
         0f:e0:1c:f8:57:1d:41:8d:8d:83:08:7a:66:c1:04:fc:7e:72:
         ce:fd:56:b0:da:fb:2f:96:e6:61:91:68:68:01:13:3f:1a:f3:
         28:ef:1c:27:95:7f:2f:4b:e3:aa:b8:a7:88:4a:71:14:79:16:
         fd:e1:df:f9:6a:d6:8d:db:dc:9d:d7:07:b2:9e:63:b2:02:1f:
         0f:8e:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:25 2025 by rpki-client