Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/3136382e3230352e3231342e302f32332d3332203d3e20323635333732.roa
File:                     3136382e3230352e3231342e302f32332d3332203d3e20323635333732.roa (raw, json)
Hash identifier:          qfQW/RkpQnRzMKPDrneTxcGgf0q9sRfQOkObX4mHPjY=
Subject key identifier:   26:C7:8D:90:E1:6E:80:7C:BA:37:DE:09:11:6B:C8:8B:39:EE:06:B6
Certificate issuer:       /CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
Certificate serial:       72B048777BF150463846587D47B0F857319A4530
Authority key identifier: 0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/3136382e3230352e3231342e302f32332d3332203d3e20323635333732.roa
Signing time:             Tue 23 Jul 2024 18:41:40 +0000
ROA not before:           Tue 23 Jul 2024 18:36:40 +0000
ROA not after:            Tue 22 Jul 2025 18:41:40 +0000
asID:                     265372
IP address blocks:        168.205.214.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b0:48:77:7b:f1:50:46:38:46:58:7d:47:b0:f8:57:31:9a:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AE67EC10E739E31803F160B7BA18F1C3B0141B6
        Validity
            Not Before: Jul 23 18:36:40 2024 GMT
            Not After : Jul 22 18:41:40 2025 GMT
        Subject: CN=26C78D90E16E807CBA37DE09116BC88B39EE06B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:57:82:75:24:eb:b2:e5:2f:d5:cc:ba:35:
                    15:26:b6:e7:bd:92:52:5a:a8:bc:f1:75:d4:7c:27:
                    da:42:78:99:c0:a8:8f:95:54:86:80:70:6f:71:cf:
                    f9:19:0d:e9:85:d6:8b:bc:8d:1c:53:de:39:c3:3d:
                    c3:58:df:c1:ac:42:87:fa:c4:64:53:c5:6c:ef:e7:
                    eb:a2:c4:03:96:c4:59:bf:9d:66:6f:84:a5:f8:7c:
                    bc:45:15:74:d7:1e:b4:26:e3:e1:36:ec:98:44:66:
                    74:40:79:69:48:cb:2c:86:4a:74:32:04:81:a6:d9:
                    54:9d:81:ac:9c:c3:24:8e:cd:17:09:61:ef:25:55:
                    01:02:ea:84:80:d7:45:b8:d9:62:4b:57:c5:94:48:
                    b1:f7:a4:9e:d0:92:58:ab:09:4e:cb:90:ff:37:bf:
                    e1:28:2e:ab:27:aa:d4:c0:59:d9:79:06:92:b5:92:
                    d1:c3:0a:d8:b1:c5:3a:d7:04:8f:96:7a:c0:bf:2e:
                    b5:b0:09:e3:ea:b9:e6:48:49:52:84:e4:e0:67:74:
                    17:c7:40:78:89:28:a6:6f:d0:b2:a7:07:ec:64:cb:
                    9c:9a:24:ca:0b:0c:6e:1b:0c:73:9d:a4:82:dc:90:
                    a4:b5:54:d9:3e:e2:6d:31:8b:7b:83:6d:43:34:9d:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C7:8D:90:E1:6E:80:7C:BA:37:DE:09:11:6B:C8:8B:39:EE:06:B6
            X509v3 Authority Key Identifier:
                keyid:0A:E6:7E:C1:0E:73:9E:31:80:3F:16:0B:7B:A1:8F:1C:3B:01:41:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AE67EC10E739E31803F160B7BA18F1C3B0141B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwDtQyxyZtBvCMmRScogAsdLnApbLe7uBhamz7QnS6G8/0/3136382e3230352e3231342e302f32332d3332203d3e20323635333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:a1:f5:13:7c:a9:c8:02:a8:43:b2:c9:8d:76:e6:aa:c0:
         d4:37:84:cc:ce:28:58:56:b8:96:aa:a3:06:4a:d5:7f:c5:16:
         01:8c:37:9c:02:80:f7:3d:71:a4:81:11:89:4a:17:4c:e7:1d:
         df:31:79:c3:1f:c8:18:e8:fe:9c:35:48:cd:63:a4:71:00:d6:
         67:36:fb:f5:ec:35:58:5a:e9:0d:fc:dd:af:92:10:77:e8:a1:
         3c:03:e6:03:a6:2b:65:1c:da:11:e6:16:0a:4f:7c:c6:aa:71:
         33:8b:0a:1d:92:2b:42:b2:67:6d:9c:8a:69:1d:c6:63:59:6b:
         20:00:c3:b5:49:e3:53:3d:d2:42:74:ae:f9:0c:94:d7:8d:91:
         c4:6d:d2:7f:6d:ba:0c:c6:c0:ba:b6:df:ce:f5:91:73:a5:38:
         db:f4:43:ad:3b:0b:31:37:f9:66:a8:4f:b8:6b:b8:2f:91:85:
         0e:92:36:1b:9c:7b:64:59:3c:b9:37:2b:f5:f9:c4:8e:5c:c9:
         42:1e:16:51:49:bb:2f:73:f7:4d:05:5c:55:b7:a5:a7:07:4c:
         b1:76:9e:7f:70:0b:a2:9c:eb:29:64:5a:0c:d9:96:3f:62:2c:
         b0:2a:50:b5:29:f5:50:62:1d:c0:86:87:c9:34:4f:34:2e:17:
         83:80:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:21 2025 by rpki-client