Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          UTWR8LyQyuG4PsocZ0iha6GDLtlo8tKW07hezvK6fS0=
Subject key identifier:   4C:BD:1D:74:96:3F:8C:66:D6:AF:AD:A2:BF:05:22:20:21:59:71:D4
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       16D2B607AA4A2606447FB6D5BF506CD22CE9D798
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:26 +0000
ROA not before:           Fri 28 Jul 2023 17:37:26 +0000
ROA not after:            Fri 26 Jul 2024 17:42:26 +0000
asID:                     265364
IP address blocks:        168.205.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d2:b6:07:aa:4a:26:06:44:7f:b6:d5:bf:50:6c:d2:2c:e9:d7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:26 2023 GMT
            Not After : Jul 26 17:42:26 2024 GMT
        Subject: CN=4CBD1D74963F8C66D6AFADA2BF052220215971D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:0c:8b:42:25:ea:83:76:e0:34:31:bb:8b:
                    54:6c:1b:b7:e2:67:3b:c7:b1:7d:e8:cd:dc:05:c4:
                    6f:e2:b3:cf:69:be:6e:db:62:2e:48:ef:b3:f4:97:
                    17:db:6a:4e:e3:dd:ac:33:1c:bb:98:51:cb:95:43:
                    19:f3:37:3f:76:ba:d5:23:fd:f9:5d:44:a2:a4:63:
                    ab:32:00:70:6e:41:fe:c5:06:d7:10:64:dd:8e:2d:
                    0d:6f:3c:59:f2:9c:3a:f0:4d:63:16:21:a4:4b:73:
                    cd:93:32:2e:85:27:bc:15:ed:bd:ee:8d:ff:ac:97:
                    f7:59:c6:50:c9:bf:2c:69:2b:8d:c6:d8:d2:a8:c3:
                    cd:0d:4d:89:a6:42:79:a3:93:6f:82:4f:c5:10:7f:
                    c8:3d:57:f8:b4:1b:0b:79:02:62:a3:4a:6f:6d:0c:
                    cd:1b:19:b4:38:f2:af:72:21:3a:40:bb:49:ca:d5:
                    16:1e:16:86:e3:fc:af:e2:3f:6f:21:7f:c3:73:c1:
                    14:79:37:13:79:7d:22:da:e3:30:e9:00:dd:45:67:
                    45:13:38:f3:67:6b:f1:ac:53:bc:a3:75:30:47:bd:
                    57:18:12:07:3b:d1:00:d6:f7:9a:2c:a5:50:e2:49:
                    fe:85:62:1e:08:5f:86:2c:ce:fe:78:7e:34:c0:a9:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:1D:74:96:3F:8C:66:D6:AF:AD:A2:BF:05:22:20:21:59:71:D4
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:24:1e:26:f6:30:07:f4:7c:42:64:cb:66:e3:da:f1:9e:
         91:9b:25:93:eb:99:dc:f0:be:01:c4:ce:aa:a7:74:3f:91:fe:
         f6:5c:be:96:a8:7c:d6:54:53:0c:18:0e:0f:bd:d2:49:5b:17:
         6a:12:88:4f:87:a7:aa:77:49:3a:e8:d3:aa:30:af:7f:99:f3:
         92:3d:1e:cc:3f:2b:13:7a:8a:64:e4:b1:dd:69:e7:66:ae:f7:
         86:79:3f:01:bf:3c:b9:ae:2c:0a:d2:84:75:e9:ea:6b:b6:b6:
         51:96:9b:34:d8:2b:a2:68:8d:e2:f5:e7:fd:bd:a9:0f:bd:de:
         cd:bd:6d:90:65:95:79:c2:9c:93:1b:ae:b0:5b:a9:b4:61:77:
         85:e0:56:53:3d:e5:60:42:a8:e8:94:83:1c:8a:59:24:a7:5f:
         df:db:7f:0a:4f:7b:fe:1b:4d:dc:40:70:3a:5f:3c:ab:24:6b:
         d4:39:d1:92:01:26:e7:63:a3:91:15:44:3f:6d:81:14:41:dc:
         02:49:be:40:ae:fb:dc:66:d0:d7:f5:14:94:39:2d:80:81:aa:
         1d:a1:0a:a0:9a:1a:9f:18:ea:3f:a0:89:0d:fd:9e:bb:ae:e4:
         8e:39:ff:0a:4a:ed:51:cf:79:fd:40:3c:85:8d:30:57:f6:bc:
         47:ad:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:35 2025 by rpki-client