Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa
File:                     3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa (raw, json)
Hash identifier:          gd86BIg8LA7ytehtJcD7bjybT9bTwuwCykfGof+denY=
Subject key identifier:   CF:69:AF:25:F1:20:55:64:90:61:77:9E:52:E4:8B:5F:D8:D2:6C:8A
Certificate issuer:       /CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Certificate serial:       638BFAC355995503E8B6D9FF4D479AD9FA05860A
Authority key identifier: CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa
Signing time:             Fri 13 Oct 2023 04:05:14 +0000
ROA not before:           Fri 13 Oct 2023 04:00:14 +0000
ROA not after:            Fri 11 Oct 2024 04:05:14 +0000
asID:                     264929
IP address blocks:        168.228.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8b:fa:c3:55:99:55:03:e8:b6:d9:ff:4d:47:9a:d9:fa:05:86:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
        Validity
            Not Before: Oct 13 04:00:14 2023 GMT
            Not After : Oct 11 04:05:14 2024 GMT
        Subject: CN=CF69AF25F12055649061779E52E48B5FD8D26C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:a2:48:dd:b0:dd:10:98:40:58:20:e8:de:
                    71:7c:92:6d:86:e9:ba:44:8d:39:f2:2f:0a:b8:1c:
                    38:f7:0b:ef:39:da:ff:93:fa:e2:83:35:d2:b2:56:
                    01:83:9a:02:9c:27:04:47:1a:7a:e7:92:85:30:e0:
                    8a:69:6c:28:5e:a5:53:8e:2a:92:b6:e2:71:19:68:
                    8e:39:1e:4f:1b:28:cd:da:84:b8:20:2b:a0:eb:9e:
                    87:89:91:fe:df:c5:da:83:a2:f6:bb:9b:98:c5:84:
                    7a:08:80:72:9f:c1:b5:6b:d1:39:72:ee:48:6b:33:
                    55:d0:00:f0:74:89:15:3c:dc:41:60:6b:bb:0b:39:
                    72:d9:9f:81:ce:d4:67:d9:2c:c7:cc:4e:4c:d9:a1:
                    2e:e0:ac:8e:e9:a0:03:47:f1:81:d1:4f:3f:56:af:
                    63:13:aa:6e:c0:fa:58:32:f1:c2:14:89:c5:41:5a:
                    88:5c:dc:e0:17:3d:68:d0:aa:47:a5:6f:05:a9:57:
                    88:1d:ed:0e:e9:a7:21:52:ac:c5:ac:7b:26:2a:13:
                    a5:5c:5d:28:19:29:4e:2a:1d:f2:17:69:82:76:ed:
                    78:79:55:8b:da:2d:e0:5a:08:c3:fd:bf:95:ed:63:
                    73:50:fb:d9:28:24:3d:11:e7:c3:c5:c6:11:7b:1c:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:AF:25:F1:20:55:64:90:61:77:9E:52:E4:8B:5F:D8:D2:6C:8A
            X509v3 Authority Key Identifier:
                keyid:CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/3136382e3232382e3231382e302f32332d3233203d3e20323634393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:61:9d:2b:16:1f:77:1d:79:97:52:33:40:10:d4:9c:64:
         0e:65:22:d1:ab:9d:50:49:71:bc:a8:e8:91:a5:f9:b5:09:42:
         9e:f4:aa:c4:1d:6a:65:52:a5:1c:15:5e:82:c0:07:b0:6d:a1:
         9a:1e:a4:a3:f5:dd:1e:f4:4f:dd:e2:fa:73:68:4a:fb:f8:fb:
         c4:88:b2:79:f4:76:c7:e3:7c:ef:2d:28:03:7e:91:77:bc:a1:
         5d:45:a4:b4:d6:aa:64:6b:36:20:60:a3:19:1e:29:41:f0:31:
         d4:ec:aa:58:fb:fb:a9:12:db:8b:ad:5d:cf:fa:a0:91:17:5f:
         ab:a3:17:bb:b7:c9:c6:62:1a:b2:17:8e:43:27:37:57:0c:63:
         4d:3f:45:01:6f:49:f8:9e:2b:cd:5b:4f:10:87:f6:1c:b2:a3:
         c5:4b:c6:04:7c:81:ae:27:a7:9e:69:81:48:9c:84:40:77:23:
         30:f4:d6:93:6a:9d:80:a0:41:ff:9a:be:99:8b:f7:17:5b:d5:
         c7:de:ca:14:93:bb:e4:75:89:cd:25:63:9f:8b:43:96:f2:e4:
         b3:20:4a:09:25:ab:c2:d2:49:46:4f:b4:d6:17:c2:5d:16:10:
         96:f2:14:57:de:af:b9:8e:81:4a:42:a2:85:a1:61:ef:d4:ab:
         8c:7a:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:57 2025 by rpki-client