Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa
File:                     3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          +vxo1/5bJt4q4Nwr0uCxpDwnYUR9gTi36mJJQ3IiJqg=
Subject key identifier:   41:5E:33:12:30:74:E4:67:C2:92:01:72:18:97:A7:F1:7B:0C:1C:FD
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       30F56693AAE49E32857DC87FB4CACD9E3B853DE1
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 06 Mar 2025 11:39:04 +0000
ROA not before:           Thu 06 Mar 2025 11:34:04 +0000
ROA not after:            Thu 05 Mar 2026 11:39:04 +0000
asID:                     262868
IP address blocks:        164.163.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f5:66:93:aa:e4:9e:32:85:7d:c8:7f:b4:ca:cd:9e:3b:85:3d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Mar  6 11:34:04 2025 GMT
            Not After : Mar  5 11:39:04 2026 GMT
        Subject: CN=415E33123074E467C29201721897A7F17B0C1CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:4d:f8:94:1e:4d:2f:5b:4b:80:a6:45:d6:
                    4c:9f:52:38:42:9c:85:24:dc:ee:57:68:09:8e:8d:
                    00:e9:9a:bb:d6:08:14:a3:75:3a:b7:75:c0:82:98:
                    63:64:b4:31:82:dc:55:25:0b:93:c8:1e:46:3d:82:
                    d7:ea:63:08:a3:49:92:34:d7:21:6a:c1:a2:ec:da:
                    f9:90:97:21:d6:c0:17:d8:9b:eb:93:8b:5b:aa:4a:
                    79:79:cd:38:16:c8:a0:29:61:80:50:4f:b9:ea:ca:
                    ff:69:2a:8e:fb:4a:9e:e2:9e:2f:46:22:e4:38:6d:
                    a1:86:15:8b:f5:d2:8b:05:ed:73:1d:cf:2b:38:67:
                    f6:c5:de:55:98:ff:54:c4:eb:68:f9:0b:85:32:a7:
                    c6:a4:01:c3:83:de:62:d3:1c:69:a2:30:ca:e0:ca:
                    ad:d0:84:29:b8:c1:84:52:b2:bd:69:e3:7b:fb:f5:
                    17:1e:b1:50:2e:32:04:f8:a5:c1:bf:bb:ec:a3:d8:
                    94:8e:98:90:60:01:02:07:1d:96:a3:f4:54:18:93:
                    ca:3c:18:1f:5b:71:2b:e6:45:28:fe:37:16:cc:2d:
                    00:06:06:92:2e:a5:5b:63:ec:82:cf:c9:5d:5d:ae:
                    71:42:d3:60:b0:e4:bc:fd:07:67:18:91:e9:cd:de:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:33:12:30:74:E4:67:C2:92:01:72:18:97:A7:F1:7B:0C:1C:FD
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:33:20:ee:a7:1d:12:34:cd:4f:38:87:53:78:17:f3:11:
         52:dd:30:b7:11:c0:ab:e4:8c:5b:ce:cb:26:db:d4:95:24:e0:
         fe:98:b0:de:47:4a:37:7f:fc:33:dd:11:50:2c:59:b1:37:82:
         ff:7a:c2:bc:e6:63:cf:63:fb:6f:3c:6a:59:dd:39:f2:49:c0:
         f2:d5:35:08:5f:90:93:87:a0:6d:b0:79:67:c3:44:49:6f:d7:
         9a:59:0c:ca:ee:f8:fb:3a:c5:be:a6:82:91:13:5a:ab:c1:4c:
         67:ba:58:dd:d8:d0:ef:5a:8d:a2:63:7e:b2:8d:68:75:ac:02:
         6d:e3:af:f2:d0:be:5f:24:5d:7e:2c:b2:9e:4f:f0:5d:67:32:
         65:e5:2d:c9:94:27:9e:b4:04:e5:51:63:ac:11:ab:31:0d:9b:
         fd:e4:25:f2:81:2c:50:9b:31:51:c6:e1:c9:fa:54:b5:59:78:
         f9:7b:af:71:98:db:b0:c5:99:6b:c5:e3:1e:cb:1a:90:af:5a:
         0f:44:9a:03:2f:c8:48:26:17:50:1a:c0:4f:18:2c:9c:bf:c6:
         65:bf:a5:f6:17:5c:7a:2c:10:c0:70:60:37:60:4a:43:2e:ee:
         4e:c7:5c:85:44:09:eb:cf:ea:27:73:6a:fd:53:34:2a:f1:93:
         09:fb:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:43:51 2025 by rpki-client