Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa
File:                     3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (raw, json)
Hash identifier:          aRD8zZnvB5ekrm1vtKkoydBHUKVDbhYlg2k5fX7hf8A=
Subject key identifier:   E3:6D:A0:AE:F8:B9:C1:D2:F3:FE:5F:2F:69:F8:68:62:1F:BE:75:98
Certificate issuer:       /CN=1BC7F4D885BA6381BB4AB613A65BC60075643F9A
Certificate serial:       143188F75D324504D2DEC82C71DF3ED0CE8EEF0C
Authority key identifier: 1B:C7:F4:D8:85:BA:63:81:BB:4A:B6:13:A6:5B:C6:00:75:64:3F:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa
Signing time:             Thu 12 Oct 2023 23:08:40 +0000
ROA not before:           Thu 12 Oct 2023 23:03:40 +0000
ROA not after:            Thu 10 Oct 2024 23:08:40 +0000
asID:                     265265
IP address blocks:        168.0.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:31:88:f7:5d:32:45:04:d2:de:c8:2c:71:df:3e:d0:ce:8e:ef:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC7F4D885BA6381BB4AB613A65BC60075643F9A
        Validity
            Not Before: Oct 12 23:03:40 2023 GMT
            Not After : Oct 10 23:08:40 2024 GMT
        Subject: CN=E36DA0AEF8B9C1D2F3FE5F2F69F868621FBE7598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:6a:0a:9c:0c:bc:d7:66:a6:53:37:23:54:
                    cd:57:f1:d2:b4:09:f3:b8:a8:ab:13:df:5d:15:07:
                    a7:a7:ed:76:c0:77:ef:e9:51:3e:65:dd:4c:93:08:
                    70:59:68:68:46:bd:d5:44:21:5a:64:e9:01:5a:25:
                    34:14:00:36:52:0b:2e:aa:d5:70:78:a1:f1:47:88:
                    f9:df:f0:7b:d7:1f:6d:45:dd:84:8a:65:78:98:61:
                    b7:11:bf:a1:45:f3:e0:ed:36:8a:8a:80:fd:44:89:
                    f7:f2:92:c8:97:a2:a9:9c:01:3b:d2:f0:13:5a:b0:
                    e4:31:e7:d7:da:8e:12:3d:56:38:ad:e5:00:13:84:
                    15:17:8b:87:61:96:d4:46:0a:b9:8b:b7:4c:9d:05:
                    a8:02:03:a4:6f:09:e1:aa:1b:66:65:f9:32:e9:3b:
                    34:27:c0:d2:1d:bf:8a:0b:ea:0e:cd:e6:0a:08:be:
                    c4:9d:c4:8a:a1:c5:95:02:09:b7:32:c1:a2:3f:f2:
                    31:c4:1f:3a:f7:e3:0f:66:e9:db:f5:d0:4e:88:71:
                    41:60:6f:15:0c:f9:ff:e5:82:f8:ec:80:b2:1d:cf:
                    6f:15:cd:14:44:81:22:4f:dc:84:d8:25:a3:e2:ea:
                    f7:00:82:8c:4a:19:de:fa:55:87:d4:69:03:fc:7d:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6D:A0:AE:F8:B9:C1:D2:F3:FE:5F:2F:69:F8:68:62:1F:BE:75:98
            X509v3 Authority Key Identifier:
                keyid:1B:C7:F4:D8:85:BA:63:81:BB:4A:B6:13:A6:5B:C6:00:75:64:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:16:48:08:e6:bf:98:15:cd:92:a5:e0:2f:e1:94:3a:c9:
         a5:1c:04:66:84:f7:3e:08:8b:c2:e6:c3:c9:9a:99:0e:9a:ee:
         fe:b7:44:bf:ae:88:86:6a:75:8a:30:14:cb:5a:c9:76:1f:0c:
         8e:02:e5:7e:dc:9b:a9:63:87:04:66:cf:f7:db:02:69:bd:f0:
         60:bb:11:aa:ac:3e:f7:a6:b5:9e:ff:f9:99:ad:3d:40:48:a4:
         c4:e1:c6:e8:43:d6:5c:79:47:7e:cf:f9:52:30:a4:ec:ab:1c:
         1c:58:7f:11:73:90:4e:29:9c:5f:e0:61:46:59:97:cc:73:fe:
         0a:ce:92:9c:67:17:a1:49:44:dd:37:88:f3:0a:aa:c6:4d:2e:
         dc:22:85:a4:69:68:98:1e:59:a9:e3:16:fd:bf:c7:24:b6:b8:
         cc:fb:25:06:1d:a8:75:ce:14:c8:18:9f:43:c5:cd:11:fa:27:
         5e:a5:d6:c9:59:b1:5f:ea:77:f0:c3:34:bc:93:d3:ba:2e:a4:
         2b:99:0f:38:b9:d0:3f:96:75:90:c6:00:89:87:4c:19:1b:17:
         d7:15:b8:7f:f4:43:7d:36:2e:fd:e7:d1:1e:af:37:8d:b5:f2:
         fd:1b:2a:4b:1e:42:b0:bb:d5:67:a2:97:69:43:26:02:b9:c2:
         43:1f:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:04 2025 by rpki-client