Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa
File:                     3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          D/nJltFi+G1l8hBFJnoyP82fJs4fF+SmKkOELfWqbxY=
Subject key identifier:   44:11:87:11:68:00:3A:A1:8F:4E:CC:39:34:59:CE:7C:58:EE:0F:BF
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       29244138817B12A87722AD529F6CB379A34CEE4C
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:37 +0000
ROA not before:           Wed 22 Jan 2025 21:39:37 +0000
ROA not after:            Wed 21 Jan 2026 21:44:37 +0000
asID:                     264927
IP address blocks:        168.228.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:24:41:38:81:7b:12:a8:77:22:ad:52:9f:6c:b3:79:a3:4c:ee:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:37 2025 GMT
            Not After : Jan 21 21:44:37 2026 GMT
        Subject: CN=4411871168003AA18F4ECC393459CE7C58EE0FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:6a:b8:39:74:09:71:38:89:e7:c8:91:18:
                    80:b2:1b:7a:dd:9d:4b:3b:7a:d7:5b:5a:da:ce:78:
                    c5:c3:a0:e7:da:bb:da:37:fd:d2:7d:6c:7a:4a:27:
                    e4:18:b3:d1:d4:48:04:7c:3b:7a:53:c1:d6:72:bf:
                    14:6c:c9:4d:a5:55:d0:2b:c5:b7:55:79:d4:ea:8e:
                    48:63:bd:b9:82:0c:c4:3d:52:b6:aa:dc:5c:03:72:
                    f3:a3:a6:a8:b6:2f:0e:08:1a:88:dd:b8:ca:c5:13:
                    2b:bc:be:25:89:b5:d5:5a:a3:71:dd:9a:b7:c9:b3:
                    f2:96:b7:05:1f:a3:76:41:30:50:c0:56:80:da:d8:
                    2d:e1:48:66:69:01:1a:a3:ce:5b:7c:81:42:fb:23:
                    0f:31:0e:82:a7:f5:06:66:ab:e2:40:8e:68:17:f1:
                    fc:d6:f6:bc:b4:7d:0f:29:67:83:84:b0:3d:7b:ad:
                    7b:0f:31:fe:dd:ef:87:7b:fb:2d:20:fb:2e:e5:81:
                    06:c5:cb:1a:54:0f:93:f6:44:6f:71:27:d7:84:0f:
                    83:1c:4d:ff:7a:d8:a2:f4:eb:c1:04:13:86:76:02:
                    00:d7:43:a0:27:5e:cf:a8:01:e9:13:2c:cd:1b:fb:
                    f3:49:d9:b2:47:50:93:bb:dd:83:9c:3d:dd:4c:c5:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:87:11:68:00:3A:A1:8F:4E:CC:39:34:59:CE:7C:58:EE:0F:BF
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:95:04:bc:20:7e:b9:de:d3:32:55:73:84:93:04:c5:f1:4b:
         c5:81:56:f8:52:1d:89:f9:7b:36:70:a4:56:e4:40:73:51:dd:
         38:35:c8:73:91:57:7e:c6:f4:86:c7:66:6b:91:1a:41:e9:17:
         b3:69:b0:e5:4b:10:6c:92:8e:85:4d:3b:19:0d:fc:bd:8d:89:
         fa:a8:57:c2:06:5d:95:34:23:28:21:5c:f7:ad:d2:e5:b4:b4:
         4e:1d:cf:83:92:09:c6:08:8b:85:ca:1b:b2:70:58:f6:a5:32:
         16:e2:68:92:4b:22:62:24:8f:f2:7e:98:87:19:d2:67:f2:1a:
         f5:0a:3a:c3:8a:35:36:0a:b6:f8:3a:46:d1:f8:9b:e0:58:26:
         b6:77:88:b7:cc:ed:25:f7:14:b1:29:42:9d:bb:cd:e3:13:f0:
         00:14:36:42:8c:da:63:a9:4a:f9:b5:4c:9f:69:7d:0b:fc:a0:
         15:f8:2b:42:df:b9:ef:e5:fb:a1:49:21:d8:ea:a4:92:6b:72:
         b7:ea:10:49:0f:55:43:c3:1f:56:2c:07:c5:da:07:28:54:4c:
         fb:55:ce:d8:bc:f3:e5:5b:46:28:60:d3:b5:d5:55:99:c8:9d:
         aa:55:a9:d2:d4:7b:cf:26:0b:2b:f4:b5:32:64:e6:2f:1a:1a:
         5f:a6:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:48 2025 by rpki-client