Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa
File:                     3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          xRNn5fHnN14RK9Re+MLgZzKo5oxChTU4ND//CwszBJg=
Subject key identifier:   A7:3D:38:AE:3A:1F:43:12:05:60:2A:B1:AB:D3:35:74:DB:BC:90:6A
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       6FA35DE087B95CFA76C5AD7D449B43986CE6A0E6
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:36 +0000
ROA not before:           Wed 22 Jan 2025 21:39:36 +0000
ROA not after:            Wed 21 Jan 2026 21:44:36 +0000
asID:                     264927
IP address blocks:        168.228.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a3:5d:e0:87:b9:5c:fa:76:c5:ad:7d:44:9b:43:98:6c:e6:a0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:36 2025 GMT
            Not After : Jan 21 21:44:36 2026 GMT
        Subject: CN=A73D38AE3A1F431205602AB1ABD33574DBBC906A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:61:bc:6a:9f:cd:4b:d6:8f:68:4a:2e:6d:
                    54:2a:5e:a7:e4:06:42:7b:ed:47:16:f3:f1:27:97:
                    44:93:1f:74:7b:d4:f3:67:3e:8f:57:f6:f7:6d:f9:
                    aa:21:3b:b2:91:83:7c:1f:88:9e:69:a5:53:bb:01:
                    5e:ad:3e:cc:28:b8:80:92:a0:e3:f5:d5:b4:a8:ff:
                    49:51:fc:e6:04:12:89:02:1b:88:e8:35:43:11:88:
                    74:4c:db:58:62:c1:c9:b6:75:9b:a1:84:11:2c:06:
                    36:20:f3:cf:42:40:b3:34:b8:45:3e:40:5b:c3:c2:
                    23:f8:f6:78:26:6d:5c:39:7e:d6:9d:ff:96:a5:82:
                    58:f4:1d:ae:20:02:3b:4f:30:ee:92:2c:1d:10:a3:
                    9e:a5:f0:4e:5c:3b:e8:39:2c:ed:25:66:1a:42:73:
                    99:ef:74:7b:9e:39:c8:14:a5:95:cf:91:fe:73:1c:
                    d6:40:f4:87:f8:21:89:2f:cc:a9:b6:39:4a:e4:5a:
                    d0:e6:e0:9b:78:83:21:e4:e4:c2:07:42:37:76:85:
                    81:ee:eb:ca:9e:1d:91:3e:d6:f8:20:ac:d7:d1:30:
                    69:94:0f:63:1b:e8:5f:c3:93:d3:71:01:d3:fc:dd:
                    96:9e:a1:2c:c7:67:8d:2e:04:5f:26:83:62:33:c0:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3D:38:AE:3A:1F:43:12:05:60:2A:B1:AB:D3:35:74:DB:BC:90:6A
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:41:5d:e6:cb:b0:1e:0f:93:98:0e:0a:b0:05:e7:83:f2:
         ba:18:98:31:8c:f9:d0:31:b6:41:2c:79:a2:ef:83:c8:0d:17:
         be:29:55:e0:2c:21:75:67:f6:e8:95:3c:28:b4:cb:b2:f4:28:
         ab:21:3c:74:8a:5c:0b:80:8c:ba:db:6f:17:72:d4:b1:f1:a2:
         c2:d5:07:a0:39:13:d8:b2:11:6d:6e:20:76:1b:d0:02:62:4c:
         fb:59:09:24:d2:9b:2d:23:ba:84:50:5d:0b:26:89:27:3e:69:
         6f:b1:b2:20:a1:de:c9:65:91:b6:13:a7:3d:f5:4f:7d:48:23:
         60:39:78:c2:4c:35:36:cb:af:dc:80:62:ce:b8:a1:2a:59:8d:
         4b:4b:80:e1:74:3c:13:96:cc:29:5f:74:6b:8f:7b:fd:ea:48:
         a1:1b:84:fc:1a:87:c0:87:6e:27:72:a5:5f:bb:25:8a:cc:a4:
         d4:4b:37:43:3d:49:da:be:6a:a5:02:17:44:4d:ac:b2:8d:ae:
         ed:a2:80:1b:ff:71:a9:b4:15:69:d6:2f:4a:ae:8d:6d:3c:0b:
         3e:8e:c3:dc:cd:e8:4b:f8:19:e7:f6:84:46:1b:cb:6a:f8:ac:
         14:a2:c5:1b:a1:68:17:4b:ee:81:b2:d4:c1:6c:9c:f7:2e:57:
         e5:8c:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:40 2025 by rpki-client