Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36392e302f32342d3234203d3e20323635333030.roa
File:                     3136382e3132312e36392e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          wudVrKOXFt2dlLAidNZWAG6Wt7Rs/diCis7AsB1TfT0=
Subject key identifier:   D3:57:99:DB:B5:EF:9F:71:F0:5E:07:37:3A:2B:7C:45:53:71:1F:C9
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       74965C9953F67EA55EB4FAD1850D5C2AB81966A7
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36392e302f32342d3234203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:09 +0000
ROA not before:           Wed 18 Dec 2024 04:06:09 +0000
ROA not after:            Wed 17 Dec 2025 04:11:09 +0000
asID:                     265300
IP address blocks:        168.121.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:96:5c:99:53:f6:7e:a5:5e:b4:fa:d1:85:0d:5c:2a:b8:19:66:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:09 2024 GMT
            Not After : Dec 17 04:11:09 2025 GMT
        Subject: CN=D35799DBB5EF9F71F05E07373A2B7C4553711FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:5d:21:74:69:62:b2:52:7d:a6:91:68:c2:
                    86:9c:7e:90:e0:3e:2a:d3:4f:a2:62:77:12:22:2c:
                    71:5c:e4:7f:15:e7:58:af:e3:32:f0:42:0d:6d:e5:
                    7b:3d:5a:7c:b0:a9:ca:2a:f2:1a:23:47:87:6a:2b:
                    a2:e0:35:a6:9f:b5:f8:fb:77:9e:bf:b0:3e:d2:da:
                    cc:c4:ef:b0:d3:35:7b:f2:ef:ed:4b:25:58:dd:b2:
                    12:6d:a1:a2:43:63:96:c0:e5:56:10:42:3c:a7:78:
                    bc:f3:b8:d8:c1:9f:99:ed:c4:73:8e:8d:4a:9e:de:
                    25:90:eb:07:66:f0:c2:61:79:e0:3e:76:68:75:c8:
                    a9:30:13:e7:8a:4a:9d:f2:e5:4e:71:78:b5:d3:1e:
                    02:aa:7c:d0:f9:45:20:82:1f:7a:12:c3:7d:0a:52:
                    6d:da:91:da:89:c3:36:e8:d1:13:f1:3b:11:b8:fe:
                    46:eb:5b:5b:7b:7d:9d:29:ca:fe:ec:8c:9c:fc:45:
                    65:f1:f0:17:b0:a9:09:16:36:6f:6d:5e:7f:0b:4b:
                    0f:ec:03:72:97:c1:f0:af:ae:cf:f9:18:ed:4d:54:
                    63:d1:9b:d5:b5:a0:c4:d7:63:de:ec:f9:03:db:b8:
                    51:2d:9c:8e:4a:a2:dd:5e:6f:12:22:aa:87:3c:f7:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:99:DB:B5:EF:9F:71:F0:5E:07:37:3A:2B:7C:45:53:71:1F:C9
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36392e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:03:ed:34:ba:75:ef:30:ca:81:60:8f:e0:ed:cd:42:bb:
         79:cd:ae:7a:d7:0d:56:ed:91:25:eb:8b:ba:83:cd:67:07:8c:
         7b:42:4d:43:7b:9a:0e:a8:ea:46:25:aa:ff:3a:7f:fe:c6:2a:
         4f:7a:42:57:f7:48:0a:9c:92:49:4f:55:5a:a5:18:41:09:31:
         75:f4:fc:e2:14:26:c5:8c:46:1e:cc:c3:d6:19:e4:33:3a:46:
         60:a9:0b:d5:2e:57:5e:5a:c5:71:9a:17:1c:f9:aa:8c:df:86:
         cb:c0:df:a9:7f:d8:d2:d3:f4:80:4f:c0:70:3e:96:69:39:21:
         c3:e6:0b:f6:60:68:62:a5:9c:b1:9f:a9:ad:1d:43:32:25:71:
         b9:d4:21:b7:30:02:bc:e6:20:12:f9:8f:43:15:da:19:f9:c0:
         ea:5d:39:20:48:97:ab:26:11:ca:4c:f9:59:47:fd:24:d1:86:
         86:f7:29:cc:34:35:47:d1:cf:72:6f:71:ca:27:37:c9:e4:96:
         ec:6b:2d:df:a7:d3:0e:67:bf:df:40:6c:4b:87:3f:ed:3a:95:
         88:dd:de:d0:72:73:ba:f6:a1:41:97:8d:e1:c3:8f:35:fb:48:
         73:7a:a4:1b:d4:8c:30:df:85:de:9e:28:07:6a:fd:01:43:39:
         17:27:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:46:17 2025 by rpki-client