Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138322e302f32342d3234203d3e20323635323734.roa
File:                     3136382e302e3138322e302f32342d3234203d3e20323635323734.roa (raw, json)
Hash identifier:          eRn5Sk5C7WJsL25xqTjA6WGt0kW2xqTWaJGc3HR6IG0=
Subject key identifier:   B2:9D:32:4D:80:84:69:91:15:C1:35:CA:B8:C3:12:D0:A5:3A:D5:B2
Certificate issuer:       /CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
Certificate serial:       0B7C9BB2B81D3669D31DDDF4E9D2092714C314D8
Authority key identifier: 36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138322e302f32342d3234203d3e20323635323734.roa
Signing time:             Tue 20 Sep 2022 15:03:58 +0000
ROA not before:           Tue 20 Sep 2022 14:58:58 +0000
ROA not after:            Tue 19 Sep 2023 15:03:58 +0000
asID:                     265274
IP address blocks:        168.0.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:9b:b2:b8:1d:36:69:d3:1d:dd:f4:e9:d2:09:27:14:c3:14:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4
        Validity
            Not Before: Sep 20 14:58:58 2022 GMT
            Not After : Sep 19 15:03:58 2023 GMT
        Subject: CN=B29D324D8084699115C135CAB8C312D0A53AD5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:97:fc:fc:a0:55:25:72:93:17:25:51:4b:
                    5f:6e:b1:82:0f:14:a3:c9:a5:0c:11:06:54:35:51:
                    b9:a2:80:7c:f8:3b:82:68:9d:4b:0a:98:35:7d:b7:
                    3f:9e:9a:85:75:0d:e9:e4:fe:fe:8b:32:22:d3:76:
                    8f:0d:f2:f0:05:1f:07:20:ae:31:30:30:5f:46:b9:
                    e5:20:9e:14:c6:26:60:78:ab:00:39:ea:57:91:2b:
                    1e:c8:0a:c2:ba:e9:56:70:5b:52:2f:21:78:5a:c4:
                    9d:19:3c:68:ff:13:15:ff:0c:e3:ee:f7:2b:c1:6a:
                    ba:4e:8e:2c:8b:34:03:ec:71:9a:92:38:07:e0:bb:
                    b3:ad:49:6c:6c:a5:d0:06:04:dd:a1:50:65:cf:a7:
                    b4:ed:fe:2c:b7:aa:4a:92:b0:32:09:be:3e:ff:f9:
                    31:ad:b6:19:0b:9c:ab:83:8c:f6:c8:35:d6:b1:05:
                    99:7f:26:51:90:5d:be:05:18:38:44:85:81:bf:7b:
                    ae:c2:12:ff:2c:98:bd:5c:0d:eb:d9:b3:5a:70:56:
                    13:97:72:1b:af:4e:62:c1:71:a0:d9:ee:97:d1:7a:
                    75:22:20:38:ac:d0:1b:d7:26:76:87:e1:68:2e:e6:
                    97:aa:d1:97:3c:89:5a:47:08:7c:1a:58:b4:86:d7:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9D:32:4D:80:84:69:91:15:C1:35:CA:B8:C3:12:D0:A5:3A:D5:B2
            X509v3 Authority Key Identifier:
                keyid:36:AC:8D:9C:76:AE:C5:FD:40:82:0A:C6:BE:7F:91:D1:9E:99:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36AC8D9C76AEC5FD40820AC6BE7F91D19E99CBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/0/3136382e302e3138322e302f32342d3234203d3e20323635323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:fa:00:3b:5f:d6:3e:a7:2c:0d:5e:0c:3d:50:be:28:65:
         bf:c6:42:22:1c:b8:a9:20:bb:84:a1:3a:00:92:b8:01:8b:2d:
         06:92:be:cb:ba:47:58:3f:22:be:56:4c:f4:f0:15:52:d2:1d:
         a2:34:0d:de:53:c2:f6:31:17:5d:bd:84:22:f8:08:f7:de:d8:
         ee:48:3c:07:98:5d:3c:8d:66:fe:0c:df:de:7e:57:63:16:ed:
         40:14:b5:a4:34:64:37:0a:d6:d7:51:22:04:fc:a9:d0:37:75:
         1f:3d:69:77:e0:8d:75:b1:b4:9b:b8:ca:1a:1e:5d:63:60:ac:
         26:d3:0c:dc:3d:79:3a:1e:21:29:00:27:19:59:64:58:3e:22:
         49:df:77:fd:97:87:41:2c:60:b5:7a:e0:86:4f:08:d6:29:e1:
         ea:29:80:8e:1c:be:39:ed:8d:af:9b:1e:e2:27:a0:cb:eb:32:
         dd:64:f5:3f:c2:2b:d5:d5:3d:bc:1b:5d:84:30:cf:4d:90:f2:
         cd:3b:d6:70:ca:4a:ce:32:bf:e7:6a:82:90:53:d7:f8:1b:68:
         4d:8c:e5:2f:3b:ee:24:95:d3:a1:2e:e3:22:6c:57:04:e8:5b:
         90:b6:6f:ab:11:60:4b:95:91:0c:ef:72:d7:ca:2d:1d:3a:9a:
         9a:d5:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:03 2025 by rpki-client