Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          2EY5ZBT70KwInTyDwHq1SGzRjdO+feVMo3kkXCns884=
Subject key identifier:   0F:80:64:17:70:38:D6:F5:32:9B:19:8A:BA:75:BF:67:D0:84:AA:83
Certificate issuer:       /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial:       31618B3ECAAFDFB5185429C083E7AF686A0C4B06
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 23 Feb 2024 23:40:59 +0000
ROA not before:           Fri 23 Feb 2024 23:35:59 +0000
ROA not after:            Fri 21 Feb 2025 23:40:59 +0000
asID:                     265485
IP address blocks:        168.197.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:61:8b:3e:ca:af:df:b5:18:54:29:c0:83:e7:af:68:6a:0c:4b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
        Validity
            Not Before: Feb 23 23:35:59 2024 GMT
            Not After : Feb 21 23:40:59 2025 GMT
        Subject: CN=0F8064177038D6F5329B198ABA75BF67D084AA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:2e:f5:26:c5:76:0e:48:bb:6d:23:7a:8c:
                    14:f7:ef:b4:42:eb:d7:61:88:6b:a5:72:e6:1b:69:
                    54:9c:a9:e0:0c:47:7a:57:98:b0:df:fa:72:24:02:
                    23:61:17:6a:ae:e3:b8:62:53:97:f3:f2:f5:b0:54:
                    fd:e6:7a:a1:0d:fb:af:e1:a2:05:d0:c3:a2:8a:ee:
                    c8:0f:bc:94:5f:d9:01:e9:1a:5e:94:26:b9:43:e1:
                    14:64:c6:9f:95:41:36:3b:f8:ec:a7:ea:b8:36:13:
                    83:01:33:13:9a:b6:af:e7:bc:68:bb:2f:f9:81:51:
                    fc:0c:ee:67:43:1a:24:6d:8f:5c:6e:7d:2e:59:73:
                    af:f7:f2:d3:b3:81:76:15:b5:6b:3e:54:bd:21:ca:
                    92:d8:11:3c:a4:16:37:c7:81:a8:fe:ea:e5:6b:64:
                    a8:55:88:5a:38:04:01:66:87:d2:de:92:2a:2a:71:
                    b0:52:0c:88:f1:64:2f:af:55:b3:cb:13:05:10:5f:
                    8d:87:39:03:3c:c6:6b:d0:a4:f1:8a:55:1b:5d:55:
                    34:c1:8f:f3:82:f1:87:eb:21:b2:4d:79:a3:29:c5:
                    ca:c4:77:0c:20:2c:84:39:f6:c6:2c:e1:8d:38:ab:
                    3e:c1:c9:4d:7a:ae:84:4e:13:3c:fc:2b:ae:32:71:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:80:64:17:70:38:D6:F5:32:9B:19:8A:BA:75:BF:67:D0:84:AA:83
            X509v3 Authority Key Identifier:
                keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:c1:75:c3:01:6c:38:79:f7:97:91:0c:9b:96:d9:c1:0c:
         e6:c1:46:4e:36:9b:99:c4:8a:df:99:93:06:d8:74:c2:1b:d1:
         13:d6:91:ab:56:d1:04:d2:fb:82:81:81:d7:ca:55:96:1b:29:
         ce:1f:ef:0c:37:de:f9:f5:0a:40:17:26:e3:8c:aa:93:1c:52:
         d8:37:55:aa:cd:15:25:04:00:9b:7e:d4:85:44:4f:9d:5f:43:
         69:7e:44:f4:7c:c0:7d:0c:c7:01:08:85:58:90:1f:72:5a:00:
         59:ab:ed:c0:55:30:32:a0:c1:06:82:9e:86:9f:c1:b1:5c:31:
         ae:d1:07:2f:44:cf:b6:d2:51:cc:a6:4f:95:fc:49:89:1e:10:
         b4:d0:2a:ff:31:78:41:12:b5:a6:a8:ec:76:31:b5:9d:b1:2b:
         14:3b:09:c7:f9:75:02:c7:a9:07:a6:d1:eb:0c:f1:78:71:c3:
         b6:3c:1c:f2:3e:d0:8f:f1:f3:ea:90:c7:c6:f9:19:c4:80:02:
         67:9d:14:57:11:9e:9a:06:99:a2:8f:46:93:33:57:62:61:b2:
         70:25:44:b8:0c:3d:85:7a:00:06:96:2f:dd:d4:b7:89:f5:52:
         38:5b:2c:b5:e9:14:52:9e:6c:08:b5:2e:63:a7:8f:36:f6:c5:
         33:dc:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:48 2025 by rpki-client