Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32332d3233203d3e20323635343637.roa
File:                     3136382e3139362e3233342e302f32332d3233203d3e20323635343637.roa (raw, json)
Hash identifier:          7A+M3kSY8ezIsYfxdHr3iKy9vWAXevQf94aC2Dg0pIo=
Subject key identifier:   97:94:96:08:50:BF:19:05:9E:0A:A5:5E:09:F1:CF:E9:2F:04:BE:F4
Certificate issuer:       /CN=C01E06AE731531A6330570ED75B507D6A9514B6A
Certificate serial:       3C081DD74CEDF096D86DD539386A4E23B8058FE6
Authority key identifier: C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32332d3233203d3e20323635343637.roa
Signing time:             Thu 28 Nov 2024 16:54:45 +0000
ROA not before:           Thu 28 Nov 2024 16:49:45 +0000
ROA not after:            Thu 27 Nov 2025 16:54:45 +0000
asID:                     265467
IP address blocks:        168.196.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:08:1d:d7:4c:ed:f0:96:d8:6d:d5:39:38:6a:4e:23:b8:05:8f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E06AE731531A6330570ED75B507D6A9514B6A
        Validity
            Not Before: Nov 28 16:49:45 2024 GMT
            Not After : Nov 27 16:54:45 2025 GMT
        Subject: CN=9794960850BF19059E0AA55E09F1CFE92F04BEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:85:4d:3a:2e:34:09:66:af:fb:e0:f0:56:
                    d0:96:19:a0:5d:66:b2:e4:f9:f7:80:3a:20:4b:db:
                    e7:7d:8f:bb:74:bd:69:b3:86:82:89:43:d3:52:80:
                    0a:1a:7b:bf:d7:6f:29:59:08:54:7f:d6:c2:ea:b4:
                    1b:f6:9e:0c:e3:ef:20:16:d7:58:2f:6d:6f:a5:e3:
                    5b:c2:c9:ac:11:ea:5d:c2:72:ee:27:51:59:b9:39:
                    00:64:cf:b4:2c:5a:ff:4b:17:d0:49:74:34:08:2c:
                    fa:83:4a:1d:09:ae:7a:b3:47:73:2f:4c:3c:ca:c0:
                    7f:f4:3b:cb:a3:64:10:9b:c6:6a:2c:57:99:ce:9d:
                    d3:08:2b:fa:72:3e:16:e7:49:a4:3c:d8:e3:85:63:
                    51:f9:15:b3:35:0c:48:08:2a:db:5f:ce:d5:ed:46:
                    77:ce:47:25:4d:d2:4e:72:d1:75:37:6d:e9:6a:82:
                    0d:02:82:15:19:88:9e:33:2e:f5:a8:69:f1:c0:8c:
                    13:e4:36:7e:f2:cc:ee:9c:64:13:36:74:12:b8:8d:
                    2d:46:03:a4:79:16:88:9a:17:ca:60:7b:8e:9b:e8:
                    f6:98:33:35:e8:e9:20:81:1c:19:d5:ae:21:06:91:
                    da:fa:e9:d4:11:e2:2d:77:56:c9:f1:af:f2:67:e8:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:94:96:08:50:BF:19:05:9E:0A:A5:5E:09:F1:CF:E9:2F:04:BE:F4
            X509v3 Authority Key Identifier:
                keyid:C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/C01E06AE731531A6330570ED75B507D6A9514B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32332d3233203d3e20323635343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:46:f7:4e:e3:55:1f:bc:84:26:eb:fb:98:97:01:2f:8a:
         a4:a5:30:bc:7f:67:f2:f0:8d:05:1d:e1:e2:1d:b4:fc:cc:76:
         f4:65:08:14:bc:db:44:86:03:52:9b:1e:dd:79:5f:08:66:5b:
         1e:c1:b4:7b:3a:2b:8a:03:b5:4b:1a:d2:b9:4e:cd:91:5d:0f:
         2e:de:58:3b:82:13:f0:bb:20:a2:64:19:38:49:d0:90:7e:d9:
         e5:90:b7:b7:f7:4a:ba:63:6e:53:6a:b5:bf:e1:fa:54:1d:57:
         f8:5f:e0:d5:39:b2:02:d6:33:80:e6:60:b8:86:09:24:66:6e:
         97:79:c1:f9:c9:bc:c4:05:49:dc:f0:36:61:7f:96:b5:97:64:
         c9:9e:f6:7e:36:9f:86:b0:dc:e1:19:d0:5b:70:b0:a9:0e:d4:
         23:ef:ad:b1:5a:47:37:c5:86:f5:a3:15:d8:93:f4:ff:04:14:
         af:d6:f4:e6:ad:60:ac:25:f6:13:98:b1:12:50:58:ee:7e:f2:
         bf:ec:b9:b9:d4:05:d7:bc:48:eb:7c:58:5d:9c:b3:64:8f:65:
         f7:6a:29:f2:9c:a9:52:da:93:1b:21:40:df:5f:a2:8c:96:0c:
         e3:79:36:18:be:7b:19:81:ec:2b:a7:12:62:95:d4:45:80:2a:
         3f:fd:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:42:52 2025 by rpki-client