Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/3136382e3230352e3231322e302f32342d3234203d3e20323635333732.roa
File:                     3136382e3230352e3231322e302f32342d3234203d3e20323635333732.roa (raw, json)
Hash identifier:          yeVub4vpXBanGN7g6CTjgAgBClD5Qy7wK7/OeSbU864=
Subject key identifier:   27:58:80:84:23:09:40:BE:1B:7F:FE:52:AE:03:B4:D9:1A:51:E8:BD
Certificate issuer:       /CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
Certificate serial:       34B6F3213E9923FB049A48979C5495FF44B4DF2F
Authority key identifier: 0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/3136382e3230352e3231322e302f32342d3234203d3e20323635333732.roa
Signing time:             Tue 23 Jul 2024 18:22:19 +0000
ROA not before:           Tue 23 Jul 2024 18:17:19 +0000
ROA not after:            Tue 22 Jul 2025 18:22:19 +0000
asID:                     265372
IP address blocks:        168.205.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b6:f3:21:3e:99:23:fb:04:9a:48:97:9c:54:95:ff:44:b4:df:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
        Validity
            Not Before: Jul 23 18:17:19 2024 GMT
            Not After : Jul 22 18:22:19 2025 GMT
        Subject: CN=27588084230940BE1B7FFE52AE03B4D91A51E8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:b4:f0:2b:ef:9e:50:c2:b6:ea:43:c8:fe:
                    c0:74:39:8b:ea:be:5d:ef:82:d0:3f:83:d7:8a:b6:
                    28:5a:7d:ed:3d:de:6d:dd:75:b3:2a:fc:75:71:5f:
                    17:b9:a2:37:45:9a:22:55:e0:c0:6e:f6:2b:91:ef:
                    60:d2:85:c5:5d:71:e9:97:37:5e:33:07:b1:d4:55:
                    21:99:ae:fa:a2:88:d6:95:16:28:fc:97:03:55:a4:
                    6d:b8:d1:64:35:7e:48:9f:fc:2f:f7:8a:93:eb:ab:
                    ea:a1:64:9c:58:0e:f8:d3:4b:ae:52:77:99:2d:a8:
                    5f:8d:7e:e9:ae:41:74:ea:52:71:7e:fe:f2:73:16:
                    a1:c1:21:55:5e:1d:5b:77:79:f0:e4:90:de:aa:7e:
                    92:91:b5:7d:fe:42:66:b1:f4:23:d2:b8:a2:dd:52:
                    7c:9c:e6:49:9b:09:0c:c6:31:de:aa:d8:c8:9f:d3:
                    d1:2d:1c:e1:7e:ca:46:21:10:cf:92:4e:8a:27:66:
                    cc:07:23:26:6e:9e:27:82:6f:49:bf:20:f5:e3:69:
                    71:7d:e5:9c:86:96:7a:66:50:65:27:9c:98:92:22:
                    d2:37:e3:bd:9d:a9:37:5b:c5:7d:09:d3:b8:13:82:
                    a1:2f:1a:2d:ca:ca:84:10:bb:21:ba:d2:d3:99:09:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:80:84:23:09:40:BE:1B:7F:FE:52:AE:03:B4:D9:1A:51:E8:BD
            X509v3 Authority Key Identifier:
                keyid:0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/3136382e3230352e3231322e302f32342d3234203d3e20323635333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:b8:d9:57:6a:84:78:26:52:0a:6d:73:fb:ce:2a:11:b6:
         d7:97:aa:bb:be:56:b7:12:9b:5e:57:94:b3:fd:b1:c6:a5:74:
         91:f6:aa:8c:a9:94:a3:b9:be:67:c6:0f:1a:ab:0a:31:24:2a:
         32:37:bc:28:4c:c7:29:44:db:48:4f:f5:7e:7f:3b:d4:ad:ab:
         fb:27:d5:21:e3:90:1c:5f:a6:cc:8d:a9:33:7d:d9:49:fe:14:
         bc:db:88:c5:e5:b2:db:4d:38:f0:38:84:26:ea:25:33:2f:f4:
         bb:9b:56:ec:5f:f8:22:00:12:0c:7c:82:5b:8b:d1:6f:ef:c0:
         07:b1:6a:c2:04:06:a0:ec:f6:ed:c0:62:62:fa:f3:3a:1b:a7:
         ee:a1:71:fa:25:af:5f:ef:0d:76:4e:73:ce:85:e6:71:2f:18:
         21:24:21:68:61:96:5c:ef:f9:56:67:e9:f8:2b:70:f9:fc:ef:
         b5:1c:92:37:2e:c0:88:dd:84:27:f2:b0:8a:91:ba:24:5e:4b:
         c9:9c:8d:b5:4d:57:a9:68:6f:ab:dc:66:8f:f2:20:f8:a9:c6:
         33:91:92:dd:3b:96:74:a1:54:71:8f:d1:b6:06:e2:36:7c:b2:
         59:b6:0d:66:4f:0c:a5:92:44:89:8a:ff:28:9d:a4:b2:1e:f0:
         b6:3d:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:09 2025 by rpki-client