Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32322d3232203d3e20323634383634.roa
File:                     3136382e3230352e3136382e302f32322d3232203d3e20323634383634.roa (raw, json)
Hash identifier:          KWesBUww9DmPPas8AedIbatxGKcKDezmV8LJNBL44KY=
Subject key identifier:   91:83:E7:EA:88:48:85:35:B3:6E:0E:34:BB:B7:1B:78:83:52:DD:4D
Certificate issuer:       /CN=196672F2128DCF75573CC0EC85F8A0F5B9D7784E
Certificate serial:       7B2831C7B9E0A457B5560551DABA032F5F49C59E
Authority key identifier: 19:66:72:F2:12:8D:CF:75:57:3C:C0:EC:85:F8:A0:F5:B9:D7:78:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/196672F2128DCF75573CC0EC85F8A0F5B9D7784E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32322d3232203d3e20323634383634.roa
Signing time:             Fri 02 Sep 2022 13:11:20 +0000
ROA not before:           Fri 02 Sep 2022 13:06:20 +0000
ROA not after:            Fri 01 Sep 2023 13:11:20 +0000
asID:                     264864
IP address blocks:        168.205.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:28:31:c7:b9:e0:a4:57:b5:56:05:51:da:ba:03:2f:5f:49:c5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196672F2128DCF75573CC0EC85F8A0F5B9D7784E
        Validity
            Not Before: Sep  2 13:06:20 2022 GMT
            Not After : Sep  1 13:11:20 2023 GMT
        Subject: CN=9183E7EA88488535B36E0E34BBB71B788352DD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:35:b4:70:24:bd:88:91:94:ff:55:50:4e:
                    1f:74:6d:fd:a2:cf:d6:9f:c7:36:86:c1:a4:bd:83:
                    37:ca:04:4b:bf:98:af:82:87:49:df:39:83:d1:d4:
                    5c:57:9b:58:d9:ec:59:21:47:a6:83:e2:47:dc:96:
                    1e:cf:4a:ee:a4:95:ae:43:21:8a:06:c6:79:47:7b:
                    76:bb:09:0b:91:a1:6d:cc:78:9e:92:b9:fa:1f:62:
                    8e:6e:6e:3a:91:36:85:36:9d:7f:02:bd:1a:6d:e4:
                    2a:64:66:81:75:7b:52:b1:36:49:92:55:d0:89:87:
                    f5:0f:66:79:23:22:06:4f:6f:17:fa:2c:fb:6b:4a:
                    4a:cf:ea:92:cb:cc:3c:c1:8b:11:46:17:7a:f9:f9:
                    af:e6:72:b9:b5:78:b2:96:d8:19:d3:0b:be:78:02:
                    b2:3e:c3:05:95:61:0e:31:ae:75:0d:34:9b:64:d2:
                    bf:f6:ec:c2:90:93:a5:dd:05:61:ef:4f:7e:51:93:
                    5f:24:57:35:55:de:9d:0a:d2:83:79:80:a5:52:c7:
                    63:96:23:1c:29:82:5f:67:18:1d:05:81:c0:e5:63:
                    b5:9c:a2:a8:60:c1:de:11:40:5f:ec:86:ef:ef:c0:
                    1f:4a:3b:c2:b3:eb:90:f9:06:ce:4a:d4:93:f9:7d:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:E7:EA:88:48:85:35:B3:6E:0E:34:BB:B7:1B:78:83:52:DD:4D
            X509v3 Authority Key Identifier:
                keyid:19:66:72:F2:12:8D:CF:75:57:3C:C0:EC:85:F8:A0:F5:B9:D7:78:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/196672F2128DCF75573CC0EC85F8A0F5B9D7784E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/196672F2128DCF75573CC0EC85F8A0F5B9D7784E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3136382e3230352e3136382e302f32322d3232203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:75:65:ba:c0:4b:ff:4b:56:26:e3:76:a8:5b:a4:bc:59:
         fd:f0:4c:31:f1:39:27:f8:e6:33:a7:9a:d1:ed:02:e4:89:e6:
         1b:20:dc:35:76:91:ef:2f:a5:7f:93:c2:93:bd:fc:35:16:51:
         dc:bd:fa:d5:03:f2:93:b4:21:ae:40:20:17:23:a1:ed:a8:71:
         5c:f0:c6:5e:d0:2e:80:20:6a:c3:e0:e6:d4:d1:f1:ae:22:0c:
         5b:b9:25:97:eb:45:5e:96:c4:e0:24:b6:ae:9e:52:d0:ad:46:
         1f:76:73:28:19:b3:a0:ee:26:bb:c1:3f:52:1c:92:e8:09:4b:
         98:dc:51:bb:0a:ff:62:6e:69:20:b5:fe:53:b6:59:84:6e:2c:
         19:ea:af:07:04:aa:3a:44:35:f0:ed:fb:94:c0:74:56:be:64:
         c9:d4:d5:b0:d4:d5:d8:ab:39:e2:13:00:ea:a0:c8:43:25:6d:
         7a:14:4b:7c:99:c7:ad:6a:1a:e8:5b:c1:55:59:36:2a:60:16:
         fd:a3:60:92:3c:49:ac:5a:fe:2e:7f:bd:08:1e:25:08:6e:c0:
         63:3e:ef:f2:a0:47:51:d3:c9:ab:e8:f2:9e:09:33:e6:ef:10:
         e6:1d:4e:82:da:f4:21:1f:bf:f4:87:01:61:26:89:2a:37:60:
         a1:43:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:55 2025 by rpki-client