Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa
File:                     3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa (raw, json)
Hash identifier:          jlLZZTwbD/BcamP+mTlEkXEL1H4ZSxjhB4T6kM8v5Rk=
Subject key identifier:   AF:8F:99:BE:B2:25:66:3F:C1:A3:EC:37:A1:50:5B:BB:44:62:16:73
Certificate issuer:       /CN=C6DA1975653C37ABF6AB07FCD8A28FA335B21404
Certificate serial:       5833657CFA3573B68A0581283BC829C487E9C84D
Authority key identifier: C6:DA:19:75:65:3C:37:AB:F6:AB:07:FC:D8:A2:8F:A3:35:B2:14:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6DA1975653C37ABF6AB07FCD8A28FA335B21404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa
Signing time:             Thu 02 May 2024 12:39:21 +0000
ROA not before:           Thu 02 May 2024 12:34:21 +0000
ROA not after:            Thu 01 May 2025 12:39:21 +0000
asID:                     264158
IP address blocks:        168.121.160.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:33:65:7c:fa:35:73:b6:8a:05:81:28:3b:c8:29:c4:87:e9:c8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6DA1975653C37ABF6AB07FCD8A28FA335B21404
        Validity
            Not Before: May  2 12:34:21 2024 GMT
            Not After : May  1 12:39:21 2025 GMT
        Subject: CN=AF8F99BEB225663FC1A3EC37A1505BBB44621673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:21:f5:a9:f6:93:88:73:b7:76:db:ad:1b:f2:
                    76:d8:cf:a6:bd:2f:2b:93:a9:81:0a:30:41:5f:df:
                    ef:59:71:11:89:fa:8d:dc:aa:47:3a:c0:2c:96:1b:
                    68:cd:9b:6e:bd:c3:bd:1a:4c:67:43:2a:9e:9c:31:
                    f9:7e:7a:22:b9:ce:f5:a4:a6:e0:64:c4:62:1f:07:
                    e6:65:be:a8:9d:b2:ed:90:34:06:07:12:34:a3:60:
                    f3:6d:b6:86:67:02:ba:7f:7c:36:30:d5:a1:90:e2:
                    15:91:cf:15:7d:0e:53:fd:39:47:61:8c:a5:98:e8:
                    ff:c6:ca:d4:14:f0:91:c0:22:26:8a:2f:5b:f8:d7:
                    09:be:a8:69:95:c7:30:e1:97:dc:c3:dd:90:e5:86:
                    91:7d:d6:2c:0e:1a:32:67:2a:49:e9:19:8f:12:e7:
                    4b:23:31:54:52:9b:24:0a:2f:c9:39:f0:77:57:67:
                    db:44:06:d3:10:ef:a2:ee:c1:89:1b:d6:73:bb:c4:
                    d2:ec:e6:06:08:a9:7c:cd:1f:6a:59:3a:b0:a7:26:
                    78:c2:8e:4a:05:6d:7d:6a:81:5e:f6:59:61:f5:8c:
                    e4:c1:af:05:c9:8c:f9:0a:41:9b:bd:0e:09:40:ba:
                    27:d1:a3:5a:8b:a0:5f:85:1a:89:b6:28:65:9c:26:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:99:BE:B2:25:66:3F:C1:A3:EC:37:A1:50:5B:BB:44:62:16:73
            X509v3 Authority Key Identifier:
                keyid:C6:DA:19:75:65:3C:37:AB:F6:AB:07:FC:D8:A2:8F:A3:35:B2:14:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/C6DA1975653C37ABF6AB07FCD8A28FA335B21404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6DA1975653C37ABF6AB07FCD8A28FA335B21404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:58:6a:82:4b:b9:8a:c5:22:a2:ea:e8:14:33:e8:cc:e0:b1:
         11:c3:1c:be:f8:e1:99:e6:d9:3e:28:63:59:57:c6:ed:56:ae:
         41:f9:9e:8b:af:3a:cf:09:19:6a:43:7a:62:ac:f5:64:15:0d:
         ea:14:b4:6d:ac:0d:bc:c2:db:e8:77:6b:b8:7e:d8:ce:78:c7:
         31:55:44:25:e1:2b:d6:8d:6a:49:91:64:7c:1e:f9:5f:3a:d5:
         5e:79:61:8a:98:a2:67:a3:18:b0:43:ae:35:8d:9d:2a:b0:12:
         f4:73:e0:e8:9b:56:86:31:5c:96:90:fd:1a:92:47:b2:f9:e1:
         72:a1:09:a9:14:d7:66:d9:07:a2:be:50:c9:d2:61:63:08:f2:
         e0:39:c8:74:97:2d:b4:6c:12:37:dc:2b:5c:b2:37:1f:6b:8d:
         25:77:b6:33:b0:76:07:50:35:a4:5c:4a:6a:63:73:29:7c:e8:
         82:34:bb:57:35:9f:f0:e1:17:90:cf:6e:73:66:59:02:ee:cd:
         f9:58:6e:f6:3d:e1:0d:a7:7c:c6:46:7c:c0:6c:e7:32:9c:0f:
         ff:5f:a7:b6:2d:c8:1a:35:46:b1:5b:4a:8e:33:d7:10:79:ae:
         a1:26:46:40:81:1e:19:45:f1:cc:c1:cb:29:a0:71:d8:1d:76:
         2b:57:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:09:01 2025 by rpki-client