Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
File:                     3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          /MdGQJaIgv13UpfULLOI/zM+3SYk6mt/bU/H4L9bJ7k=
Subject key identifier:   5D:E7:AD:F0:C9:54:94:FC:F0:6B:6B:49:C3:2E:53:44:84:23:91:BA
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       23EC5DFE87AAB347AD79F368063634AE4C4F235E
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:19:01 +0000
ROA not before:           Fri 09 Feb 2024 17:14:01 +0000
ROA not after:            Fri 07 Feb 2025 17:19:01 +0000
asID:                     263614
IP address blocks:        168.232.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:5d:fe:87:aa:b3:47:ad:79:f3:68:06:36:34:ae:4c:4f:23:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:14:01 2024 GMT
            Not After : Feb  7 17:19:01 2025 GMT
        Subject: CN=5DE7ADF0C95494FCF06B6B49C32E5344842391BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:bb:dd:e5:fe:a0:35:70:5c:01:9f:69:99:
                    f2:bc:f0:84:31:f3:72:c2:c7:51:a2:43:51:19:1e:
                    44:10:78:82:ad:f6:84:b5:a2:c2:43:54:0d:37:18:
                    4d:2c:c5:d7:79:f8:b5:a5:4e:c8:99:14:f3:d6:41:
                    4e:b1:2b:ee:fd:e7:f3:4f:65:31:2e:bb:9f:fc:c9:
                    eb:e4:81:2b:f4:31:74:ba:7a:33:08:0c:a0:01:1c:
                    32:fc:b6:3d:f4:32:f8:3f:43:98:ab:bc:2c:10:5f:
                    2e:57:c5:bb:29:8b:89:e4:d2:52:81:26:fe:a9:b3:
                    2a:87:68:12:30:90:9b:c9:62:1b:a5:03:ff:49:e5:
                    12:79:49:30:6f:08:cb:3a:60:09:f9:90:57:8f:ac:
                    48:a4:bc:e6:2a:f4:11:77:fb:88:22:3e:d0:5f:1d:
                    44:cc:a1:1e:2d:36:83:8b:e6:46:f2:a0:57:36:b9:
                    04:42:f7:03:19:e5:6b:0b:30:57:b7:af:84:87:b6:
                    af:2a:81:12:87:7f:9c:c4:6a:e1:f0:84:66:41:9e:
                    df:20:23:3f:86:2f:7a:4c:03:59:85:58:ea:0f:5b:
                    2e:17:8c:66:bd:4c:0c:4b:5c:94:f2:19:73:18:4a:
                    0b:b7:a5:3f:56:05:90:c0:0e:d2:41:4a:ed:1e:70:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:AD:F0:C9:54:94:FC:F0:6B:6B:49:C3:2E:53:44:84:23:91:BA
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:c9:6c:9c:fc:7c:be:49:fc:d7:7c:5b:f7:18:e5:47:01:
         5f:52:26:70:1d:24:4d:7c:cf:24:e3:df:07:d4:71:b8:c0:8a:
         fa:19:8a:41:ab:cf:8d:ac:4f:a4:b4:80:7b:18:8c:7b:d1:fc:
         e2:70:bf:7d:fb:e7:82:76:9c:cc:47:b4:84:20:73:1d:0b:e1:
         48:9b:4a:92:86:49:08:b3:8f:d8:7e:6f:58:de:8f:92:44:b7:
         d8:40:27:cb:81:68:77:96:ca:92:02:73:59:75:e3:2e:8d:6b:
         b5:8f:c6:0f:f9:2f:9b:0f:ef:8e:6c:19:ee:4a:0c:b9:7d:54:
         b6:8c:e6:58:05:fb:f5:f4:c5:10:de:9a:b7:bf:00:0f:4f:ce:
         eb:fb:d0:d5:d9:23:b4:c8:92:87:3a:07:25:86:fc:aa:9a:21:
         81:d9:bd:1c:a0:62:71:85:bd:33:59:58:8a:3d:cb:2a:16:10:
         b4:41:c6:80:b7:77:7a:d0:82:5c:b6:ae:1f:51:fd:eb:a3:9e:
         8a:a8:4a:b8:bc:c3:d4:5a:db:08:85:10:dd:bd:0d:c2:97:2f:
         0b:67:71:cd:ea:5d:ce:90:02:4b:62:fc:b3:9e:cc:7a:4e:ba:
         c0:08:2f:6a:97:18:38:5f:e9:48:fe:77:ed:66:1b:4b:88:e3:
         f6:91:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:15 2025 by rpki-client