Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa
File:                     3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (raw, json)
Hash identifier:          hhswxdQuWXI7cs+q3qHV4QAH14en2JONHGOIB06J8zc=
Subject key identifier:   B6:69:DB:57:90:F1:1C:67:21:63:51:3B:49:C3:EF:48:B2:95:09:84
Certificate issuer:       /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial:       73C5FD893EE5EC0701CBB39ACB8CCE8914EF59C8
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa
Signing time:             Thu 06 Mar 2025 23:46:07 +0000
ROA not before:           Thu 06 Mar 2025 23:41:07 +0000
ROA not after:            Thu 05 Mar 2026 23:46:07 +0000
asID:                     265265
IP address blocks:        168.0.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c5:fd:89:3e:e5:ec:07:01:cb:b3:9a:cb:8c:ce:89:14:ef:59:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
        Validity
            Not Before: Mar  6 23:41:07 2025 GMT
            Not After : Mar  5 23:46:07 2026 GMT
        Subject: CN=B669DB5790F11C672163513B49C3EF48B2950984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:71:e3:e7:44:ac:04:3a:0e:ea:0c:d1:99:
                    5e:26:d6:d6:12:1a:49:8f:59:e5:d3:c2:01:f5:77:
                    85:0e:1d:fb:6f:2f:c9:52:4c:cf:c4:05:21:9b:92:
                    e2:02:ac:3b:30:51:33:9f:97:ce:e5:43:63:11:a0:
                    7f:8b:5a:a1:bd:09:2e:b6:7c:68:86:c3:2e:d9:bd:
                    b1:4a:d7:48:59:6c:b7:5a:f0:25:33:bd:29:e6:03:
                    7e:0b:7b:fc:35:43:1a:8e:d9:f3:85:d3:5d:78:4e:
                    38:55:fa:2c:84:d0:39:ad:5b:a5:3b:c0:70:87:29:
                    7a:fa:ca:6e:75:23:43:c7:3b:30:67:95:d8:f6:5f:
                    cc:7c:e9:00:39:9f:55:99:79:36:68:6a:6d:7e:01:
                    d1:ea:ea:10:e6:b4:50:3a:ac:bd:54:2c:27:76:5b:
                    82:07:8d:18:9e:77:96:b0:e2:62:0c:94:d3:5a:94:
                    98:48:dc:e0:6a:87:74:35:6a:25:5f:6a:00:13:d9:
                    b4:16:5f:3f:75:ec:c2:e9:83:06:55:99:86:1a:ec:
                    eb:5f:ea:29:74:ba:ec:09:6d:a3:aa:32:1e:b0:9e:
                    7c:d2:c8:aa:9f:df:fb:f9:d1:d0:30:06:07:eb:20:
                    f3:ee:9c:f3:18:07:fe:ec:b2:49:4c:ec:98:3e:73:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:DB:57:90:F1:1C:67:21:63:51:3B:49:C3:EF:48:B2:95:09:84
            X509v3 Authority Key Identifier:
                keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/3136382e302e3139362e302f32322d3234203d3e20323635323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:ae:32:27:99:25:5b:39:d0:b4:69:47:5e:54:58:48:eb:4c:
         e2:dd:36:c7:76:81:71:d4:10:87:dd:e2:bd:dd:72:7b:17:6c:
         83:52:3a:79:8a:ca:88:fb:dc:8d:b5:03:97:21:eb:17:7f:8b:
         48:3c:bc:d0:af:2c:57:eb:2c:c2:09:4c:de:a2:44:9b:99:3e:
         97:82:35:ed:0e:b0:7d:24:d3:e1:ab:75:2b:58:3c:c4:7d:c9:
         58:08:d4:d3:52:41:f1:4f:7c:70:9c:7d:02:55:b4:b7:9f:f0:
         59:38:85:5c:97:a6:be:71:7e:ee:35:6d:2d:c9:e5:a3:a5:1e:
         64:da:c2:1e:fb:5a:10:bb:51:2e:46:d0:a3:36:b5:07:ab:7a:
         c6:05:f0:18:36:3f:f7:82:4f:e4:92:a3:32:41:6f:30:9a:e6:
         21:be:a9:00:9e:1e:63:34:17:5e:5e:4f:30:14:f2:bb:2b:04:
         5c:05:2e:90:9a:bf:09:15:37:fb:9d:a5:0d:23:22:2e:a1:91:
         b0:54:64:a5:a3:92:c4:50:a6:0f:46:53:04:c6:2a:8f:99:1a:
         6a:d9:43:3e:f1:b3:e2:71:51:94:1f:e8:de:b3:44:0b:83:0d:
         fb:5c:8b:48:75:55:9b:f6:36:96:ca:42:56:5c:8a:30:5d:73:
         dc:6e:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:21 2025 by rpki-client