Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          gmltsC3UmgQFicZ3ynCg2uFvRwTk8aSxtIM6ZyHNKQ4=
Subject key identifier:   D8:12:BC:ED:E0:02:0A:F1:C0:3B:8E:E1:22:18:B8:D7:5E:16:DA:3F
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       6FDF2447E0DC328AD9EE493D72C144EDC2DD1B5C
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:42:00 +0000
ROA not before:           Mon 23 Jan 2023 21:37:00 +0000
ROA not after:            Mon 22 Jan 2024 21:42:00 +0000
asID:                     262992
IP address blocks:        168.232.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:df:24:47:e0:dc:32:8a:d9:ee:49:3d:72:c1:44:ed:c2:dd:1b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:37:00 2023 GMT
            Not After : Jan 22 21:42:00 2024 GMT
        Subject: CN=D812BCEDE0020AF1C03B8EE12218B8D75E16DA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:a2:3f:6c:cf:27:ad:f5:6f:4f:7c:8e:57:
                    10:89:12:1d:91:56:f6:e4:6a:0d:23:79:14:17:38:
                    a2:48:be:80:ba:1f:48:6a:60:90:80:3c:f2:a6:4d:
                    00:84:ef:d4:7c:05:33:c8:c4:ff:48:08:e6:51:84:
                    09:ad:3e:6a:b1:58:b6:5f:29:1e:c1:ac:bc:81:60:
                    3f:f0:3d:06:f0:4e:2f:01:f4:4a:ef:c0:e4:0f:da:
                    8c:04:78:5e:bb:0f:14:3b:10:69:ea:14:89:80:ae:
                    5a:d3:b3:ff:13:23:16:8f:2d:fe:88:d9:c2:4c:01:
                    48:19:d4:cf:f6:f0:6a:ca:e4:3c:91:40:0e:e1:2b:
                    ea:f8:bc:e9:73:f5:ba:2a:ea:0e:4d:8b:4e:3f:d0:
                    fa:fb:f1:ca:81:3a:e7:60:75:17:fd:e9:d9:57:12:
                    ef:ac:12:ab:2c:71:47:2a:4f:d1:7d:7a:1e:9b:16:
                    6e:16:f8:86:32:77:1e:31:86:6a:96:77:03:0a:de:
                    87:08:25:68:98:ee:6a:aa:65:9e:d3:eb:49:26:dd:
                    00:32:41:af:5a:32:f9:55:24:b6:3e:a2:9c:16:5c:
                    7d:43:59:65:a8:98:6d:db:87:7e:58:09:4c:d5:a9:
                    59:bc:2a:d5:27:ba:11:21:11:8c:ab:ec:1d:62:5e:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:12:BC:ED:E0:02:0A:F1:C0:3B:8E:E1:22:18:B8:D7:5E:16:DA:3F
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:49:f1:a1:19:e4:5e:66:94:87:d4:37:77:9d:b6:1b:1b:5b:
         44:6b:50:e5:db:56:ba:9d:16:8d:66:93:83:69:e6:0b:57:36:
         32:a7:d4:9d:31:a0:81:25:2b:8a:42:d0:71:16:05:7b:da:4b:
         49:5a:af:e4:a7:69:a6:d3:87:e8:2f:7c:f3:49:34:6d:77:89:
         2f:f8:5f:d3:3d:0c:1a:e3:a8:3c:aa:ac:d4:e4:c7:78:4d:cc:
         2c:58:5a:03:fd:33:29:fb:b9:fc:73:c4:61:79:ee:da:ec:20:
         2e:0c:72:27:95:c8:3e:07:65:60:37:87:fd:14:e0:4d:05:c0:
         16:6f:7e:be:75:79:27:03:d8:eb:6e:76:f7:e5:25:fb:68:86:
         a4:db:49:41:c5:50:b4:3c:e4:bb:b0:a7:fb:79:9e:4c:a6:6c:
         fe:42:6f:a2:85:9a:58:a2:f1:bb:a4:8d:f6:3b:2c:5c:87:71:
         02:9d:fc:29:d9:a2:1a:65:81:d0:08:35:95:91:87:42:b1:70:
         dd:85:eb:49:fb:75:f0:56:f6:72:8e:24:98:a3:6f:ea:7d:82:
         6b:44:a4:b2:14:80:c9:cb:88:a0:82:6e:6c:94:a1:26:93:e5:
         1d:fa:d2:a6:5b:da:f5:28:62:c8:5a:ea:aa:09:60:76:48:3f:
         69:e0:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:26 2025 by rpki-client