Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa (raw, json)
Hash identifier:          LAjChsiysa9QF28CoJUDVMeapxMs2dDkPAeN77/d+6Y=
Subject key identifier:   C8:15:5B:CE:6C:F8:6A:28:6A:FA:C2:93:32:28:33:A4:23:29:9A:E3
Certificate issuer:       /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial:       5F1D904CB8DF6306011461806B43019534E0A7F6
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa
Signing time:             Wed 15 Jan 2025 20:05:53 +0000
ROA not before:           Wed 15 Jan 2025 20:00:53 +0000
ROA not after:            Wed 14 Jan 2026 20:05:53 +0000
asID:                     264948
IP address blocks:        168.232.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1d:90:4c:b8:df:63:06:01:14:61:80:6b:43:01:95:34:e0:a7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
        Validity
            Not Before: Jan 15 20:00:53 2025 GMT
            Not After : Jan 14 20:05:53 2026 GMT
        Subject: CN=C8155BCE6CF86A286AFAC293322833A423299AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:b9:68:20:69:7f:9e:2b:6d:15:5e:82:8f:
                    18:db:1e:1b:98:b1:0e:7d:0a:b7:81:c2:ef:8d:eb:
                    ac:17:5c:ce:e0:38:33:71:a6:cf:2c:3a:56:d7:cf:
                    58:d5:32:42:7b:b1:36:a0:bf:55:6f:9e:93:83:72:
                    b3:18:98:b2:f7:2b:b2:e1:ac:6f:01:ae:ef:8f:48:
                    a4:d2:5d:46:03:58:5b:9d:67:2d:4a:8e:ce:63:ad:
                    e0:7d:64:e6:0b:b5:f9:67:d9:03:f8:2b:e5:82:99:
                    e3:7b:71:db:cb:d2:58:d5:c2:ce:ac:c8:3b:3a:37:
                    59:c6:9c:d5:dc:ac:69:52:6c:ac:2f:cc:ed:3e:01:
                    6f:b2:12:50:b8:42:02:1c:53:7d:38:90:37:cd:f1:
                    6d:eb:83:d4:18:5d:49:53:7a:3c:1a:ea:07:59:6e:
                    08:cb:07:74:1b:84:b0:af:63:88:66:73:34:1d:16:
                    91:3e:1a:84:9c:80:76:b0:af:29:53:ed:93:1c:1f:
                    37:24:2d:9a:ee:b3:65:99:cf:7f:9a:aa:00:ca:80:
                    b7:8d:8b:7d:bc:c7:b6:69:61:f3:65:aa:3b:d9:17:
                    4a:91:03:29:0d:21:0e:ee:57:36:2f:a5:e4:55:5a:
                    80:7e:44:88:34:95:f8:b4:3e:79:a7:ca:ff:4d:37:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:15:5B:CE:6C:F8:6A:28:6A:FA:C2:93:32:28:33:A4:23:29:9A:E3
            X509v3 Authority Key Identifier:
                keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:d2:87:ab:f0:93:72:f2:92:53:b9:f8:d5:a4:e8:0a:2a:
         10:df:27:bc:36:eb:f5:16:d5:8f:df:16:3b:7a:d7:8b:10:69:
         fe:2f:b6:29:df:f9:54:5e:88:c2:3d:85:ee:a2:8c:a2:4c:1a:
         76:4d:2e:0f:af:1e:23:6c:60:68:5e:7b:31:52:96:e6:c9:11:
         45:67:3a:1b:b1:4e:ab:33:ff:cf:f8:77:df:21:d2:72:e8:8e:
         06:9d:92:f4:58:2c:8e:72:37:6c:d9:72:9b:bc:ae:5b:b6:f2:
         be:7c:d1:21:81:ad:e5:6a:fa:42:61:5d:d2:9c:b8:a3:ab:de:
         f3:7b:a2:73:a2:a9:fa:0b:a0:d3:43:6e:9e:7b:d9:6e:44:16:
         ab:3b:5f:16:db:35:57:fc:32:75:99:07:7b:10:e6:04:7a:e8:
         5e:ca:cd:94:5c:ab:6c:da:fa:56:34:d8:74:fb:b7:72:72:f5:
         c6:f6:dd:0e:c6:0e:c2:03:03:6b:ea:12:8f:bb:64:35:4d:01:
         e2:da:1f:53:42:89:9e:38:7c:67:d9:29:cd:dc:fd:e4:14:60:
         04:7d:13:f8:30:70:59:d5:ce:36:c6:10:60:38:01:c5:bb:c2:
         87:45:b0:03:d0:76:6c:f7:d8:d5:ba:2f:90:3d:15:60:1d:7a:
         6d:e7:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:37:05 2025 by rpki-client