Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          SmvS367xVrWns4RD+Fv9fL1n9tBVA5yf4VFvLZuIuFo=
Subject key identifier:   D7:D0:CB:CB:65:73:07:63:23:A3:03:E9:45:BE:B3:F5:A2:18:67:F9
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       5E18F1267C485978978CF8967C9C1D5256150CC4
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
Signing time:             Thu 07 Nov 2024 20:40:13 +0000
ROA not before:           Thu 07 Nov 2024 20:35:13 +0000
ROA not after:            Thu 06 Nov 2025 20:40:13 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:18:f1:26:7c:48:59:78:97:8c:f8:96:7c:9c:1d:52:56:15:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:13 2024 GMT
            Not After : Nov  6 20:40:13 2025 GMT
        Subject: CN=D7D0CBCB6573076323A303E945BEB3F5A21867F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:69:b6:1b:94:ca:b3:5e:f2:2b:ad:35:eb:
                    31:6f:d3:72:0c:2d:c6:6f:05:f6:51:04:5e:89:2c:
                    4a:ee:bc:c6:9d:71:65:9a:2b:3f:db:aa:43:9e:64:
                    e6:d0:38:5a:c1:96:4c:4c:72:d2:a9:da:0e:9f:b1:
                    f8:68:6f:36:55:e6:39:42:b4:04:2a:72:cd:e5:ba:
                    d7:86:4b:a2:bf:a1:e9:8d:2c:77:f1:90:2d:9c:11:
                    00:1b:c2:35:70:4b:63:57:e3:2c:f5:fe:58:c3:90:
                    f9:50:b5:c1:80:b8:87:35:71:61:d1:f7:03:a5:45:
                    49:ba:ac:1a:d4:42:b5:25:32:5b:f3:ed:96:2a:06:
                    ec:99:87:5f:31:e8:11:89:cc:83:c2:c3:bd:99:9a:
                    d8:b3:5b:ef:27:ba:74:87:71:58:c4:05:e7:4a:97:
                    26:f4:19:ae:e4:bf:d7:4c:56:0c:97:89:d9:9c:92:
                    5f:0d:0c:24:08:42:0e:ee:c5:b5:4f:96:36:45:9e:
                    bc:c9:56:52:14:7c:08:b5:fe:95:90:7f:47:5e:8a:
                    30:69:8b:06:7f:ee:8e:7d:6f:27:50:9a:b5:55:e6:
                    c6:f5:ce:1b:c7:3f:6b:e6:65:0b:9b:b0:b1:b3:22:
                    a8:87:e0:1c:cb:f7:29:92:7d:4f:c9:99:e5:90:e1:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D0:CB:CB:65:73:07:63:23:A3:03:E9:45:BE:B3:F5:A2:18:67:F9
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:6b:14:c9:89:72:86:2e:01:5c:d9:7b:11:93:6e:a9:83:00:
         19:27:8f:b0:4c:b3:81:90:43:b8:e9:12:97:68:38:06:26:12:
         8f:46:4c:c8:64:5f:3d:95:70:24:f4:c8:81:f1:ad:ad:5e:ba:
         61:d0:77:1d:d8:ad:c4:17:bd:35:3f:2b:35:00:0c:95:25:1b:
         f3:5a:ca:93:eb:9a:a2:fe:45:68:44:05:5e:cd:09:69:5c:e7:
         0d:98:ea:9c:ac:f5:27:1e:f7:4b:85:d1:bd:c8:ce:fb:f0:29:
         ee:cc:10:d0:57:2f:72:4d:44:7b:d8:d3:71:c1:69:6d:ed:fb:
         ba:60:db:44:9f:8b:49:48:34:5f:05:a3:26:5a:dd:cc:84:8c:
         ac:80:4e:db:62:8f:4f:06:e7:6b:70:ed:03:b8:3c:65:4a:b9:
         76:5a:1c:db:af:c4:3a:e2:a2:46:f9:e8:a7:67:89:a4:ba:1f:
         de:25:24:7d:0f:57:0f:09:04:4e:38:f9:fb:41:9e:3e:b1:12:
         a6:21:3f:40:fc:9e:7e:eb:fb:cf:d8:d4:6d:9f:5b:f3:98:4d:
         f7:96:b9:b9:7e:84:2e:6d:b3:b6:60:84:63:08:67:3f:35:12:
         81:53:22:cc:17:40:d7:fd:d1:7f:de:bc:1d:29:cd:86:f5:f5:
         e9:8d:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:09:39 2025 by rpki-client