Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e302e302f32342d3234203d3e20323635323430.roa
File:                     3136382e302e302e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier:          cN0CSO9216Kipeh/zN1lVjxwlefoTSEOfFFYRjmTCT0=
Subject key identifier:   23:E3:A5:41:5F:ED:F5:B9:28:5B:C5:45:15:E3:5A:39:C4:26:A8:FE
Certificate issuer:       /CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
Certificate serial:       2F7D1820269619771D504A2D7F06E3340EF13051
Authority key identifier: 42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e302e302f32342d3234203d3e20323635323430.roa
Signing time:             Tue 05 Sep 2023 13:46:30 +0000
ROA not before:           Tue 05 Sep 2023 13:41:30 +0000
ROA not after:            Tue 03 Sep 2024 13:46:30 +0000
asID:                     265240
IP address blocks:        168.0.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:18:20:26:96:19:77:1d:50:4a:2d:7f:06:e3:34:0e:f1:30:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C85A39ED0D33A761B78E8D797BDD5D476B11C4
        Validity
            Not Before: Sep  5 13:41:30 2023 GMT
            Not After : Sep  3 13:46:30 2024 GMT
        Subject: CN=23E3A5415FEDF5B9285BC54515E35A39C426A8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:bf:47:26:76:01:67:4d:87:2d:4d:31:0b:
                    8b:fa:8c:c5:b0:d3:a2:6a:a1:35:f7:9d:29:a6:bd:
                    77:fe:cb:51:e2:a8:e1:8a:64:6f:fb:b5:50:e4:9a:
                    40:b3:6e:d0:a4:00:99:57:12:e6:6a:ff:bc:b7:fe:
                    19:de:3e:41:c2:a7:60:aa:f3:9e:66:7e:8c:e4:27:
                    1e:94:21:5b:3d:aa:58:37:b8:a8:a8:f3:d6:fd:17:
                    82:ad:6b:12:1d:ba:8d:cc:15:3d:96:e5:4a:cd:f2:
                    28:dc:96:22:43:b5:bd:c8:f5:3e:9f:70:0b:52:5f:
                    47:54:ea:39:64:af:f1:d1:d6:e9:b9:d7:90:06:22:
                    2c:40:11:99:d1:df:87:d6:f8:3a:d9:15:3e:a2:69:
                    44:1f:98:79:cd:17:e1:3b:e9:2a:3e:14:0d:f3:3f:
                    dd:25:72:36:58:8e:71:b4:ad:89:7d:cd:8c:a2:39:
                    2f:d3:b7:ab:c8:b2:14:73:49:6e:46:fc:4a:03:2f:
                    8a:a2:92:0a:f9:96:3c:00:a9:d2:6d:96:bc:d5:b2:
                    4f:ed:a2:9b:3f:1b:d3:59:45:79:7d:0f:9f:bc:2a:
                    0b:5f:b1:49:26:d5:4e:bc:c4:26:c3:56:42:b4:25:
                    21:c0:27:5a:2d:b1:e1:1e:aa:07:31:a0:1e:f7:29:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E3:A5:41:5F:ED:F5:B9:28:5B:C5:45:15:E3:5A:39:C4:26:A8:FE
            X509v3 Authority Key Identifier:
                keyid:42:C8:5A:39:ED:0D:33:A7:61:B7:8E:8D:79:7B:DD:5D:47:6B:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42C85A39ED0D33A761B78E8D797BDD5D476B11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e302e302f32342d3234203d3e20323635323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:e4:b7:03:f1:eb:ea:f5:a1:da:18:c4:79:4c:d5:c7:cd:
         3d:e9:7c:20:20:0d:80:83:ba:76:ba:b2:13:14:a1:c1:fe:4e:
         32:63:78:f9:48:17:b2:d0:13:0f:9c:54:b4:c1:a2:10:73:d7:
         7f:36:b2:d7:90:2b:00:39:d9:ff:ae:a2:b6:15:96:95:13:b5:
         19:cf:d2:43:9f:58:54:ec:2f:28:f5:66:ae:a4:5b:5f:d8:a8:
         85:10:cb:7b:8d:e0:e2:c5:65:c0:b9:d0:d9:41:60:db:7b:f8:
         ba:90:0b:8c:1e:19:9f:3c:56:b0:d1:b4:6f:9b:76:f1:08:18:
         c3:78:a1:d3:e9:8c:8e:64:4e:47:49:18:10:9e:d2:6c:76:ec:
         ce:91:07:88:94:b0:08:e7:0f:81:2c:4b:f0:ed:db:92:0a:e2:
         28:dc:8c:c7:e2:14:0d:83:28:cb:c9:7a:22:bf:e7:c6:8b:b4:
         08:9d:a8:1a:b7:62:d1:ea:31:bd:6f:57:0d:83:b4:ec:03:41:
         29:13:37:76:a8:34:aa:5c:e2:ec:1c:7e:44:2c:48:ed:9b:f1:
         72:a7:e0:96:1f:f5:47:2b:3f:19:89:30:2f:0e:83:a7:06:73:
         a4:f1:9e:c2:ca:8a:96:00:93:23:9d:2a:25:39:2c:4f:6a:33:
         73:53:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:55 2025 by rpki-client