Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135332e302f32342d3234203d3e20323632323933.roa
File:                     3136382e3233322e3135332e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          nVIR/uHPoP03HmBBGS5AFKo6cRKntE7BbqSsbggEDDc=
Subject key identifier:   B1:E4:12:79:C3:5D:89:03:49:70:88:CF:EA:E4:32:91:55:1D:A5:03
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       7957281834352CED6668BDA023E38CF3E1EB5BA6
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135332e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:40 +0000
ROA not before:           Tue 02 Jan 2024 21:11:40 +0000
ROA not after:            Tue 31 Dec 2024 21:16:40 +0000
asID:                     262293
IP address blocks:        168.232.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:57:28:18:34:35:2c:ed:66:68:bd:a0:23:e3:8c:f3:e1:eb:5b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:40 2024 GMT
            Not After : Dec 31 21:16:40 2024 GMT
        Subject: CN=B1E41279C35D8903497088CFEAE43291551DA503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:eb:cc:a4:d8:d2:29:ef:55:54:9f:d2:e7:
                    a6:73:0d:d5:1b:15:3d:ea:b9:6b:9b:75:af:ff:88:
                    9b:c5:58:aa:21:25:06:af:27:d9:a6:d3:ed:73:15:
                    70:f8:f3:bd:60:e8:4c:f0:7d:c7:61:27:79:6a:37:
                    fc:f4:92:82:e1:a8:ee:b9:4c:e3:06:1b:38:58:99:
                    a6:a1:eb:d9:3a:79:4f:78:19:f0:35:d7:f6:94:83:
                    ce:73:c7:fb:6a:8c:a5:e6:64:96:ce:21:d6:58:13:
                    74:7b:6e:a0:7d:ca:1a:0a:ff:1b:9f:fb:c9:ef:eb:
                    f2:a9:ad:c8:f0:9e:d2:38:b3:db:65:b4:83:41:0f:
                    6c:53:39:05:c5:20:7a:0b:2f:6c:87:b0:00:48:9d:
                    7b:9a:4b:96:b4:d0:ec:0d:5a:78:9c:bd:b2:c8:c7:
                    16:e4:53:98:30:dc:e7:9a:cf:38:99:a0:45:17:1c:
                    4a:e8:20:73:1c:47:f2:80:b1:69:2f:5a:60:84:58:
                    fd:bb:03:c8:1e:c8:4b:dc:88:1c:fe:e8:a5:84:70:
                    90:94:2f:80:2b:b5:cd:af:9d:f1:da:19:0b:f4:61:
                    19:b4:59:de:e4:f6:5f:2d:79:76:4b:44:e3:4d:3c:
                    02:95:73:8f:cd:10:07:75:b4:d0:81:9d:26:a3:a0:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E4:12:79:C3:5D:89:03:49:70:88:CF:EA:E4:32:91:55:1D:A5:03
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135332e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:f9:27:1d:7d:e3:c6:33:71:18:ac:2c:54:c8:5e:0f:71:
         4b:ad:84:4b:62:ef:2f:2f:ff:c7:21:7f:b3:ad:78:bf:9f:b3:
         32:60:24:cd:66:a7:5e:50:00:2f:75:a0:bd:a4:a5:6e:74:9a:
         95:b5:16:0c:fc:f5:82:2f:67:0f:4c:35:85:b2:46:a8:ca:90:
         8d:10:47:63:c5:8b:6e:37:f7:f7:75:36:a7:89:a1:00:b9:02:
         1a:87:d0:d9:f7:81:cd:3d:fc:73:56:db:02:58:36:82:40:10:
         69:b1:16:ba:47:ff:d5:18:b3:2d:c4:81:87:86:8e:06:53:49:
         8b:0d:53:01:c5:16:11:cb:ab:2a:e9:11:dc:47:dc:e2:05:f8:
         1c:80:9b:b9:09:d7:e4:a6:85:04:d8:12:be:7c:cf:31:9a:dc:
         a2:33:8c:b1:36:21:32:bd:cb:dc:fe:3b:8b:36:50:c2:82:c1:
         81:ef:5e:5e:a6:98:e1:a7:76:b6:a0:7d:bb:a9:3d:24:03:d2:
         a4:b5:6b:a3:19:dc:bd:16:a0:03:ee:73:70:c8:87:b3:9d:0c:
         ec:9a:c9:b3:08:3c:f1:33:b8:44:d8:22:90:a4:e8:a2:c5:ee:
         84:0c:97:91:df:c6:8c:b1:7c:09:c5:62:0f:09:86:0a:ba:ff:
         b4:0e:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:33 2025 by rpki-client