Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa
File:                     3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa (raw, json)
Hash identifier:          Myt66wa649bH4N4qOkbFNusKvc+FrmA8HxA29SgRGn0=
Subject key identifier:   EC:D0:0C:9C:CA:FB:A8:BB:22:D5:F4:FE:C3:66:D4:A5:F6:91:85:49
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       3350E2F59014F4D76CB7AA4946BB44E77C3DC619
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:01 +0000
ROA not before:           Wed 09 Nov 2022 20:06:01 +0000
ROA not after:            Wed 08 Nov 2023 20:11:01 +0000
asID:                     262819
IP address blocks:        168.196.110.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:50:e2:f5:90:14:f4:d7:6c:b7:aa:49:46:bb:44:e7:7c:3d:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:01 2022 GMT
            Not After : Nov  8 20:11:01 2023 GMT
        Subject: CN=ECD00C9CCAFBA8BB22D5F4FEC366D4A5F6918549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:44:b7:de:d5:cb:92:99:0f:30:26:5a:c0:0f:
                    4d:b1:4b:55:4f:f0:d8:dd:7d:ab:ca:34:84:d7:ba:
                    6c:92:66:bd:eb:ca:32:44:3f:e3:97:87:52:57:5b:
                    df:72:f9:e1:d6:2a:de:30:b9:cf:a4:f1:df:a5:73:
                    59:12:be:49:e7:a1:00:dd:3d:f4:08:cc:66:5d:fe:
                    48:14:37:d9:8d:bf:8b:16:69:94:40:1d:31:fc:e1:
                    ab:2c:8c:20:b3:97:b8:f3:9c:a9:df:de:2d:90:19:
                    e9:53:fe:8a:90:16:fb:53:fd:de:7a:35:5d:59:92:
                    59:d6:23:0c:1f:20:44:d1:24:20:06:7a:de:83:21:
                    35:aa:8d:e9:a8:59:45:86:cb:b1:92:b3:f0:bc:0d:
                    ea:36:1f:b5:b8:97:10:31:31:25:5b:b6:a3:57:80:
                    62:51:e9:d8:06:a2:ad:0b:2a:fc:16:e0:d2:5a:5e:
                    ae:33:79:3a:45:64:f4:03:33:c5:00:df:b7:86:3d:
                    03:0b:e7:d4:29:5c:49:8a:6f:89:5f:78:a9:23:f9:
                    a7:c9:a8:e5:6e:50:e1:62:02:55:e1:b5:1a:ee:ef:
                    7b:bf:b6:75:49:e9:79:1c:7a:b3:f0:9f:f8:35:6d:
                    fa:08:55:7d:c0:79:fe:fc:73:cf:78:eb:23:51:41:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:0C:9C:CA:FB:A8:BB:22:D5:F4:FE:C3:66:D4:A5:F6:91:85:49
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3136382e3139362e3131302e302f32332d3233203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:e7:9b:7b:26:68:7f:33:12:9c:aa:5f:0a:42:1a:79:15:
         9e:ed:26:a4:56:ea:f6:fa:78:8c:7b:2f:de:bb:29:a0:15:c3:
         a4:86:d8:ab:92:c0:01:65:f7:d1:88:a4:dd:09:9a:8b:9c:98:
         e1:42:01:7a:8c:11:1c:b8:39:08:1c:87:57:1a:e9:28:ac:cf:
         3c:ab:64:b4:f6:ef:73:80:be:3c:96:ae:78:0d:5a:cb:b6:b2:
         f7:7c:db:75:59:e5:f9:0b:a5:81:81:3a:d0:03:75:1f:9b:4b:
         d9:db:a0:1b:17:58:d3:09:07:1e:77:b4:f0:97:ca:78:3b:6e:
         15:9e:63:c3:48:45:62:79:3d:63:5c:f8:13:6e:b7:09:9f:97:
         5e:58:6a:e2:e5:7a:79:a6:34:93:e7:fd:4a:67:72:06:26:73:
         80:67:5f:8e:68:34:7c:7d:b1:96:8b:a8:bc:c1:8b:6a:21:f7:
         13:77:21:ba:fe:6d:c1:69:63:22:6c:4e:d2:f0:8b:ed:e2:61:
         2f:b3:ba:44:e6:f7:49:6d:83:13:1c:a9:01:95:a0:b5:d4:96:
         63:22:21:06:3a:07:c8:bb:7b:cf:85:85:ff:50:b7:a6:bc:88:
         2c:8e:09:64:42:30:cf:b2:42:de:25:58:36:2d:f5:0e:e8:39:
         58:63:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:24 2025 by rpki-client