Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232362e302f32342d3234203d3e20323634313030.roa
File:                     3136382e3132312e3232362e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          aWL1Hn9MdttspuoOxozHBsseK46Qe+GGZ0ss3nbqiV8=
Subject key identifier:   18:7D:6D:20:89:DE:54:81:75:6D:5A:93:B6:54:7B:0D:3D:83:5D:03
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       0C018226D9AAF10CE1FE17810E4B024D9BD0DE7D
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232362e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:07:47 +0000
ROA not before:           Mon 02 Dec 2024 12:02:47 +0000
ROA not after:            Mon 01 Dec 2025 12:07:47 +0000
asID:                     264100
IP address blocks:        168.121.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:01:82:26:d9:aa:f1:0c:e1:fe:17:81:0e:4b:02:4d:9b:d0:de:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:02:47 2024 GMT
            Not After : Dec  1 12:07:47 2025 GMT
        Subject: CN=187D6D2089DE5481756D5A93B6547B0D3D835D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:7f:e8:c9:86:77:cb:6b:59:43:94:08:c6:
                    5c:cf:1d:be:69:70:e2:c0:93:0c:b0:cf:7b:33:c2:
                    33:b0:8f:4b:00:3f:52:64:f9:1c:05:4b:a2:9c:67:
                    2b:37:f4:b2:e8:26:7d:05:2a:dc:d3:ae:16:0d:6d:
                    9f:f9:0e:cb:a6:32:79:25:7e:6c:1f:86:3a:99:88:
                    15:b7:19:5f:c3:88:ee:60:7c:95:11:aa:82:4f:75:
                    d7:46:d4:41:dd:5a:72:76:78:9f:b7:5b:c8:13:2c:
                    52:4a:39:b3:8f:2b:00:9c:2e:51:dc:38:cf:e3:87:
                    f2:4b:9a:a6:5f:c7:d9:dd:44:5c:be:77:7d:9d:d9:
                    65:12:0c:29:d2:38:de:dc:8b:28:df:fe:ba:2b:df:
                    bb:58:59:df:fa:20:00:88:b3:48:2f:67:9c:f1:67:
                    3c:8d:b9:c1:12:12:de:54:33:b2:30:f5:98:0c:2c:
                    4b:77:d5:74:3b:4b:c2:78:37:7e:ed:2c:b6:88:7b:
                    93:d2:97:db:a0:ac:27:92:0c:e2:83:88:cc:bc:35:
                    a6:d2:40:c7:e9:ab:15:84:53:ab:ae:45:e3:f6:30:
                    73:25:cd:43:f4:ce:9f:ba:7a:1e:de:93:c9:7a:be:
                    93:58:e8:fb:e4:65:c8:16:0c:61:69:57:2f:f6:79:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:6D:20:89:DE:54:81:75:6D:5A:93:B6:54:7B:0D:3D:83:5D:03
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232362e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:6f:b8:e9:0d:2d:f9:1b:2c:0e:03:5d:46:d9:34:af:e5:0e:
         15:41:ba:fa:b9:5d:22:a5:33:9a:08:72:cb:b9:d2:21:23:73:
         af:8a:d8:73:ca:1b:df:e0:94:ce:8c:95:0a:31:5d:b0:ec:4e:
         86:8a:42:39:f5:69:8a:2b:b9:95:f5:66:4a:76:ce:14:c2:7b:
         ae:74:3a:47:ee:5c:4b:d3:66:55:9b:c0:cd:5d:69:d6:8c:79:
         cb:3b:f2:4a:18:f4:5b:da:9a:65:71:57:f2:d0:a8:65:b2:ba:
         58:6b:7a:78:b7:44:26:3e:de:cc:69:59:17:06:4a:32:5e:d3:
         2a:8d:cb:e7:37:82:12:7f:59:96:8d:fc:23:a1:e2:9e:3b:93:
         dc:43:5d:51:d9:fe:4e:68:ac:dd:09:9a:f1:64:ab:1e:e0:44:
         a9:cf:77:e6:00:51:87:14:6d:0c:b5:0c:82:c9:30:2e:15:f1:
         8b:7c:6e:0b:ae:ac:8f:5f:1f:74:87:f3:de:0d:10:49:24:6f:
         b2:42:d5:4d:8d:c6:a9:a5:c6:14:79:87:c1:32:5d:39:3f:93:
         4f:ca:6c:6a:b5:39:8f:0f:d3:2b:05:bb:5f:2e:b6:83:3d:46:
         83:0b:88:33:b4:18:71:7f:33:64:01:0b:1f:d7:cb:bb:9b:03:
         c4:42:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:57 2025 by rpki-client