Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
File:                     3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa (raw, json)
Hash identifier:          zBphmxvnFN8AgJhgmfdnC6xzb7693ASW6JWh2KQb0b8=
Subject key identifier:   1A:F5:9C:48:B8:43:C1:A7:8D:7F:B7:7F:0D:6B:93:81:30:AE:12:7D
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       7568B295FC2503002F6EB2BDEF77BA6F297F716E
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa
Signing time:             Thu 06 Mar 2025 01:49:51 +0000
ROA not before:           Thu 06 Mar 2025 01:44:51 +0000
ROA not after:            Thu 05 Mar 2026 01:49:51 +0000
asID:                     265462
IP address blocks:        168.196.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:b2:95:fc:25:03:00:2f:6e:b2:bd:ef:77:ba:6f:29:7f:71:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Mar  6 01:44:51 2025 GMT
            Not After : Mar  5 01:49:51 2026 GMT
        Subject: CN=1AF59C48B843C1A78D7FB77F0D6B938130AE127D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:05:5f:bd:06:ca:ac:b6:d0:c6:2a:ec:3d:
                    e1:6f:6b:ef:9e:0c:a8:1d:b2:73:a4:5c:56:4b:d1:
                    eb:69:ba:9f:a3:73:08:b7:28:6d:d9:ea:e7:dc:61:
                    e2:e2:7a:43:aa:ff:a3:55:42:80:d3:00:14:96:94:
                    f5:cf:14:9c:cc:7f:bb:bb:ff:0a:00:42:52:53:70:
                    ae:d0:81:e1:df:36:76:14:2c:9e:4a:cc:9d:0a:68:
                    c1:7a:f9:3a:e9:6a:3e:2b:01:86:94:aa:d6:3b:35:
                    99:81:74:c8:0c:e8:0a:f0:be:5c:4e:cb:43:42:d0:
                    33:5a:e5:bb:ec:8f:4e:bd:57:11:7e:68:6c:2a:c4:
                    8f:97:7d:08:45:48:1f:51:c6:de:d5:e1:b6:dc:99:
                    ee:fd:bb:25:98:b0:3e:f8:58:25:c7:0a:88:43:62:
                    ad:ba:b2:21:ee:8c:38:ea:2e:bb:bd:9f:62:3b:8d:
                    d8:fc:77:61:a4:5c:c6:3e:88:eb:66:96:2c:a9:a0:
                    8a:80:9f:6f:dc:b0:a5:7a:08:28:4d:aa:d5:af:2b:
                    18:d0:5d:1b:4e:68:20:dc:90:cb:59:3a:84:76:b2:
                    ef:4d:ed:ab:4d:af:c5:1b:99:4b:cd:13:aa:28:67:
                    4a:83:93:c0:9f:37:b9:1e:fc:ee:ac:e9:cf:74:d9:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:9C:48:B8:43:C1:A7:8D:7F:B7:7F:0D:6B:93:81:30:AE:12:7D
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:85:3b:b5:b3:33:7a:7c:cc:fd:3e:0e:ad:1e:37:48:8f:cc:
         8d:6e:64:51:27:a4:c7:b3:38:df:19:82:43:f2:84:dd:85:01:
         74:a2:f9:d3:97:cc:9b:7e:ff:83:5b:3e:82:1e:79:dc:1e:87:
         14:2d:40:2a:d1:d4:d5:3c:31:9d:99:2e:fd:6c:40:00:07:66:
         da:84:2b:3b:23:f9:13:bb:b9:e6:c5:84:24:f3:0d:9e:9c:fe:
         77:54:2e:c1:fe:a0:8e:e3:19:ae:16:f3:f2:e5:96:aa:34:da:
         b5:a9:8a:94:cb:f9:be:aa:1f:ac:d2:05:48:0c:85:71:54:c1:
         1e:88:98:de:95:2f:10:67:2f:88:38:fe:2c:ed:fc:7a:66:05:
         de:6c:88:dc:da:61:48:e1:19:f5:9e:63:50:77:22:17:c2:33:
         e8:50:d5:44:6b:fe:99:14:9f:a0:ca:76:f4:7a:13:a3:44:4f:
         a0:0c:8e:2a:5d:1a:4d:a3:5e:72:50:49:49:ed:3c:29:15:49:
         b7:61:67:d3:a7:31:ae:48:5b:ab:57:bf:2a:09:e0:37:4c:24:
         17:c3:48:21:29:5a:13:16:32:73:84:d1:dd:f9:e4:88:2c:62:
         90:58:20:cd:92:96:be:63:c5:3a:62:4c:e5:8c:78:33:a7:0c:
         2d:ea:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:25 2025 by rpki-client