Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36342e302f32342d3234203d3e20323632393739.roa
File:                     3136382e3139372e36342e302f32342d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          t6YqcaOtEw960XxLWTWkcoQ3zU27oTzZkbGtrqFcp+k=
Subject key identifier:   B5:1B:32:56:7F:81:BF:6F:30:0F:24:F3:FE:F6:16:C2:8C:A1:01:BC
Certificate issuer:       /CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
Certificate serial:       47AAA054C9A3D7D5A5B43D5671FF1F6C96807046
Authority key identifier: E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36342e302f32342d3234203d3e20323632393739.roa
Signing time:             Mon 10 Jul 2023 12:52:02 +0000
ROA not before:           Mon 10 Jul 2023 12:47:02 +0000
ROA not after:            Mon 08 Jul 2024 12:52:02 +0000
asID:                     262979
IP address blocks:        168.197.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:a0:54:c9:a3:d7:d5:a5:b4:3d:56:71:ff:1f:6c:96:80:70:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
        Validity
            Not Before: Jul 10 12:47:02 2023 GMT
            Not After : Jul  8 12:52:02 2024 GMT
        Subject: CN=B51B32567F81BF6F300F24F3FEF616C28CA101BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:32:7f:b5:13:5c:6b:0e:5f:45:13:a8:75:
                    4d:41:18:e2:2c:0c:3c:f6:5f:8b:f6:22:4c:30:6e:
                    fc:51:5f:2e:11:e3:f2:14:69:03:f6:2e:7b:5d:65:
                    f3:c9:9d:b3:68:0a:c8:bc:01:58:73:8d:ef:40:71:
                    46:6b:2e:8d:00:cb:95:90:dd:60:ff:53:da:b0:f0:
                    1b:cb:81:eb:fd:bb:06:87:92:af:7d:35:70:5a:5e:
                    a8:e7:e1:ed:05:6d:ec:b0:2a:bb:b1:e8:ba:6f:a4:
                    53:a6:0e:ad:38:bb:22:a6:68:bb:75:60:48:cc:03:
                    d7:e6:ca:a0:e7:fe:34:a2:d1:16:34:d2:e3:04:32:
                    90:dd:f0:bc:cb:66:ac:ea:6d:ca:0e:7e:6c:e8:36:
                    88:a0:d1:14:44:d5:15:82:79:e0:ce:4c:d9:40:13:
                    08:09:10:69:89:9d:81:e2:27:83:1e:2a:e3:36:ec:
                    4d:97:89:1a:19:25:27:bb:a4:1d:74:19:ee:78:2c:
                    ee:26:13:1d:56:6c:83:52:cf:be:1f:78:35:1f:c4:
                    d1:3c:98:43:8c:c8:25:06:8f:f6:aa:b3:13:cc:63:
                    df:87:4a:bb:e3:12:61:43:00:f6:fb:25:07:07:5f:
                    f6:dd:dd:9e:4e:35:4c:d1:57:8c:15:cf:ae:e7:13:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1B:32:56:7F:81:BF:6F:30:0F:24:F3:FE:F6:16:C2:8C:A1:01:BC
            X509v3 Authority Key Identifier:
                keyid:E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36342e302f32342d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:a6:97:07:b0:80:57:79:f6:07:45:a5:78:b5:0c:dd:80:
         59:63:56:f6:90:79:e3:e1:70:58:ce:be:06:44:e2:39:6d:f8:
         8b:fd:a1:0f:23:f4:47:83:57:3d:22:f3:ca:15:20:64:0d:b0:
         71:c0:ea:3c:6c:ac:cc:e1:96:c4:a9:19:c8:c6:78:9c:ee:8c:
         4d:17:5c:74:5e:e7:0f:de:00:1a:fc:f0:5f:7c:fd:e4:ed:5a:
         17:e4:d1:41:b7:d3:20:b8:6f:fd:a8:00:ff:dc:6b:bc:b7:35:
         0a:1a:a0:0b:e6:d7:37:da:ea:39:14:61:16:b4:56:9f:26:dc:
         bb:a2:3b:a9:b4:da:7f:51:e3:75:dd:46:f1:e8:38:a7:d8:8f:
         98:80:28:35:94:9b:7e:35:96:d6:f9:ba:92:bb:d6:fb:93:35:
         75:51:a7:08:97:05:61:1e:25:37:43:cd:b7:b6:a5:0b:48:0f:
         45:35:2d:dc:41:76:a7:f8:c6:90:74:1a:3c:d8:54:7b:69:81:
         e6:b7:58:e1:01:54:cf:9a:e9:e2:dd:c0:99:f8:0c:36:41:68:
         cc:11:cd:e3:53:51:17:8b:96:9e:c6:4d:40:cf:52:5c:94:5d:
         ec:1c:1a:bf:0b:ab:ae:e5:df:30:45:d0:3e:16:3d:be:e1:ab:
         e7:70:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:04 2025 by rpki-client