Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          eQyMYMQheFFOY76x5kkSnAWnHWAuRe2acPXyPh7Ipu8=
Subject key identifier:   10:6E:B1:D3:3A:B7:07:FB:28:4F:4D:63:E3:E8:53:0D:94:23:EF:5E
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       77B4484CA24AFBE439E0DA7DF9F2DAC7EFAD2647
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 07 Mar 2025 14:41:01 +0000
ROA not before:           Fri 07 Mar 2025 14:36:01 +0000
ROA not after:            Fri 06 Mar 2026 14:41:01 +0000
asID:                     265485
IP address blocks:        168.197.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b4:48:4c:a2:4a:fb:e4:39:e0:da:7d:f9:f2:da:c7:ef:ad:26:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Mar  7 14:36:01 2025 GMT
            Not After : Mar  6 14:41:01 2026 GMT
        Subject: CN=106EB1D33AB707FB284F4D63E3E8530D9423EF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:ef:65:c9:46:e7:5e:e8:94:cc:62:3f:90:
                    7c:7d:4e:da:91:3e:aa:a2:1b:88:84:ad:b5:1b:b9:
                    72:92:d1:f3:51:f6:41:26:93:fb:4c:97:73:a2:8b:
                    02:60:22:97:68:fd:27:a0:4a:f2:2d:74:8a:26:14:
                    92:db:0e:8f:df:83:1b:ac:d7:fe:32:0c:e1:85:27:
                    ff:a3:8c:3a:d9:18:8b:e2:26:d2:8c:24:e5:2e:a5:
                    20:fa:79:1e:f6:8b:1c:41:3c:75:a5:8d:21:bd:28:
                    e2:1b:e0:3a:ee:fc:8c:81:8b:aa:3a:e4:8e:61:84:
                    0c:05:65:e0:18:b9:29:30:0b:9d:b7:dd:37:f3:5f:
                    6f:0d:cd:b3:c6:00:bd:47:fb:a0:75:f9:c2:ed:2e:
                    fd:78:6c:df:5b:4d:aa:0c:d2:7c:74:bd:82:41:cc:
                    9d:12:24:bd:8c:53:02:ea:92:4a:fc:06:26:e8:39:
                    7c:04:26:2b:98:09:04:44:93:d4:10:5b:9c:5b:e7:
                    53:b5:06:52:9b:99:53:3c:ef:27:2f:3e:45:c9:5e:
                    38:8c:62:51:a3:35:89:ed:42:7f:f9:78:aa:97:93:
                    32:d3:29:a6:bd:7d:f1:ef:83:7f:72:e8:e0:18:68:
                    bf:f5:91:eb:47:50:0f:49:ca:1a:18:4a:e3:f4:4a:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:B1:D3:3A:B7:07:FB:28:4F:4D:63:E3:E8:53:0D:94:23:EF:5E
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:cd:22:ca:cb:41:81:1a:c5:25:20:89:27:b9:66:ff:24:
         5c:6e:4a:06:36:8d:b8:3b:4e:28:c1:00:d7:e0:90:f0:b4:d1:
         bc:c2:c9:08:f0:7b:17:0a:24:8f:26:3e:5d:b8:03:8b:18:5f:
         42:08:10:49:3f:a9:30:fe:16:5c:8d:e9:c3:5e:5f:c5:34:3a:
         8a:4d:81:20:fd:fe:6b:e8:2d:72:fa:23:a3:94:83:cd:3f:ae:
         53:f3:7a:1d:63:dd:74:7b:04:76:cb:6d:4f:b8:b5:16:f3:c5:
         00:72:1e:96:2b:18:6b:28:9f:db:5c:cd:30:da:74:44:f7:b7:
         49:7b:0f:1b:7d:5b:78:a0:4e:07:36:6c:8d:e8:97:10:be:11:
         e3:bf:c5:ef:cb:2b:05:ee:eb:81:6e:2a:ea:54:74:d3:7b:17:
         c2:0e:0e:7b:a1:b2:a4:5b:ba:c1:13:c4:fe:fc:d6:55:2d:fe:
         ad:63:ec:41:fe:f3:bb:03:4b:ec:3e:3c:fa:c3:3c:37:7c:7f:
         4e:a5:33:41:c0:71:13:4c:c4:9f:92:fe:7e:b7:47:76:04:8e:
         7c:6f:27:58:ac:8e:c0:31:72:e3:57:5d:a0:a2:ea:fc:76:0c:
         42:e6:18:41:5e:05:71:60:2a:6b:76:ac:f5:6a:97:42:27:6b:
         be:81:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:25:55 2025 by rpki-client