Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32342d3234203d3e20323635343637.roa
File:                     3136382e3139362e3233342e302f32342d3234203d3e20323635343637.roa (raw, json)
Hash identifier:          n/Ny8reY70WJwU+c05LBEVFT624o4N7SQ71plW1kVCk=
Subject key identifier:   51:AF:9C:3F:98:CB:61:C8:42:FC:62:6A:D9:E0:B8:22:19:33:39:57
Certificate issuer:       /CN=C01E06AE731531A6330570ED75B507D6A9514B6A
Certificate serial:       022E36228B7401D8188F8EB1D0085ECA8375E5AC
Authority key identifier: C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32342d3234203d3e20323635343637.roa
Signing time:             Thu 28 Nov 2024 16:54:48 +0000
ROA not before:           Thu 28 Nov 2024 16:49:48 +0000
ROA not after:            Thu 27 Nov 2025 16:54:48 +0000
asID:                     265467
IP address blocks:        168.196.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2e:36:22:8b:74:01:d8:18:8f:8e:b1:d0:08:5e:ca:83:75:e5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E06AE731531A6330570ED75B507D6A9514B6A
        Validity
            Not Before: Nov 28 16:49:48 2024 GMT
            Not After : Nov 27 16:54:48 2025 GMT
        Subject: CN=51AF9C3F98CB61C842FC626AD9E0B82219333957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:a1:86:cd:09:28:8d:c5:2f:12:1b:b7:9d:
                    57:ac:62:58:46:cd:09:4c:17:9d:d1:9e:31:61:59:
                    e4:ee:a0:bb:64:07:90:c7:e4:ab:c4:62:a7:d4:6d:
                    b1:fc:a2:fe:83:cc:aa:37:50:d0:72:33:98:8a:2b:
                    5b:c7:fb:ac:26:8b:e3:2f:b5:56:27:83:0d:3e:2c:
                    3f:a3:f9:da:51:a1:f5:17:32:72:78:4d:75:44:dc:
                    a1:e5:9c:3f:9e:e3:47:f1:47:21:4f:8c:9e:d4:84:
                    b5:e6:af:5f:96:e4:5c:a9:d7:b0:52:74:f2:98:76:
                    ca:29:85:c5:61:4e:19:88:10:43:79:65:0b:0c:33:
                    a1:8f:40:e9:78:31:25:19:a0:c0:7c:e2:ce:cd:48:
                    29:bd:c2:a8:c5:62:a8:bb:4f:b1:06:16:94:fb:67:
                    c2:c2:6b:61:7f:94:35:59:f7:32:11:c9:37:a5:ca:
                    e0:7d:40:1e:cb:29:98:bc:5a:8e:aa:46:d1:86:10:
                    76:06:e1:82:a7:d9:fd:87:df:96:b5:e4:98:8f:80:
                    a1:12:07:8f:ad:1f:7b:74:33:33:1c:f6:a1:43:23:
                    31:50:77:cb:52:5b:cc:ca:43:64:0d:a3:6b:21:93:
                    30:10:37:23:c8:8c:e9:ed:80:97:8e:8f:d6:a9:60:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AF:9C:3F:98:CB:61:C8:42:FC:62:6A:D9:E0:B8:22:19:33:39:57
            X509v3 Authority Key Identifier:
                keyid:C0:1E:06:AE:73:15:31:A6:33:05:70:ED:75:B5:07:D6:A9:51:4B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/C01E06AE731531A6330570ED75B507D6A9514B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01E06AE731531A6330570ED75B507D6A9514B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32342d3234203d3e20323635343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:59:78:fd:54:11:d9:1f:4e:f6:9f:cc:06:bb:58:0f:80:
         6e:cc:85:ad:2c:1c:81:19:50:45:6f:0c:38:5e:da:8c:0e:71:
         4f:8a:ff:27:d6:3b:04:f3:4b:aa:5a:6b:26:29:50:13:7e:af:
         c7:5d:50:44:8f:67:b8:29:44:da:d8:e6:42:95:87:a4:e8:5c:
         0f:84:21:77:e7:48:f4:0f:43:4f:2a:54:b2:72:ac:87:73:6c:
         8d:b8:7d:9f:09:c3:7d:77:1e:b6:f0:12:47:a7:be:0f:51:35:
         23:b2:da:30:68:74:14:15:a2:24:70:ba:58:e7:af:56:80:09:
         15:48:8d:1f:e0:35:35:1d:18:c8:f8:f1:d8:26:9b:b4:e1:e7:
         d2:ab:03:f9:9f:9d:18:58:cb:13:f9:f4:2d:a6:4e:42:cf:41:
         07:26:3f:e6:67:af:78:0f:b7:ce:2c:de:7b:55:af:8e:4c:8c:
         c3:e0:6c:a2:d3:55:10:5b:61:c7:f6:65:9e:40:d0:59:4e:10:
         4e:c6:cb:43:fe:df:e8:6b:ae:75:e5:2e:de:ac:41:99:17:57:
         91:44:d4:14:ab:fa:f4:27:87:c9:93:41:3b:35:c0:59:4c:df:
         86:0f:4c:77:81:57:1e:51:af:d7:68:18:8d:60:5a:92:df:56:
         06:1f:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:47:30 2025 by rpki-client