Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135332e302f32342d3332203d3e20323635343335.roa
File:                     3136382e3139352e3135332e302f32342d3332203d3e20323635343335.roa (raw, json)
Hash identifier:          55w9zwQKPlPhbvNrHkFUA9FMhd3WNM+hJpHV8TQ2Gtc=
Subject key identifier:   82:38:6F:28:86:EE:C5:30:D8:78:76:08:A6:DE:69:2F:FF:DC:26:E3
Certificate issuer:       /CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Certificate serial:       5470EA8EB53CE72D31841C9B7FA289442E44E2BD
Authority key identifier: 7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135332e302f32342d3332203d3e20323635343335.roa
Signing time:             Sat 18 Mar 2023 18:30:05 +0000
ROA not before:           Sat 18 Mar 2023 18:25:05 +0000
ROA not after:            Sat 16 Mar 2024 18:30:05 +0000
asID:                     265435
IP address blocks:        168.195.153.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:70:ea:8e:b5:3c:e7:2d:31:84:1c:9b:7f:a2:89:44:2e:44:e2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
        Validity
            Not Before: Mar 18 18:25:05 2023 GMT
            Not After : Mar 16 18:30:05 2024 GMT
        Subject: CN=82386F2886EEC530D8787608A6DE692FFFDC26E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:b3:88:a7:63:13:28:d3:01:4e:76:44:76:
                    b8:79:3d:28:0e:5d:1e:9b:48:70:3c:e2:e0:fa:0c:
                    0d:34:62:7b:46:85:48:46:3e:06:a6:4b:35:a0:6e:
                    69:4a:5e:72:c1:7f:18:f5:69:c2:a0:3a:bd:bc:c3:
                    99:91:fc:af:95:d4:f1:5c:8a:50:6f:e1:54:ff:9e:
                    b1:31:86:44:7f:d8:b7:d2:5c:af:ed:be:c4:0a:05:
                    fc:a0:45:4f:2e:a2:c3:16:38:75:61:81:b9:9f:8a:
                    07:76:f1:54:4a:1c:2e:0a:79:c0:5e:a8:da:76:eb:
                    fb:77:94:fa:c8:e2:19:5e:b5:c6:51:de:2f:53:45:
                    93:46:a2:0f:23:7a:77:0b:63:1c:09:d7:b2:74:cf:
                    3e:bd:a4:4c:87:55:a5:e2:60:13:b8:dd:0f:f7:86:
                    df:19:9e:fc:59:7c:a1:66:3b:03:33:e2:46:65:1d:
                    91:e6:46:24:5d:a0:e2:f8:c6:8f:e2:90:3e:70:0c:
                    8b:16:52:95:e7:e5:cd:15:d9:ea:68:02:0b:0c:01:
                    59:6b:4a:97:a0:55:e9:e2:81:36:09:8f:6b:31:fc:
                    c5:62:d6:af:c8:47:9d:34:e1:fb:35:13:26:a4:ec:
                    83:33:b3:17:fc:c3:5f:b9:f2:90:4f:fb:6a:34:cb:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:6F:28:86:EE:C5:30:D8:78:76:08:A6:DE:69:2F:FF:DC:26:E3
            X509v3 Authority Key Identifier:
                keyid:7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135332e302f32342d3332203d3e20323635343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:fe:66:5a:4b:ed:d3:26:ae:b2:f1:cb:e9:12:1d:f0:b8:
         10:8a:30:1d:0b:9c:ec:b5:48:f8:91:04:c4:50:6e:e5:e8:cb:
         a6:fd:21:16:6d:c9:06:f2:6c:18:0c:52:af:af:2e:92:d4:9d:
         4a:e1:97:d8:10:74:06:55:6e:f9:6a:81:9d:ad:99:df:51:ee:
         9c:16:bd:5a:63:6d:e6:58:8e:84:1a:7e:d9:3f:15:cb:65:9c:
         40:dd:82:cf:a9:bd:79:66:45:ef:44:eb:d2:37:c1:ec:02:3b:
         23:3a:18:9e:6e:b9:28:65:f0:19:67:95:25:36:54:9f:af:05:
         f3:ac:ca:a5:e5:30:ec:7a:ac:ec:0d:fc:8e:09:fe:fc:74:72:
         ca:f3:7c:98:86:90:08:71:13:8e:d8:72:82:bb:e4:a5:91:7c:
         f3:c3:25:af:e0:b2:4c:a4:2f:59:16:f9:e4:2a:a4:ef:d1:77:
         64:b9:b0:88:79:49:b3:85:33:3e:f6:f1:bd:04:39:2c:2c:66:
         5a:c5:e2:82:7e:15:69:f2:ec:44:d7:61:7b:ef:1e:af:3b:c8:
         0f:b1:dc:84:e8:96:68:77:e9:ee:77:be:52:7d:d3:8c:6f:c3:
         e3:6f:18:b3:89:07:11:ae:f7:96:f3:91:4f:8b:3d:82:41:10:
         ce:33:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:51:11 2025 by rpki-client