Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa
File:                     3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa (raw, json)
Hash identifier:          PLGJcYGglivgEqiBkal+8+c5cYfTV6OqItLhSIWWTFU=
Subject key identifier:   95:6F:5D:DB:F2:77:E3:D7:0C:C3:47:05:85:75:F8:D3:1D:8D:67:72
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       7F714134E440D4068AA17F8650D1804C9CCDECE6
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa
Signing time:             Thu 06 Mar 2025 16:47:36 +0000
ROA not before:           Thu 06 Mar 2025 16:42:36 +0000
ROA not after:            Thu 05 Mar 2026 16:47:36 +0000
asID:                     265311
IP address blocks:        168.121.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:71:41:34:e4:40:d4:06:8a:a1:7f:86:50:d1:80:4c:9c:cd:ec:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Mar  6 16:42:36 2025 GMT
            Not After : Mar  5 16:47:36 2026 GMT
        Subject: CN=956F5DDBF277E3D70CC347058575F8D31D8D6772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:c4:9b:36:d8:2d:c7:7a:3a:9a:b8:6b:59:
                    1b:01:c2:58:d3:9b:cc:ff:0a:72:32:73:1b:10:63:
                    4e:ee:08:83:3e:51:6b:8b:b0:f6:d1:a2:1c:c2:e3:
                    c0:89:00:eb:a4:df:e5:9d:1c:49:31:c6:55:14:ea:
                    d6:eb:2a:b1:07:e4:03:09:38:fc:24:1b:57:ba:de:
                    1b:38:93:c6:9e:f7:46:22:f7:ab:40:9d:be:e6:05:
                    70:f6:ab:4b:4a:32:e7:aa:dc:34:95:a3:3d:a4:5b:
                    4c:1a:d4:98:2d:71:39:c1:89:f8:f1:1d:05:d6:77:
                    96:77:4f:1a:b8:b4:96:36:b9:b1:be:64:45:d9:a7:
                    33:47:74:47:72:0c:e9:07:82:41:ca:12:e2:e8:77:
                    12:9d:b6:df:14:50:f5:9a:c8:f7:0a:fc:37:bc:1f:
                    a7:38:c7:cb:4d:16:aa:45:6e:52:ad:92:84:ea:7b:
                    b8:31:16:fe:0e:de:28:eb:41:67:95:80:68:02:55:
                    94:9a:55:0c:52:20:14:f1:60:c1:15:2d:53:f1:d5:
                    32:a2:21:2f:75:d0:a6:32:64:56:55:40:1b:ba:03:
                    ab:be:ff:9d:f5:52:e3:bc:6f:1d:58:e0:e6:98:79:
                    20:a4:0c:92:3c:78:bc:a5:03:2c:96:00:93:0a:bc:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6F:5D:DB:F2:77:E3:D7:0C:C3:47:05:85:75:F8:D3:1D:8D:67:72
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:26:f7:ec:ac:4c:41:79:6a:d0:7e:e6:15:b5:29:ff:bd:eb:
         18:22:0b:be:7d:f6:d5:1c:94:7a:c7:d6:67:dd:d0:a9:41:b3:
         7b:ca:bf:e5:84:f0:3d:9c:2e:ba:d1:e5:e0:52:62:b5:64:80:
         56:7f:85:13:09:db:1b:01:6d:84:51:96:dc:54:46:41:dd:f9:
         4d:e0:59:10:1d:3f:bb:2f:17:2f:2a:11:8d:aa:17:b4:9f:d0:
         0e:3b:50:32:11:60:43:aa:83:78:39:a6:41:8d:77:fd:d2:d9:
         3c:36:1c:e4:ae:17:d4:27:88:e5:3d:2d:f5:c6:56:fb:46:d5:
         80:25:80:49:b1:98:16:37:a1:f4:88:e5:3e:1f:f1:c0:8d:7b:
         53:38:b1:58:8a:43:4c:51:87:71:73:cb:3f:d2:9e:fd:d4:b6:
         a6:dd:99:69:29:c7:23:f5:c6:c3:aa:ff:53:00:d8:eb:22:c5:
         4d:81:a8:1d:24:a5:53:a5:88:94:05:a2:01:8e:57:25:4e:b8:
         b0:d4:dc:38:e9:e9:31:f9:d6:a6:a1:a3:66:42:8a:44:ce:d8:
         2e:b9:5b:db:67:78:63:42:05:cb:c4:e1:09:db:ce:50:20:e0:
         ac:b7:07:1e:29:7f:82:cf:ba:98:b8:91:81:98:1b:d1:75:89:
         3b:ad:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:51 2025 by rpki-client