Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa
File:                     3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (raw, json)
Hash identifier:          IV+umiwcbaphbwtIAU5dnHoPxm5SaOa5Tk+QrVwz8l8=
Subject key identifier:   F3:F0:93:21:2E:8C:F5:F5:0A:4F:D3:91:5C:C1:AB:63:3A:85:4C:41
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       6D11A97C04B069E094C866A12616B60C483CB45D
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265938
IP address blocks:        164.163.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:a9:7c:04:b0:69:e0:94:c8:66:a1:26:16:b6:0c:48:3c:b4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=F3F093212E8CF5F50A4FD3915CC1AB633A854C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:78:3b:1a:4c:76:e3:0b:12:71:9b:57:e1:
                    66:29:03:7b:c7:8e:db:d7:93:84:78:e8:f4:fd:8d:
                    ed:96:99:63:1d:ad:b5:a2:fb:02:73:b5:c3:68:4c:
                    65:65:ad:77:df:0f:3a:55:ff:d4:78:bd:f2:1f:3d:
                    2f:bb:84:09:af:43:88:e9:bd:1b:73:84:48:05:52:
                    7b:70:9f:5d:6e:8b:90:b8:cf:af:3c:ee:88:16:9e:
                    35:d1:2b:ba:37:b8:14:6f:e5:e9:0e:fd:a6:0d:27:
                    08:a2:a6:02:17:14:fd:08:9f:b9:e2:33:88:de:6c:
                    59:1d:41:2c:62:3e:a6:bb:c1:dc:f4:09:08:57:0e:
                    d4:f8:f4:b5:63:d9:a8:2d:75:6c:a3:2e:0e:cc:38:
                    bf:85:59:02:64:c7:c1:36:f6:fe:ae:3d:8d:63:e2:
                    be:2e:c6:d9:4d:57:cb:7d:77:2d:84:e7:77:90:f5:
                    39:d2:d7:a0:ca:c6:e0:41:92:c9:e5:d9:02:1f:f4:
                    f0:65:02:a9:01:84:25:df:7f:cd:09:2f:e6:3d:7c:
                    34:aa:e4:ab:79:7d:51:b6:3b:9d:b0:ed:c8:a7:ae:
                    fc:b6:4a:d1:75:a9:80:81:ea:81:18:d3:3d:26:d7:
                    66:66:e4:79:6c:a4:b3:bc:d3:00:57:a4:f5:05:7f:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F0:93:21:2E:8C:F5:F5:0A:4F:D3:91:5C:C1:AB:63:3A:85:4C:41
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:34:5f:0b:bf:6d:13:43:52:60:d7:15:fc:7c:04:25:c7:9b:
         c5:58:77:3c:10:a9:7a:18:17:f1:fa:6e:ea:e2:b7:68:cb:6b:
         f0:3b:aa:b0:c8:37:30:56:df:43:a7:f6:8d:b5:cc:06:5e:bd:
         72:14:23:5e:53:50:09:84:de:b8:bb:41:09:79:7c:e0:cc:cf:
         d6:09:bb:70:8a:bb:73:89:b3:cc:1a:a5:ba:f4:4e:af:26:3e:
         4d:f7:34:e9:1b:06:93:7d:1d:43:40:5a:a7:e3:25:85:a4:f4:
         8c:5c:06:f0:8c:79:d2:5e:f1:63:f2:d4:0f:b1:3f:fe:4e:ce:
         a6:96:5f:3b:0d:16:4f:6e:7c:8f:cc:b1:00:6e:70:4d:c4:8a:
         65:a6:2d:07:e6:02:66:77:a5:4f:99:32:50:db:83:ea:74:ba:
         cb:2d:2e:47:b6:47:32:f9:47:f9:36:9f:89:b0:2d:00:cf:ad:
         0a:b3:97:1a:f6:22:88:91:ff:f4:c2:7d:77:6e:7e:d4:eb:55:
         4f:9b:ad:55:9c:da:50:1b:a2:3d:7b:b8:d4:84:d3:21:f7:ed:
         88:b9:44:c7:52:58:50:b2:6b:e3:59:f3:5f:9b:53:97:1d:c9:
         43:7d:c1:43:bd:95:6b:5d:8b:7b:1a:49:4b:63:4a:25:dc:3a:
         67:49:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:16 2025 by rpki-client