Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          BeCzGByZUVWSEJT69iKqyQ+jSIx4s3it5bGyR85YnmY=
Subject key identifier:   90:61:BB:FC:42:08:2D:F1:1E:12:48:BD:33:B7:30:5D:50:11:1A:AC
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       435BD58D7AFBE1DAB5C05219CF3637E87A55066B
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa
Signing time:             Fri 07 Mar 2025 14:13:48 +0000
ROA not before:           Fri 07 Mar 2025 14:08:48 +0000
ROA not after:            Fri 06 Mar 2026 14:13:48 +0000
asID:                     267455
IP address blocks:        164.163.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:d5:8d:7a:fb:e1:da:b5:c0:52:19:cf:36:37:e8:7a:55:06:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Mar  7 14:08:48 2025 GMT
            Not After : Mar  6 14:13:48 2026 GMT
        Subject: CN=9061BBFC42082DF11E1248BD33B7305D50111AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:05:c1:17:81:89:0e:37:2a:a6:c6:4d:22:
                    f1:63:6a:6a:49:23:83:e1:19:3c:c9:4d:68:90:4a:
                    da:9a:5e:79:4c:9a:46:a0:1e:03:4d:f4:ba:b2:67:
                    99:e7:ee:52:67:3f:09:d6:4f:fb:4c:8f:92:bd:3d:
                    55:c4:85:94:6d:dd:6e:ac:18:e2:96:96:90:81:a7:
                    ee:36:d1:d3:9f:63:1f:77:59:ec:c2:b2:ef:e2:a2:
                    c4:db:e5:20:b8:ab:96:7d:92:27:e1:f8:77:eb:15:
                    05:c0:28:8d:cc:b9:9c:4b:d0:d8:e4:c5:b4:b3:3e:
                    f9:c6:50:69:14:e2:46:09:49:1e:6b:65:00:17:62:
                    eb:3b:8c:ac:91:c7:6c:e6:a6:65:6e:4a:2f:e7:3c:
                    26:0c:31:0b:38:e5:39:9e:dc:4d:93:2d:cc:b4:a3:
                    b9:0b:65:ca:1b:00:d4:0a:d5:29:8b:ca:46:e5:c0:
                    c7:0c:ef:a9:eb:dc:e0:e1:cf:df:3f:4a:e4:a2:cc:
                    23:4b:f1:64:b5:97:f9:cc:4c:0f:de:87:69:7f:16:
                    8c:ae:80:0e:fc:22:2e:7f:f4:5c:10:8b:9f:19:0d:
                    0c:2e:59:d5:ec:93:e2:70:0b:6f:d5:fd:bb:42:d6:
                    1c:a4:59:72:c6:9f:8e:74:92:de:06:7d:d9:43:fa:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:61:BB:FC:42:08:2D:F1:1E:12:48:BD:33:B7:30:5D:50:11:1A:AC
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:df:0f:fa:f6:61:d5:09:1d:b9:6a:71:ee:17:35:4a:d3:d9:
         e4:c0:74:1e:bb:9c:86:eb:e0:cd:34:76:79:44:49:70:63:af:
         63:e4:70:f0:4f:6a:15:42:4f:a9:61:f0:84:43:dd:82:45:65:
         7f:00:7a:f9:54:60:47:ba:0d:0e:3e:11:b5:be:7c:da:9f:fd:
         04:e9:61:9a:b5:69:9f:57:91:c3:5a:70:49:ce:aa:50:5d:ad:
         22:1d:d4:dd:0a:e0:67:c5:c3:16:a6:03:a6:7c:64:07:67:c9:
         8e:0d:3a:4d:48:c8:0c:f9:36:9f:c1:bd:c4:0b:c5:68:e0:d7:
         d2:2f:b5:2a:6e:fc:8e:66:ff:ac:86:7d:93:1f:8c:d6:bf:fa:
         06:3f:df:89:27:88:39:4d:d6:f5:40:15:49:70:0a:80:bf:31:
         91:00:dd:8a:d8:c5:dd:e2:dc:f5:21:24:6d:fc:c8:12:d9:c0:
         c5:be:09:06:e8:6c:c5:ec:5c:af:5d:c4:4d:f0:84:8d:66:11:
         58:24:c3:71:76:24:6e:3f:86:de:aa:91:5d:44:8d:09:af:ab:
         23:69:14:14:2a:ae:ed:58:9b:bf:62:17:0a:e1:40:c4:ec:04:
         fc:c6:5a:2e:21:3d:0c:3c:30:c0:86:df:b4:02:02:76:34:5a:
         fb:85:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:50 2025 by rpki-client