Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e203533313831.roa
File:                     3136382e3232372e3138342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          juj0XCjPKToPBQvXZEi60sQSjdNMpQpZMPR3KYsCe6g=
Subject key identifier:   FE:FC:76:0D:B7:19:7F:A2:3D:FA:87:DB:6E:CC:95:2A:6C:90:BF:7F
Certificate issuer:       /CN=99A6D34B51CE125B1DA898F0806E704C4F542518
Certificate serial:       27D24BB93BC8DC2618F37106AF1EB30DD873D33A
Authority key identifier: 99:A6:D3:4B:51:CE:12:5B:1D:A8:98:F0:80:6E:70:4C:4F:54:25:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99A6D34B51CE125B1DA898F0806E704C4F542518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e203533313831.roa
Signing time:             Tue 21 Mar 2023 11:32:12 +0000
ROA not before:           Tue 21 Mar 2023 11:27:12 +0000
ROA not after:            Tue 19 Mar 2024 11:32:12 +0000
asID:                     53181
IP address blocks:        168.227.184.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d2:4b:b9:3b:c8:dc:26:18:f3:71:06:af:1e:b3:0d:d8:73:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A6D34B51CE125B1DA898F0806E704C4F542518
        Validity
            Not Before: Mar 21 11:27:12 2023 GMT
            Not After : Mar 19 11:32:12 2024 GMT
        Subject: CN=FEFC760DB7197FA23DFA87DB6ECC952A6C90BF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:40:be:1e:0c:07:90:08:c6:e7:f2:7c:11:
                    11:98:76:3c:ed:f5:be:6a:d4:dd:d2:a7:ea:c1:c9:
                    24:06:35:98:89:0e:5c:60:d9:87:d9:cf:b2:f7:34:
                    88:dd:90:38:e2:81:3b:d1:2d:d9:4e:2c:93:5c:ee:
                    45:21:18:e2:a9:cb:b6:e0:be:9f:9b:6c:a5:7e:8c:
                    44:8d:c8:50:c0:e7:a5:5d:64:62:3e:9e:11:79:78:
                    e1:dc:77:a9:32:bf:88:2a:df:25:3f:83:c9:20:71:
                    e3:78:f5:b6:9d:c2:05:cd:b6:92:6c:ed:54:27:ca:
                    1b:32:0b:68:b2:e1:da:d8:21:c6:17:61:13:90:9c:
                    d9:aa:63:27:f7:0f:fa:86:71:c2:0d:b7:79:16:fa:
                    8a:34:29:63:e5:e2:d2:9c:93:2b:7d:01:c8:99:d1:
                    b2:b3:a0:53:01:43:eb:c0:a9:9a:17:53:2b:fa:a5:
                    77:19:4d:3c:93:ed:01:8a:0e:85:96:74:bd:e9:f3:
                    95:a8:d6:c3:ea:1d:9a:d8:80:6e:30:11:24:61:ff:
                    fe:c8:8a:ac:8d:8e:52:f2:a4:2f:81:bc:b3:5f:4c:
                    9e:c6:8c:32:83:27:d1:83:aa:85:ce:38:f3:97:96:
                    48:f7:e8:03:b9:d9:36:f6:df:a9:0c:cb:b0:b2:88:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FC:76:0D:B7:19:7F:A2:3D:FA:87:DB:6E:CC:95:2A:6C:90:BF:7F
            X509v3 Authority Key Identifier:
                keyid:99:A6:D3:4B:51:CE:12:5B:1D:A8:98:F0:80:6E:70:4C:4F:54:25:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/99A6D34B51CE125B1DA898F0806E704C4F542518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99A6D34B51CE125B1DA898F0806E704C4F542518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:18:20:d5:89:2f:61:93:c1:bd:8d:68:f7:3e:ff:7a:55:
         32:29:3b:d7:ff:e7:d5:af:b8:4b:d0:b9:58:61:57:34:6f:80:
         ce:66:4a:3b:ce:87:c6:54:54:2c:23:7b:45:c6:26:d3:fc:42:
         84:a5:56:f0:42:b3:81:2f:d8:30:43:e0:04:a0:d2:17:a4:bf:
         3a:e2:41:80:47:6f:d1:53:5e:d8:2f:b7:6d:e1:7c:dd:0d:4a:
         0b:ff:74:93:82:66:34:b9:23:9d:dc:bf:79:82:ca:ab:c7:2c:
         d8:14:ea:c0:b9:c6:8b:30:a6:cd:23:ae:55:40:8c:8c:78:00:
         2f:58:3b:b2:be:82:e0:29:bd:2b:de:8a:5e:ba:44:e9:3d:3b:
         b0:7c:3c:9b:77:ca:b3:3b:48:08:fa:c3:d3:f8:f5:4e:57:6b:
         75:92:d9:17:e9:e8:fc:96:a6:32:09:d1:82:84:d0:0a:40:f3:
         fc:4f:71:c0:80:a1:35:03:9a:ed:b4:81:22:44:b0:16:a0:2f:
         e9:6f:f7:92:2b:ec:90:f2:41:9f:92:ff:1a:e8:7f:d4:2c:20:
         7e:5d:57:b5:29:37:77:c1:6e:26:de:6e:69:9d:78:e6:47:b9:
         ca:66:4d:ef:b5:96:60:ea:9c:15:b3:f1:10:7f:77:fc:b8:da:
         25:1d:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:01 2025 by rpki-client