Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
File:                     3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa (raw, json)
Hash identifier:          DvpwAG7NKkID29PsfJPa4Dtul5YgXRNXeutumjwFaPk=
Subject key identifier:   13:19:97:84:13:31:C4:EA:5B:F2:0D:A1:8B:B3:69:A9:90:1D:F0:0E
Certificate issuer:       /CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
Certificate serial:       3D6F5C9C344F6EF2093019C5B80CB1BDB8AA76A5
Authority key identifier: 59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265455
IP address blocks:        168.196.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6f:5c:9c:34:4f:6e:f2:09:30:19:c5:b8:0c:b1:bd:b8:aa:76:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=131997841331C4EA5BF20DA18BB369A9901DF00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:4b:bb:32:52:e0:e7:1c:c8:6a:5f:60:c0:
                    ff:c5:35:45:e2:61:36:71:67:c2:be:65:59:0f:06:
                    8a:df:6b:fb:b8:9b:ab:67:2c:f0:4f:e7:50:bf:12:
                    15:03:f2:dc:97:0b:cb:dd:a0:39:c4:9e:34:54:92:
                    8c:8a:8c:75:1c:4d:ab:d6:b2:1d:93:f7:2d:5a:58:
                    1a:af:e9:25:62:44:df:e7:22:fa:cf:19:5f:36:ed:
                    bb:e2:a1:b8:dc:1a:be:55:6a:2b:a0:b3:6b:bd:0e:
                    a7:96:24:ed:71:9b:32:6b:7b:4c:b7:fa:a2:9b:cc:
                    c0:fb:b5:f0:47:60:71:3c:37:25:31:6a:87:11:c1:
                    92:d3:21:65:1d:98:15:ef:e7:6e:a5:91:8b:ea:89:
                    bd:74:af:d6:68:d9:14:e1:59:a2:43:43:a5:11:af:
                    59:29:72:fb:60:ee:b2:09:97:bc:40:4d:e0:c1:d5:
                    c5:d3:25:66:98:55:29:a9:67:7a:a2:fb:49:26:4b:
                    76:b0:0a:6f:b2:a4:02:20:e9:13:1a:21:8c:e4:32:
                    d0:a5:9b:ab:6a:6a:0a:80:96:3d:91:00:fa:c6:fc:
                    58:8e:5e:ac:81:0c:32:60:70:6d:d2:36:69:17:d7:
                    dc:17:26:2d:12:01:68:19:cf:98:ca:18:d9:bc:52:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:19:97:84:13:31:C4:EA:5B:F2:0D:A1:8B:B3:69:A9:90:1D:F0:0E
            X509v3 Authority Key Identifier:
                keyid:59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:ed:23:36:03:bd:0e:8d:60:6e:cc:6a:c7:60:be:a4:9a:
         ad:96:11:27:8e:d7:da:e7:f9:72:31:9e:b5:93:f7:cc:75:20:
         a6:f1:65:a7:a1:8c:d2:ed:a3:d1:37:4b:a2:f1:5e:7b:9d:ca:
         06:99:72:81:d8:3e:d0:77:e4:1b:73:a1:c9:c6:b6:c0:1f:2f:
         d9:09:25:78:52:46:af:42:e1:d6:9c:8f:32:67:de:67:49:db:
         22:06:31:a2:70:0f:8a:07:6b:c6:91:63:c9:8b:8d:f8:76:91:
         05:55:c4:13:7e:04:14:7a:3e:98:dd:ae:ec:25:19:21:bf:3e:
         ff:08:20:f9:e6:35:56:99:b3:ad:29:51:8d:1c:58:bb:68:5c:
         d9:ec:d1:1c:a2:a3:8d:e6:d5:61:e6:ad:02:05:87:2f:7b:3f:
         30:a6:6d:29:48:f9:16:fc:60:61:04:1d:98:8e:72:03:72:5a:
         12:fd:3e:8a:13:b1:8e:83:35:e2:88:c2:10:58:bf:91:aa:e6:
         c8:cb:9b:26:a1:4e:14:e2:2b:1c:ac:73:40:1c:c7:78:ee:f6:
         b0:70:28:3a:d1:a8:2a:e8:fa:1e:73:54:03:55:3e:57:ad:2f:
         53:b9:f0:d3:df:18:b9:43:2d:24:a6:ce:5a:46:8f:cb:fb:b1:
         9d:74:84:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:31:47 2025 by rpki-client