Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131382e302f32342d3234203d3e20323634393130.roa
File:                     3136382e3232372e3131382e302f32342d3234203d3e20323634393130.roa (raw, json)
Hash identifier:          hKzjwoPqX7HyDp+klBvpkcMveqRpThSDuu4Asx5AFZA=
Subject key identifier:   5E:F7:3E:D8:A1:E7:4C:AA:64:66:9C:57:C9:09:9B:35:FA:A8:91:06
Certificate issuer:       /CN=100D641D9246825DB5F200B9152379E6B866AE90
Certificate serial:       0E85B4522DCE199F6E0FC39E1AE6CE10990B9DF8
Authority key identifier: 10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131382e302f32342d3234203d3e20323634393130.roa
Signing time:             Sat 13 May 2023 19:19:37 +0000
ROA not before:           Sat 13 May 2023 19:14:37 +0000
ROA not after:            Sat 11 May 2024 19:19:37 +0000
asID:                     264910
IP address blocks:        168.227.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:85:b4:52:2d:ce:19:9f:6e:0f:c3:9e:1a:e6:ce:10:99:0b:9d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100D641D9246825DB5F200B9152379E6B866AE90
        Validity
            Not Before: May 13 19:14:37 2023 GMT
            Not After : May 11 19:19:37 2024 GMT
        Subject: CN=5EF73ED8A1E74CAA64669C57C9099B35FAA89106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:99:f9:8a:cc:6d:36:dd:88:a1:86:4e:d2:
                    8f:6d:6a:d9:7b:f2:17:fc:cf:ee:b2:01:53:4b:55:
                    2b:d3:7e:26:27:62:32:d4:e3:39:12:23:52:7a:0e:
                    e3:f1:8a:c1:8d:ea:3f:69:58:62:7c:9d:b6:f8:a6:
                    87:6d:6c:4b:96:2f:62:ab:a2:b5:9e:05:e3:db:30:
                    e9:a0:d2:62:03:d3:1e:93:2b:eb:fd:08:f4:ab:ae:
                    1b:09:be:b3:b8:92:0d:f0:4f:f7:e3:f7:f8:09:f9:
                    f6:f5:1e:df:d2:b8:8f:90:38:b7:4f:13:1e:dc:bf:
                    57:a4:01:7e:7f:65:36:1b:47:a3:4c:2d:67:ff:c3:
                    81:fb:cc:87:44:85:2a:05:83:ec:22:e0:b3:a5:32:
                    26:f9:bc:9e:66:87:0a:de:71:d1:da:58:5c:d7:b5:
                    7f:f3:9c:25:a2:99:70:20:09:85:64:d8:75:7a:8d:
                    33:10:b0:8b:ac:85:a4:68:f7:43:20:0b:61:f2:24:
                    03:52:fc:26:92:6e:ef:cf:a5:b2:a0:eb:62:34:b6:
                    b0:97:75:6b:ce:f5:5f:25:54:89:20:c0:75:1d:3b:
                    82:95:26:44:70:49:c6:12:40:d1:2e:db:a0:76:dd:
                    fb:58:b5:84:f0:2a:f1:c0:a5:21:06:1a:f0:26:7c:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:3E:D8:A1:E7:4C:AA:64:66:9C:57:C9:09:9B:35:FA:A8:91:06
            X509v3 Authority Key Identifier:
                keyid:10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/3136382e3232372e3131382e302f32342d3234203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:0c:2d:00:45:e4:9e:41:93:11:e0:04:19:80:51:72:a9:
         c2:c2:6d:8a:0f:07:c3:aa:23:cf:40:ea:bc:31:da:c8:bb:cd:
         5c:84:25:43:5f:36:8d:eb:c0:79:76:6e:fb:06:ab:90:a6:a8:
         87:53:45:92:26:b4:97:72:54:ee:06:77:c1:1a:0a:81:53:b5:
         27:e5:f1:8c:19:00:d0:a2:c1:85:02:08:fc:d7:b9:1a:ce:08:
         02:f5:13:d6:70:de:03:c3:f3:86:3c:7a:23:eb:9c:fc:66:82:
         cc:c6:58:1b:b7:89:7d:08:9f:09:74:01:22:76:82:44:5d:82:
         c4:13:92:94:89:ac:ca:65:6d:1c:cf:eb:51:f0:67:b3:61:2a:
         5f:ed:e8:e8:4d:0b:7b:94:00:cd:dd:05:35:bd:c8:21:e8:92:
         f6:2c:2d:48:e6:dc:f5:85:b5:5e:8f:13:42:1c:7b:a2:73:44:
         1f:86:6e:5d:42:b5:29:76:fc:f0:87:ff:24:7a:ad:a4:df:e8:
         8c:8d:82:83:d1:b6:e9:36:90:fb:55:f9:bf:61:63:3c:90:32:
         1e:fd:04:3b:a0:f1:89:9c:be:a4:39:dd:dd:8b:d3:c8:39:ca:
         2a:43:81:21:38:d1:02:48:01:c6:04:ce:78:c4:3b:e9:0d:9a:
         fc:d3:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:27 2025 by rpki-client