Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138312e302f32342d3234203d3e20323635323734.roa
File:                     3136382e302e3138312e302f32342d3234203d3e20323635323734.roa (raw, json)
Hash identifier:          VgJ8ih5ywAAukL19/LtnPefC38zD5O2V2aN1UU/5viI=
Subject key identifier:   CA:31:31:06:E5:43:DD:25:52:71:4E:C6:62:19:D5:64:6B:AE:74:EF
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       12BAF8A30F6164B5698B42EE4E989D7392374F21
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138312e302f32342d3234203d3e20323635323734.roa
Signing time:             Tue 20 Sep 2022 15:03:27 +0000
ROA not before:           Tue 20 Sep 2022 14:58:27 +0000
ROA not after:            Tue 19 Sep 2023 15:03:27 +0000
asID:                     265274
IP address blocks:        168.0.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ba:f8:a3:0f:61:64:b5:69:8b:42:ee:4e:98:9d:73:92:37:4f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Sep 20 14:58:27 2022 GMT
            Not After : Sep 19 15:03:27 2023 GMT
        Subject: CN=CA313106E543DD2552714EC66219D5646BAE74EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:35:23:96:ea:2e:dc:c3:c9:12:34:17:b6:
                    df:b6:a8:fd:49:5b:71:4c:0e:18:bd:03:62:86:77:
                    95:94:6b:62:fb:25:12:56:39:bd:f1:71:c0:63:93:
                    8e:3f:ae:93:a3:19:bf:61:6e:93:ed:f3:69:84:29:
                    38:ee:e2:d1:3e:8b:5c:1f:f6:ac:f7:01:fb:66:34:
                    83:16:3c:96:86:b7:db:42:62:03:01:4d:b5:8f:5a:
                    32:24:9c:31:43:77:a8:75:c8:0d:90:e5:c5:9a:0e:
                    75:fa:87:35:2a:50:72:5d:8b:62:51:15:43:ae:0b:
                    6d:36:eb:30:ac:08:c1:e9:53:20:d9:9c:a0:92:e4:
                    e6:92:93:4e:a7:1a:69:9b:41:7b:55:09:5e:35:d4:
                    dc:12:66:42:5f:3b:f3:d6:57:c0:1d:3f:91:50:44:
                    ae:00:c2:bc:e1:8a:89:50:47:17:46:3c:4f:4d:39:
                    bd:bb:97:1a:33:ce:7d:cc:6a:7f:c2:12:19:b2:02:
                    bb:37:68:dc:22:dc:98:f0:88:f5:ec:63:8f:ce:16:
                    b1:3a:3b:ee:f9:01:86:c9:47:e1:2a:78:6c:ef:a4:
                    03:1b:94:e7:6c:c2:1c:df:bc:c8:c5:b7:18:fc:e9:
                    34:a4:fc:4f:a0:b2:6a:ed:87:d8:45:9c:8f:d5:5e:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:31:31:06:E5:43:DD:25:52:71:4E:C6:62:19:D5:64:6B:AE:74:EF
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138312e302f32342d3234203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:77:21:c0:9a:5d:2c:c7:3c:4a:39:67:03:c5:59:c8:fb:
         6c:b0:d0:04:3f:c4:85:07:5a:aa:f1:0b:a9:3d:b0:dd:6f:a4:
         ff:52:44:6e:52:1d:85:ea:3b:ad:7d:2f:0d:b6:f9:08:f5:2a:
         33:76:6b:bf:74:08:1f:3f:89:2f:b5:c4:bd:7a:57:64:19:17:
         b8:1c:bd:3b:78:55:35:03:f7:5b:17:53:66:3b:18:34:30:8b:
         de:3d:26:39:f0:9e:69:d6:b3:bc:e3:8e:d7:2e:04:0d:8c:b3:
         c5:09:4b:26:2d:7f:6f:c9:19:67:60:99:21:97:4b:ce:d0:97:
         16:b3:79:65:ae:06:66:cb:cb:ea:3d:3c:ac:e5:e7:38:62:52:
         ac:59:5c:08:2b:85:6e:67:b3:62:1b:55:a2:8f:ee:eb:42:02:
         a9:c6:af:5e:70:42:dc:db:b1:19:3c:97:81:6b:26:95:af:f0:
         d9:ac:79:e5:75:d4:ab:8f:4d:1c:33:61:44:ba:3a:52:00:b9:
         e5:c0:3a:b2:d7:39:97:0e:fd:10:a2:a0:c5:81:49:4e:b7:cc:
         e6:e6:a7:a9:84:58:f6:2a:ed:46:ff:9d:74:85:4b:f7:e2:1b:
         48:91:15:2b:e5:e7:89:d0:87:51:75:94:60:44:af:f4:3f:23:
         aa:4d:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:35 2025 by rpki-client