Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233322e302f32342d3234203d3e203238333236.roa
File:                     3136382e3139362e3233322e302f32342d3234203d3e203238333236.roa (raw, json)
Hash identifier:          PRUeZo0Ime3qMdAMqRVRzAG2bUzgQ5gdqmfxdtH286E=
Subject key identifier:   00:1E:A7:EC:03:B7:DA:37:2C:EB:D0:12:5E:39:67:16:FE:40:8E:52
Certificate issuer:       /CN=C01E06AE731531A6330570ED75B507D6A9514B6A
Certificate serial:       48A13ADEEDF5A7B42BB664C6DF02F0ABC17249F3
Authority key identifier: C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233322e302f32342d3234203d3e203238333236.roa
Signing time:             Thu 28 Nov 2024 16:50:57 +0000
ROA not before:           Thu 28 Nov 2024 16:45:57 +0000
ROA not after:            Thu 27 Nov 2025 16:50:57 +0000
asID:                     28326
IP address blocks:        168.196.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a1:3a:de:ed:f5:a7:b4:2b:b6:64:c6:df:02:f0:ab:c1:72:49:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E06AE731531A6330570ED75B507D6A9514B6A
        Validity
            Not Before: Nov 28 16:45:57 2024 GMT
            Not After : Nov 27 16:50:57 2025 GMT
        Subject: CN=001EA7EC03B7DA372CEBD0125E396716FE408E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:75:ed:8d:b9:67:fa:f6:b1:60:e2:98:1e:
                    c8:14:8e:2d:d0:31:11:4f:93:e7:5e:0d:12:94:51:
                    78:12:9f:26:22:11:ca:ef:f7:d9:35:4e:c4:7e:7c:
                    14:9f:fe:4e:c3:c2:9d:05:cb:f8:25:f5:dc:1b:04:
                    fd:d8:36:10:83:0b:14:58:88:f5:b6:06:77:d0:e1:
                    0b:b4:18:8b:e6:c4:d4:25:0a:8f:8c:d7:4e:eb:0f:
                    01:df:44:bb:71:05:2b:f0:d7:1c:cf:62:6a:04:2a:
                    a2:03:9c:c8:37:10:af:89:6c:c4:47:be:22:36:13:
                    31:5a:82:06:3f:d7:14:a3:74:8a:4c:70:e1:e9:0e:
                    fd:0f:03:ec:21:42:61:0b:e5:e6:6e:c6:92:6f:e9:
                    2b:32:dc:0e:3a:64:a5:69:6b:46:a1:16:fb:11:2f:
                    bf:f6:08:df:a9:00:a1:90:4a:27:17:b9:24:df:ce:
                    81:b6:c1:1a:e2:55:5a:c3:d8:91:26:dc:6e:4e:2d:
                    fe:57:05:99:af:ad:e1:b2:20:db:f5:e9:2f:c9:ee:
                    6f:a2:63:72:19:ae:71:b3:e9:f7:88:bb:73:ce:6e:
                    a3:8e:07:86:55:05:9c:31:73:b7:b8:30:a1:fd:d5:
                    ea:c4:8f:ed:b3:ec:e6:de:93:4a:b2:85:7f:9d:2e:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1E:A7:EC:03:B7:DA:37:2C:EB:D0:12:5E:39:67:16:FE:40:8E:52
            X509v3 Authority Key Identifier:
                keyid:C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/C01E06AE731531A6330570ED75B507D6A9514B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233322e302f32342d3234203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:11:3c:1e:e1:e1:c6:9d:aa:1a:81:9b:b9:7e:e2:cf:35:98:
         82:c3:5c:e8:a2:f9:f1:1e:8a:28:84:ec:7d:b1:91:f2:71:5d:
         c5:b3:b3:86:a7:7b:f5:ea:2e:30:78:3b:ee:53:02:3c:42:4c:
         b6:ef:4a:53:68:ea:96:a4:27:7e:a1:6e:02:b2:2b:23:74:91:
         28:20:dd:3b:bc:96:8a:b3:b4:db:71:dc:cd:d1:3b:9f:59:cc:
         30:a5:84:7b:72:79:01:bd:5b:cf:6a:c0:00:1e:a5:d8:aa:42:
         fe:f5:46:8e:28:a6:95:56:56:7d:c7:af:a9:08:8e:54:a1:44:
         69:a7:3f:e1:d7:63:98:b2:2e:44:62:a4:c2:77:57:1e:35:d0:
         2b:9f:fb:f3:2f:94:ec:2e:1f:ec:53:ef:14:7a:b5:03:23:6e:
         94:93:0b:ad:12:c0:58:a3:9b:fd:34:f2:48:3f:f6:f2:f4:e9:
         9f:e1:17:fc:ef:51:dd:11:db:9d:0e:29:6e:65:c8:de:87:66:
         e8:7c:8b:aa:aa:85:b5:62:f0:e5:84:ca:7d:0a:32:2f:c8:37:
         65:7e:ab:df:23:c4:93:f1:a6:4a:ba:c9:cc:57:ac:18:d7:86:
         1d:51:8b:69:0a:77:36:df:7b:66:1d:f8:0c:83:60:46:1e:1f:
         a7:a3:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:50:05 2025 by rpki-client