Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa
File:                     3136382e302e3134342e302f32322d3234203d3e203532353630.roa (raw, json)
Hash identifier:          ST9dfqRBYOwkKmEOZvi7JlveHNtT9gX9UWdlBYmqb/c=
Subject key identifier:   A8:31:BD:F7:B4:02:73:CC:78:C7:3E:7D:9E:EA:E4:CC:AE:88:75:25
Certificate issuer:       /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial:       05F6093C14CC7A8E8C81D660795A35C3C2DA597F
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa
Signing time:             Thu 06 Mar 2025 04:45:39 +0000
ROA not before:           Thu 06 Mar 2025 04:40:39 +0000
ROA not after:            Thu 05 Mar 2026 04:45:39 +0000
asID:                     52560
IP address blocks:        168.0.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f6:09:3c:14:cc:7a:8e:8c:81:d6:60:79:5a:35:c3:c2:da:59:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
        Validity
            Not Before: Mar  6 04:40:39 2025 GMT
            Not After : Mar  5 04:45:39 2026 GMT
        Subject: CN=A831BDF7B40273CC78C73E7D9EEAE4CCAE887525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:2e:5c:69:69:07:ed:e7:ee:7b:0f:1d:31:
                    cd:42:f4:87:d1:6e:08:07:18:15:82:48:31:23:a2:
                    39:79:ca:1d:9f:d6:a6:31:fe:7f:1e:a1:db:28:6d:
                    57:9c:63:11:dc:bf:4c:b6:a7:11:cc:e2:04:ec:8a:
                    e7:dc:92:cf:98:53:c1:12:91:e4:72:82:a1:e8:76:
                    5c:da:f6:0f:c5:39:c3:83:49:9a:94:77:39:25:0d:
                    56:28:4a:2d:c2:59:85:31:4e:54:c4:5d:3d:f9:96:
                    fe:90:c4:5e:b1:20:b6:0d:6e:4d:b9:c7:7b:49:a2:
                    e4:25:f1:6b:31:fc:3e:6a:42:80:bf:1c:0e:42:fa:
                    28:6a:e2:5e:91:2c:95:48:76:e3:52:3b:c3:7f:6b:
                    a3:1e:0a:42:54:c1:2c:e3:f6:b0:e4:4b:60:a2:7e:
                    46:83:92:30:7e:67:6f:60:73:c7:27:42:40:c1:46:
                    0a:a1:b2:3c:ef:33:29:15:4d:bb:22:85:b6:70:16:
                    e8:b4:d9:74:72:31:dc:64:b9:80:f7:a9:b7:18:33:
                    12:a5:51:cb:a9:2d:47:a2:1e:54:dd:e6:01:7a:3c:
                    76:66:0f:d3:0d:17:e4:f8:f6:c8:d4:54:ef:cd:86:
                    b6:ca:85:a0:4d:29:46:a1:6a:42:00:16:29:11:aa:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:31:BD:F7:B4:02:73:CC:78:C7:3E:7D:9E:EA:E4:CC:AE:88:75:25
            X509v3 Authority Key Identifier:
                keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:e5:8d:13:61:a8:67:9a:31:f3:2f:e1:db:75:de:a9:38:
         f7:75:d8:75:ac:a9:48:6f:ed:55:74:d8:e5:e2:b6:87:a5:89:
         4d:5e:9b:f1:81:36:33:2a:c1:6f:63:23:7c:55:51:d0:c9:87:
         a6:e1:f8:bb:de:cb:57:23:04:9c:bc:f1:87:eb:f1:f2:38:d7:
         bb:89:eb:11:e9:1c:60:91:eb:e4:f8:f2:09:f4:b8:06:d5:35:
         27:12:9f:ba:95:6a:6b:06:fd:0c:6b:4b:f1:3e:dd:44:8b:9a:
         72:a1:62:83:e6:0c:c2:ce:10:67:9d:65:82:14:73:ef:93:76:
         9d:21:02:83:db:20:70:e8:b0:23:f2:59:7e:77:e9:bd:06:f8:
         1d:3c:43:f4:95:2a:65:f7:b3:de:f9:e0:16:68:d2:32:2d:4a:
         db:f5:a9:20:f9:e8:d7:38:23:76:e9:78:ae:58:f8:74:2a:3b:
         dc:59:d6:4a:83:e1:d6:c1:ca:87:43:01:77:fd:15:72:a5:9a:
         ac:c4:04:39:c4:71:59:75:a1:20:33:50:b4:e8:3e:30:76:a9:
         88:a3:f6:cd:06:aa:3c:43:ad:23:31:54:86:40:16:6b:32:42:
         44:33:f0:32:f3:bf:e0:d3:fa:63:1b:85:9c:bb:02:95:72:16:
         e0:37:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:38 2025 by rpki-client