Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233322e302f32322d3232203d3e20323635343637.roa
File:                     3136382e3139362e3233322e302f32322d3232203d3e20323635343637.roa (raw, json)
Hash identifier:          AT+hlTFXMVo6Pcs7Oruuwztuke0n8S5egtwu8oFSB5A=
Subject key identifier:   5A:53:0A:AB:DC:A5:BD:1C:F0:37:0B:D9:8A:27:A8:83:3E:DA:0D:0D
Certificate issuer:       /CN=C01E06AE731531A6330570ED75B507D6A9514B6A
Certificate serial:       547D3B3D462FA69C78195C84DB6DAED583B382A0
Authority key identifier: C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233322e302f32322d3232203d3e20323635343637.roa
Signing time:             Wed 04 Dec 2024 17:25:52 +0000
ROA not before:           Wed 04 Dec 2024 17:20:52 +0000
ROA not after:            Wed 03 Dec 2025 17:25:52 +0000
asID:                     265467
IP address blocks:        168.196.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:3b:3d:46:2f:a6:9c:78:19:5c:84:db:6d:ae:d5:83:b3:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E06AE731531A6330570ED75B507D6A9514B6A
        Validity
            Not Before: Dec  4 17:20:52 2024 GMT
            Not After : Dec  3 17:25:52 2025 GMT
        Subject: CN=5A530AABDCA5BD1CF0370BD98A27A8833EDA0D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:64:a2:1d:8d:87:38:cc:5e:48:38:7b:9c:
                    9f:96:5f:de:c9:c1:40:fa:c3:ca:17:e6:d2:a1:95:
                    84:c5:e1:94:f8:31:4f:28:08:7c:80:fc:e5:ef:0a:
                    89:b8:8f:0e:69:ec:03:4f:21:c9:70:6c:ab:b8:44:
                    9b:2d:c9:25:9e:0f:b8:65:15:da:ac:28:c8:3d:34:
                    e0:da:98:1a:43:ce:ae:42:0b:e7:2f:39:0a:a1:a3:
                    d0:a3:75:e8:ee:d4:aa:86:78:22:f4:ed:05:17:b0:
                    bf:b9:c5:af:50:b5:dc:9c:ff:5c:c2:46:e7:23:47:
                    39:4b:28:c0:1b:65:92:2e:9f:01:85:24:1a:23:56:
                    22:5f:91:24:e3:37:76:4f:c4:9e:f6:6e:33:7c:92:
                    26:5f:af:fd:65:cd:b3:1b:0a:7b:9d:a1:f0:b6:ee:
                    17:7a:75:61:8e:de:1c:99:9f:95:09:1b:d0:ee:af:
                    c6:94:a5:32:c5:42:dc:fe:80:f3:8b:6d:04:85:ba:
                    36:9b:f2:3d:e5:95:72:f8:eb:62:8a:a9:13:3b:28:
                    52:ec:2f:94:26:f1:ee:00:8c:d7:26:64:c0:b5:ee:
                    58:72:17:a1:a3:af:71:ac:8c:43:17:8d:91:72:3c:
                    d1:6b:10:fb:11:9f:9d:73:1e:88:40:13:0c:94:bb:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:53:0A:AB:DC:A5:BD:1C:F0:37:0B:D9:8A:27:A8:83:3E:DA:0D:0D
            X509v3 Authority Key Identifier:
                keyid:C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/C01E06AE731531A6330570ED75B507D6A9514B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233322e302f32322d3232203d3e20323635343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:9a:96:35:7c:cf:8c:0e:0d:02:83:7c:b3:60:2f:9e:d8:
         bd:71:f4:e2:b6:55:2f:64:f6:9e:38:34:2e:96:96:c8:0b:02:
         14:5d:b1:51:1c:2c:e9:db:7b:a2:0e:ec:c7:bb:ce:00:8c:f4:
         47:4f:20:c9:b2:ce:eb:7b:88:8e:12:ca:cc:d5:bf:c0:1d:ff:
         a7:6f:cf:b7:ba:50:22:12:0e:f9:04:c8:93:09:05:30:46:0d:
         1b:29:68:a2:70:2c:c2:c9:cb:cc:4d:84:28:05:16:76:1e:6e:
         16:a8:5f:fe:7f:19:22:31:2f:6a:e6:c6:ce:64:4f:a0:de:2b:
         40:be:64:ea:74:c6:b0:b6:d3:2b:7a:86:4b:a4:71:e2:ac:64:
         07:22:bb:0c:97:16:3c:87:ae:a8:f3:cf:64:e7:c2:25:00:0f:
         88:ef:ed:81:66:79:b6:5c:72:e6:11:0d:b5:41:79:c8:ca:23:
         05:30:b0:62:f7:f9:e5:ea:9a:c3:9d:63:7a:d9:e5:e6:69:2f:
         02:92:98:f4:8d:4b:9a:dc:3a:a4:15:c1:28:2e:60:7c:28:ba:
         54:2e:5e:65:1c:3f:bf:59:eb:0a:49:85:22:eb:5d:c8:13:87:
         96:44:34:bf:f9:52:1f:c0:94:c2:11:21:82:62:93:7a:a3:ef:
         ee:ab:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:09 2025 by rpki-client