Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/3136382e3139342e3139342e302f32332d3233203d3e20323635333934.roa
File:                     3136382e3139342e3139342e302f32332d3233203d3e20323635333934.roa (raw, json)
Hash identifier:          zkn0X1cZ6zi9Jw59tIw+ZaAzwXAbPiLqolEjHWSbSSs=
Subject key identifier:   FB:38:F6:62:71:44:B6:96:7D:7A:2B:99:86:EA:4C:B1:20:A0:68:49
Certificate issuer:       /CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
Certificate serial:       55B4AEFDBC6E29483145B95A9766FD48B54B8B81
Authority key identifier: A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/3136382e3139342e3139342e302f32332d3233203d3e20323635333934.roa
Signing time:             Thu 06 Mar 2025 03:00:43 +0000
ROA not before:           Thu 06 Mar 2025 02:55:43 +0000
ROA not after:            Thu 05 Mar 2026 03:00:43 +0000
asID:                     265394
IP address blocks:        168.194.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b4:ae:fd:bc:6e:29:48:31:45:b9:5a:97:66:fd:48:b5:4b:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3756BDF1D16A4696DDBD8788537C2F8FB47FA72
        Validity
            Not Before: Mar  6 02:55:43 2025 GMT
            Not After : Mar  5 03:00:43 2026 GMT
        Subject: CN=FB38F6627144B6967D7A2B9986EA4CB120A06849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:11:90:3e:24:88:72:73:d9:91:a4:5f:6f:
                    88:27:c7:94:94:bf:29:d1:70:0e:b3:15:6f:f3:62:
                    74:86:c3:c5:46:16:a7:f2:70:7f:36:2a:9f:a5:4b:
                    a5:ad:34:66:e2:1b:9d:f2:b3:5f:50:c1:44:98:b7:
                    9c:31:c3:e8:67:ad:c7:17:57:87:fa:68:67:0c:75:
                    5e:80:e5:c4:7f:53:7a:4e:8c:04:de:d3:66:1e:1d:
                    c7:98:a3:9b:3d:82:86:5d:ab:fd:7e:45:24:a8:0e:
                    2b:ef:fb:76:9f:75:f1:5b:ee:9b:2b:09:9d:51:f4:
                    f8:c7:36:9d:d9:86:a3:9b:ef:00:fd:53:9e:31:cb:
                    5e:91:3c:63:56:fd:29:2b:9b:ba:cb:3e:10:6d:01:
                    89:ff:3c:a1:b7:d8:6b:d5:4b:ef:d6:4e:66:c5:3d:
                    08:06:b2:ee:ba:c5:b9:2e:c3:06:bd:6e:d2:c5:29:
                    27:1a:7e:02:82:75:a0:fd:64:bb:4b:6a:51:f3:f9:
                    3a:fa:8c:7d:75:ef:7a:ce:d2:9b:bb:9c:6c:8b:92:
                    33:3b:24:4a:34:3a:58:ef:8f:6a:fb:19:56:5e:35:
                    10:ed:72:13:38:4a:c8:d3:6c:5e:d8:ea:2a:5b:1b:
                    73:97:eb:06:21:4c:e0:e1:0a:ac:94:ec:fb:c3:69:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:F6:62:71:44:B6:96:7D:7A:2B:99:86:EA:4C:B1:20:A0:68:49
            X509v3 Authority Key Identifier:
                keyid:A3:75:6B:DF:1D:16:A4:69:6D:DB:D8:78:85:37:C2:F8:FB:47:FA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3756BDF1D16A4696DDBD8788537C2F8FB47FA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/1/3136382e3139342e3139342e302f32332d3233203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:bc:53:f1:f2:b3:3a:68:67:a4:4a:c9:04:6e:12:67:5f:
         70:b2:7f:7f:ae:3f:be:19:37:2d:29:41:a1:17:12:9d:6b:5a:
         d6:cb:d0:14:81:ca:4f:45:e0:a8:d8:ad:0a:f2:1a:f4:42:32:
         c1:a9:17:4c:de:64:00:0a:1e:15:25:c3:bd:52:5b:4a:44:a5:
         7a:70:5c:5e:cf:3b:4b:93:8b:d3:ec:c0:af:cb:02:f4:4c:2d:
         3c:a0:25:2c:6b:0d:4d:cd:35:00:5d:78:e2:01:1b:37:6d:3a:
         e7:65:97:3f:23:5d:bd:e7:09:b7:82:ea:fa:99:09:37:72:1a:
         b7:1e:f3:8b:b0:45:b9:c9:94:ce:8d:72:8a:a5:13:48:d2:bf:
         70:c9:91:42:87:e4:b0:a2:1f:6c:34:b8:ee:3d:f3:53:0f:ed:
         7c:b3:1d:ac:83:fc:c4:25:85:65:0e:3f:9d:eb:ca:36:0c:f7:
         8d:dc:c9:79:4d:ba:b9:65:19:8f:92:46:73:60:6f:0e:39:f9:
         d5:e4:05:67:28:f5:23:d1:8e:32:8d:6f:4c:47:9e:4c:ef:22:
         98:91:83:18:d5:85:2a:c1:3e:5c:c9:2c:f4:09:b8:76:48:1b:
         60:f8:0f:2a:6d:db:71:35:58:2c:0d:b5:ef:45:d7:32:11:26:
         7c:5d:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:02 2025 by rpki-client