Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3232203d3e20323635343636.roa
File:                     3136382e3139362e3137362e302f32322d3232203d3e20323635343636.roa (raw, json)
Hash identifier:          NlU37LB22LBjGMvtbSB5c11JUcxrVhdynbyu0Zq9YdY=
Subject key identifier:   EF:4D:32:E2:25:2A:33:C4:43:95:35:27:E2:51:E5:74:0B:A0:3C:2D
Certificate issuer:       /CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
Certificate serial:       3C388F97777DE52D875FB4A5BD5EC0173A92934B
Authority key identifier: 21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3232203d3e20323635343636.roa
Signing time:             Tue 21 Feb 2023 23:06:39 +0000
ROA not before:           Tue 21 Feb 2023 23:01:39 +0000
ROA not after:            Tue 20 Feb 2024 23:06:39 +0000
asID:                     265466
IP address blocks:        168.196.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:38:8f:97:77:7d:e5:2d:87:5f:b4:a5:bd:5e:c0:17:3a:92:93:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
        Validity
            Not Before: Feb 21 23:01:39 2023 GMT
            Not After : Feb 20 23:06:39 2024 GMT
        Subject: CN=EF4D32E2252A33C443953527E251E5740BA03C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:14:bc:30:90:03:c0:28:4b:57:57:ae:e9:
                    fc:de:07:e6:7b:27:4b:d3:fb:b0:ee:d0:98:98:ca:
                    f0:57:14:ed:c2:b2:fa:78:8c:e6:0e:46:12:ab:b7:
                    82:7e:3e:48:21:d7:44:28:6a:f0:20:8f:2b:59:15:
                    c8:f7:47:c8:4b:79:61:1f:b5:ac:16:69:38:ff:d4:
                    d3:63:d0:d9:b6:2e:b6:20:24:ce:6d:58:ba:6a:84:
                    c9:a5:a8:ab:58:2b:cf:57:51:7c:79:d0:52:a9:fb:
                    9d:c6:4f:e3:86:7f:b2:fb:2f:a2:30:a1:79:bb:98:
                    5c:6c:9e:05:08:be:10:93:76:94:dc:2c:dd:29:d0:
                    3e:01:5d:19:4a:7b:d2:59:eb:2f:7c:27:d8:23:7b:
                    ee:7d:5f:e5:73:31:d6:47:e8:e8:2c:be:11:dc:69:
                    a1:e6:74:de:60:5f:aa:19:f8:45:5e:6b:32:85:a0:
                    21:6d:fc:80:1d:9c:2a:fc:2f:89:fa:f4:ac:26:2d:
                    6c:09:2d:48:c8:66:fd:47:3b:cc:c2:ec:6a:d7:b4:
                    1d:a8:ec:27:11:f5:c6:b9:55:5b:ac:ee:ef:12:e4:
                    44:92:2e:fa:64:bc:2d:71:92:24:e9:d0:a2:26:4f:
                    b2:f8:b1:fc:d4:b1:f9:0f:89:b0:88:72:b0:ff:c7:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:32:E2:25:2A:33:C4:43:95:35:27:E2:51:E5:74:0B:A0:3C:2D
            X509v3 Authority Key Identifier:
                keyid:21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3232203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:59:f9:f4:00:46:fd:8b:fd:d0:1d:79:e5:b1:08:92:43:
         2a:0e:de:ca:85:40:bd:77:26:af:cf:19:c7:a2:93:d6:79:cb:
         2f:ee:4f:b9:ba:14:55:15:42:da:78:5b:2e:4d:cf:72:cd:1e:
         22:16:69:9d:62:c1:cf:a5:62:54:e8:a8:e5:e2:16:ac:1a:4a:
         01:ea:ce:a4:36:90:39:ce:4e:41:d2:45:17:35:4e:9d:23:e8:
         8b:4d:1a:62:ce:76:f5:a0:d1:a9:f3:9f:7d:33:67:ae:10:4e:
         e0:16:69:e8:fa:f8:48:35:b5:fe:ab:22:aa:78:d5:46:86:10:
         bb:f0:c2:52:6d:53:76:5a:70:87:21:62:ad:9d:bf:53:4f:e7:
         1d:19:4c:cb:d3:af:a5:4c:00:f4:27:82:38:00:70:15:28:36:
         8e:35:7c:8e:e6:3e:90:14:a8:be:12:e7:7e:14:4b:26:78:c8:
         90:2c:76:26:a7:ab:42:cf:f3:f2:75:19:be:64:ae:af:2c:71:
         e1:85:8a:0f:df:21:3d:13:88:2c:48:22:0e:b5:70:02:97:98:
         b4:d3:be:3c:a1:0e:52:b1:6f:84:79:e4:ad:df:ce:aa:37:88:
         2d:18:fb:fd:38:ba:35:46:79:47:6f:a9:4f:59:f5:ec:ad:ab:
         65:8b:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:32:02 2025 by rpki-client