Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3234203d3e20323632383933.roa
File:                     3136382e3132312e3139362e302f32322d3234203d3e20323632383933.roa (raw, json)
Hash identifier:          EzLlkJ3TjGKR7jA7w38dcoRO2HoxMreYaW/4D90A6OM=
Subject key identifier:   A7:90:C7:87:C8:13:66:16:EF:2A:5E:68:A5:A5:87:C1:1B:DE:F2:AA
Certificate issuer:       /CN=511B355769823307034985B2E114AB98901BC8A3
Certificate serial:       6AFB1C8C90A0F3367A33D375DE71EC87EFA602EB
Authority key identifier: 51:1B:35:57:69:82:33:07:03:49:85:B2:E1:14:AB:98:90:1B:C8:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/511B355769823307034985B2E114AB98901BC8A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3234203d3e20323632383933.roa
Signing time:             Thu 09 Jun 2022 19:05:30 +0000
ROA not before:           Thu 09 Jun 2022 19:00:30 +0000
ROA not after:            Thu 08 Jun 2023 19:05:30 +0000
asID:                     262893
IP address blocks:        168.121.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fb:1c:8c:90:a0:f3:36:7a:33:d3:75:de:71:ec:87:ef:a6:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511B355769823307034985B2E114AB98901BC8A3
        Validity
            Not Before: Jun  9 19:00:30 2022 GMT
            Not After : Jun  8 19:05:30 2023 GMT
        Subject: CN=A790C787C8136616EF2A5E68A5A587C11BDEF2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:64:39:9a:b1:f3:e9:1b:f7:2e:26:d3:b4:
                    a1:bd:59:bb:ee:39:f1:87:58:cd:89:f5:f5:5c:10:
                    51:cd:06:55:5f:1e:88:cb:c9:e5:07:4a:16:8f:2d:
                    64:6d:3e:21:3e:6b:36:72:e9:f9:5a:e4:12:d2:45:
                    32:5c:f3:dc:bd:47:2e:c4:00:bf:8f:5f:8d:18:a1:
                    80:4a:ee:fe:c7:cd:25:a9:2b:00:cb:4c:4a:ba:29:
                    8e:2a:a8:1b:56:29:b2:9e:82:4e:41:34:fd:c2:62:
                    69:67:53:65:47:4b:30:dc:67:06:18:4b:6c:5f:6f:
                    55:1f:87:6b:84:c0:de:4d:e1:5d:14:7e:6f:bf:dd:
                    b5:d5:74:0d:af:81:b3:e5:00:12:05:83:0d:03:5c:
                    88:8c:bc:32:32:1b:0e:dc:8d:63:65:f6:b0:6e:8a:
                    55:1c:35:3e:3a:53:72:b9:48:f9:dd:c9:41:0c:61:
                    96:ff:79:7e:d4:09:c2:7f:b7:01:19:5c:b3:c5:51:
                    37:d7:e9:e9:24:8e:28:c5:7b:94:88:6a:67:9e:1a:
                    60:ea:3f:0e:eb:74:0b:4d:f2:d6:37:c5:2a:d6:d8:
                    b9:1e:a7:6a:4f:79:c5:ec:4e:6a:42:83:fc:95:e7:
                    58:c1:7f:d1:c8:2b:ea:b0:df:ea:90:a8:79:9d:96:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:C7:87:C8:13:66:16:EF:2A:5E:68:A5:A5:87:C1:1B:DE:F2:AA
            X509v3 Authority Key Identifier:
                keyid:51:1B:35:57:69:82:33:07:03:49:85:B2:E1:14:AB:98:90:1B:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/511B355769823307034985B2E114AB98901BC8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/511B355769823307034985B2E114AB98901BC8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3136382e3132312e3139362e302f32322d3234203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:d5:6e:fc:36:f9:21:39:06:d5:e0:ff:06:41:98:c1:0a:
         f4:18:d2:9e:1b:1b:bf:13:5c:66:9f:e7:e2:9b:97:d4:f3:f4:
         21:9a:ca:7d:8b:c4:62:d6:45:64:a5:3e:9e:af:a5:81:39:57:
         6e:c5:39:1e:d2:e0:33:f4:33:65:9d:f0:4a:28:5b:53:08:88:
         b1:ca:34:ba:08:70:24:ef:40:cf:5f:34:90:a6:c9:06:1a:7c:
         69:76:3e:f9:24:a7:33:fb:ae:ab:94:2a:a7:c8:8b:69:90:98:
         ec:28:87:df:5c:bd:7c:19:52:d9:e0:0c:8e:3a:be:08:23:d6:
         54:7e:c1:44:84:4b:03:97:e0:21:94:5a:8f:79:9b:4c:bf:52:
         d3:f5:ba:88:cc:c8:61:18:36:cd:fc:83:f0:a5:1f:4c:0d:d5:
         39:98:61:19:12:6e:8b:f2:4d:3a:0c:46:5d:34:e5:c2:66:e7:
         42:6e:d9:75:26:4d:2e:2e:04:86:b6:6b:77:f6:67:84:c0:65:
         e6:a8:dc:40:57:05:38:ad:6c:60:87:3d:a9:30:ef:1f:df:df:
         63:da:84:d2:39:28:e4:c9:be:c1:d8:66:52:a2:f9:1c:79:09:
         32:a3:25:72:0d:8c:bf:b4:45:0f:55:fa:b5:ab:66:38:72:fb:
         7e:81:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:16 2025 by rpki-client