Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3136382e3139352e31322e302f32322d3234203d3e203533313836.roa
File:                     3136382e3139352e31322e302f32322d3234203d3e203533313836.roa (raw, json)
Hash identifier:          RlZZFzmSg7G/y9z02PyiPXXgMbyNUU0wuBWC2Gd2XM4=
Subject key identifier:   F3:0D:CB:AF:18:B1:8E:4A:0E:47:45:93:42:78:31:77:9B:BC:0F:9A
Certificate issuer:       /CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
Certificate serial:       37F1E08931929DC4D94BB4833FAE33A96DCA5EBD
Authority key identifier: 6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3136382e3139352e31322e302f32322d3234203d3e203533313836.roa
Signing time:             Thu 13 Mar 2025 18:15:59 +0000
ROA not before:           Thu 13 Mar 2025 18:10:59 +0000
ROA not after:            Thu 12 Mar 2026 18:15:59 +0000
asID:                     53186
IP address blocks:        168.195.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f1:e0:89:31:92:9d:c4:d9:4b:b4:83:3f:ae:33:a9:6d:ca:5e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
        Validity
            Not Before: Mar 13 18:10:59 2025 GMT
            Not After : Mar 12 18:15:59 2026 GMT
        Subject: CN=F30DCBAF18B18E4A0E474593427831779BBC0F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:6d:fd:6a:b2:ed:be:ed:b4:5d:5c:10:09:
                    75:1c:e5:df:7c:f1:ef:9f:1e:45:db:c2:c9:fc:06:
                    ca:07:94:50:ab:f7:c8:11:6b:ee:73:d6:3b:6b:3e:
                    bc:91:4c:5e:6e:88:9a:ee:77:47:8c:26:4e:c5:55:
                    e7:13:6a:c7:04:76:69:9c:fc:f6:14:90:26:fa:94:
                    ea:1a:db:2e:47:4d:86:0c:91:0d:6f:6c:16:b4:e1:
                    a3:b5:a7:5d:a8:70:6c:7e:7f:40:d2:da:46:63:4f:
                    8f:0f:8b:8b:70:ac:d0:1e:da:47:d1:26:dc:4d:da:
                    7f:f7:33:d5:db:ca:24:94:ef:ce:7d:64:65:45:5b:
                    2f:af:1d:b4:5d:00:c6:a0:c0:fb:fe:00:0a:88:0c:
                    b0:fd:10:26:f3:51:04:a9:ad:a6:48:09:c7:a1:5c:
                    8f:0c:f4:9d:1e:ce:d8:d4:39:6a:a5:24:c7:24:3d:
                    79:f6:ee:39:99:c1:71:fd:cf:b6:28:72:dc:9f:2f:
                    4e:16:5b:ee:41:6f:6f:da:e6:fd:12:09:2f:94:70:
                    27:de:6f:19:50:61:25:96:fe:c9:cb:99:c0:ff:06:
                    4e:b2:bb:06:ab:a7:33:4a:b4:41:cd:17:15:c9:97:
                    d0:81:d6:c3:98:6a:a8:c6:a6:bb:86:ff:ab:27:09:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:CB:AF:18:B1:8E:4A:0E:47:45:93:42:78:31:77:9B:BC:0F:9A
            X509v3 Authority Key Identifier:
                keyid:6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/6F6E41F37AB48469D1CE88AD1951EB232B517B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3136382e3139352e31322e302f32322d3234203d3e203533313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:5d:a1:cd:92:f1:ec:81:63:4a:63:d4:39:d3:48:be:f3:
         75:ab:ae:26:86:26:b8:99:88:70:79:d1:29:a8:10:59:93:35:
         50:c6:10:23:c9:7c:27:86:fb:fc:79:e4:36:d6:70:42:06:e1:
         69:61:02:a4:11:a9:c1:6b:3e:ce:9e:1b:54:51:9c:24:95:41:
         34:5a:b6:7b:a4:ee:fe:3f:92:01:7f:42:bf:22:20:37:2b:bc:
         df:0e:ca:11:83:20:cd:ba:19:9f:bc:67:d9:89:98:f7:52:1f:
         c7:bb:9d:98:a1:60:1e:e1:41:6c:d0:36:2c:d1:c7:f8:18:46:
         6f:c6:8e:c0:65:71:82:16:3a:00:21:9f:e7:d2:29:87:be:4b:
         07:92:eb:78:b8:c2:81:40:37:c0:a2:10:29:90:c9:f9:86:91:
         a3:df:c6:7c:76:47:a7:8a:a9:b6:22:9c:82:6a:d3:2d:00:39:
         45:7b:42:82:98:db:e0:d4:f6:59:75:2d:1d:97:cc:a7:c2:22:
         41:46:c0:f5:3e:c8:dd:17:13:d4:6b:9e:2e:26:de:5f:b6:9c:
         1f:a0:ca:ed:cf:60:1e:72:ff:0e:8a:7b:39:c7:50:67:75:74:
         30:0f:eb:98:1d:d9:af:19:a2:4e:72:7d:e6:14:1f:bb:2f:24:
         33:3b:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:40 2025 by rpki-client