Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa
File:                     3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          Fzozyv3N4uE2itTz4vIRUv8XgIG3S9lR2YEFuewlkNk=
Subject key identifier:   E3:C3:7A:B3:F4:97:2B:72:FF:C2:06:D2:11:33:27:FC:16:D9:79:19
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       79E2E982461EC1603114B602131CDA97B36D2F57
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 06 Mar 2025 11:39:02 +0000
ROA not before:           Thu 06 Mar 2025 11:34:02 +0000
ROA not after:            Thu 05 Mar 2026 11:39:02 +0000
asID:                     262868
IP address blocks:        168.197.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:e9:82:46:1e:c1:60:31:14:b6:02:13:1c:da:97:b3:6d:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Mar  6 11:34:02 2025 GMT
            Not After : Mar  5 11:39:02 2026 GMT
        Subject: CN=E3C37AB3F4972B72FFC206D2113327FC16D97919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:1d:42:f7:59:ca:fb:34:1e:5c:a9:f2:42:
                    0c:b7:9a:5c:9a:5e:d7:1e:6b:cd:48:49:97:da:54:
                    b9:25:75:7b:52:12:5d:cd:ec:63:15:13:b8:f5:91:
                    fb:03:ca:8c:59:ac:f5:63:19:13:b6:be:17:98:24:
                    64:f5:a0:10:93:5b:99:ef:7e:e5:ba:fd:cb:3f:82:
                    9e:ea:d1:2e:40:98:b3:13:18:6b:c4:ce:73:e6:18:
                    ec:c4:8a:b6:1e:b0:77:d8:4e:03:d6:e7:ac:74:2b:
                    29:f1:d4:82:a3:bc:0a:00:d8:1d:59:16:93:6f:48:
                    6e:a1:4b:fb:88:fc:51:14:e1:ee:0c:a4:f2:b0:a3:
                    dc:63:dd:ed:2d:56:c8:aa:72:72:09:d9:44:60:3b:
                    f5:42:c1:92:e9:e8:f6:75:4e:d7:13:a6:04:3e:b9:
                    b9:86:8b:da:26:3d:b3:1a:4a:41:9a:5f:98:e0:d3:
                    0d:1d:e1:4c:bd:2b:80:8c:35:86:90:46:a7:b4:3a:
                    38:e6:09:eb:e9:58:2a:74:48:cc:6f:c1:11:45:6b:
                    87:9e:86:50:d4:95:7f:f8:e6:1a:5b:aa:c5:2e:a1:
                    03:01:d4:7a:ff:fc:1e:40:db:e5:1a:84:80:9a:ce:
                    25:2f:47:98:61:db:e7:b3:ea:7f:2d:51:66:96:b5:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:7A:B3:F4:97:2B:72:FF:C2:06:D2:11:33:27:FC:16:D9:79:19
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:cf:80:23:df:01:ab:5e:f6:ee:51:97:5a:75:2b:09:9f:
         d3:b8:b3:23:8f:e2:1a:da:00:76:41:17:cc:f9:ed:7c:bd:2d:
         22:2d:c0:bf:1e:21:d0:51:9f:93:22:0a:90:71:6a:e7:d1:3c:
         b8:1e:3f:6c:61:75:01:f9:dc:d5:ba:a8:45:e8:28:4e:44:11:
         3f:48:18:fc:fa:c0:7a:87:4d:d7:02:f6:b5:12:90:25:ab:93:
         7c:e1:6c:7b:6a:48:2e:53:31:32:f3:70:52:2c:59:0f:a8:10:
         06:f9:8b:81:89:3a:5c:27:bf:0b:47:d3:74:a9:24:64:55:3a:
         6d:8b:3b:3c:98:5b:ff:13:5b:25:b9:d8:cc:7f:9c:51:e0:55:
         e3:c6:8c:ed:59:d3:f3:b9:12:34:59:9b:62:be:63:bc:90:91:
         2b:03:12:4d:52:aa:4c:10:ca:83:2b:26:bb:87:96:d2:13:84:
         73:7e:97:7d:6b:51:51:cd:05:25:8b:6b:46:1b:9a:97:12:e7:
         0e:8b:c0:37:75:b0:29:87:6a:c2:92:2e:4c:9b:d3:36:a5:01:
         49:37:54:e2:08:76:ff:c5:d7:ae:78:fe:63:ad:cf:7c:2e:57:
         14:82:40:76:77:bf:77:df:b6:27:1f:ee:7b:a1:b5:be:99:53:
         ef:07:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:53:23 2025 by rpki-client