Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36362e302f32332d3233203d3e20323632393739.roa
File:                     3136382e3139372e36362e302f32332d3233203d3e20323632393739.roa (raw, json)
Hash identifier:          Ka2iFikCxE09cR77YJR4+CShxNOeMqxd145R/q2b3yI=
Subject key identifier:   47:59:A2:A4:E8:03:7D:57:9D:73:B5:56:82:09:16:06:73:EB:8E:A5
Certificate issuer:       /CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
Certificate serial:       2C82486AD87E902BE7549814D72AAD761A75C877
Authority key identifier: E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36362e302f32332d3233203d3e20323632393739.roa
Signing time:             Mon 10 Jul 2023 12:51:59 +0000
ROA not before:           Mon 10 Jul 2023 12:46:59 +0000
ROA not after:            Mon 08 Jul 2024 12:51:59 +0000
asID:                     262979
IP address blocks:        168.197.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:48:6a:d8:7e:90:2b:e7:54:98:14:d7:2a:ad:76:1a:75:c8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
        Validity
            Not Before: Jul 10 12:46:59 2023 GMT
            Not After : Jul  8 12:51:59 2024 GMT
        Subject: CN=4759A2A4E8037D579D73B5568209160673EB8EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:d1:bc:94:7f:8a:7f:c0:9b:a0:6e:32:a7:
                    3a:b1:8c:e9:cf:11:8c:24:27:71:43:56:d7:a1:1e:
                    4c:fb:87:e2:31:23:ab:40:4e:b0:fb:b7:fe:bf:40:
                    b7:8b:11:66:0f:a9:48:62:d5:ac:f4:b0:ad:f3:db:
                    32:57:4c:17:62:01:8a:e1:9f:6f:a1:af:c1:29:b6:
                    89:e5:4c:b3:68:3d:d8:5e:3a:c9:7c:86:93:2b:7f:
                    91:f9:bd:38:9f:eb:db:c0:a3:b0:6a:dc:28:7e:66:
                    86:03:69:31:29:3a:5f:93:aa:8a:8c:88:82:3c:a3:
                    71:5d:17:48:a3:4f:d5:c1:d1:df:b2:ca:d6:98:50:
                    f4:bf:81:63:86:bc:c7:c5:12:b9:22:7d:53:f3:51:
                    b0:3b:cd:87:c9:25:85:9a:cc:ac:0d:83:02:8d:ec:
                    5e:42:bf:8d:40:72:c6:41:06:46:31:18:7c:d8:12:
                    62:bb:8d:2f:36:39:2b:1e:46:ec:91:e2:53:7e:5d:
                    97:35:7a:5a:98:a1:07:5d:6e:0f:dc:14:5b:74:da:
                    91:ee:c4:04:b2:a5:0c:c1:c4:2e:27:9d:cc:65:47:
                    6a:a5:ed:ac:78:e4:a6:ae:c7:23:df:be:54:1b:c1:
                    d4:70:75:c8:2e:73:70:97:2c:7b:d6:12:e6:4e:0f:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:59:A2:A4:E8:03:7D:57:9D:73:B5:56:82:09:16:06:73:EB:8E:A5
            X509v3 Authority Key Identifier:
                keyid:E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36362e302f32332d3233203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:e2:42:7c:08:b5:5c:15:3f:41:9b:ec:68:5a:64:6b:b3:
         4a:7c:28:6c:d1:36:08:4f:13:15:28:3f:9e:4c:b9:70:db:53:
         54:eb:4b:46:ba:74:f0:d7:52:15:e4:5d:42:31:db:c6:68:c1:
         83:83:37:45:62:f6:d4:cc:be:7f:8e:e2:2e:5c:30:8e:e5:cf:
         41:05:bf:18:85:81:83:ed:94:ea:3f:a8:09:dc:c9:de:2e:f5:
         74:eb:cd:42:22:7f:89:89:11:6a:49:2d:b6:61:b3:4d:5c:1c:
         a7:b0:f7:03:4c:ab:7f:b2:3f:9e:48:3b:5e:91:71:96:65:85:
         15:53:c9:58:c5:7c:e7:7c:41:53:8b:96:eb:1f:b5:67:5f:df:
         ca:fd:87:ce:62:2c:ed:18:3b:3e:83:a6:0e:79:3d:97:08:45:
         4e:68:f2:c6:2c:71:d0:ca:72:96:0c:41:db:54:f8:75:a2:1d:
         2d:95:c7:9a:9b:4b:e9:f5:d8:8c:29:6b:4c:57:bc:49:46:99:
         01:30:53:d0:e6:0e:30:ce:d9:52:9b:29:5e:e4:00:0f:ef:05:
         1b:4c:68:fc:12:60:55:1e:8d:33:43:f3:f0:70:10:0d:b6:84:
         0c:1a:3c:92:03:69:d8:8b:c9:6e:32:a6:bf:d7:8c:19:b6:32:
         86:75:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:24 2025 by rpki-client