Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa
File:                     3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa (raw, json)
Hash identifier:          57SiZPbE+1d8/YyyExZDWkjFg8LDzbVcqxaSMtxUVtQ=
Subject key identifier:   98:22:EF:A4:13:36:85:0F:D8:90:A1:F6:E8:F4:CB:CC:57:58:C9:ED
Certificate issuer:       /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial:       1FD90BA2086F5B95B732B9586B276E87C3F6F24A
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa
Signing time:             Mon 16 Dec 2024 16:27:46 +0000
ROA not before:           Mon 16 Dec 2024 16:22:46 +0000
ROA not after:            Mon 15 Dec 2025 16:27:46 +0000
asID:                     264397
IP address blocks:        164.163.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d9:0b:a2:08:6f:5b:95:b7:32:b9:58:6b:27:6e:87:c3:f6:f2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
        Validity
            Not Before: Dec 16 16:22:46 2024 GMT
            Not After : Dec 15 16:27:46 2025 GMT
        Subject: CN=9822EFA41336850FD890A1F6E8F4CBCC5758C9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:23:6c:9c:b4:09:ee:03:6b:85:bd:98:a3:
                    2f:79:e9:6d:59:67:a5:dc:8c:7c:f2:6c:92:87:72:
                    12:97:d9:a7:f7:5c:57:51:9b:ee:fa:af:43:b3:74:
                    3d:7a:c5:46:50:71:f3:c2:5e:1e:2f:8d:d0:b3:ec:
                    dd:c2:2e:63:fa:28:be:1d:43:44:53:be:5b:ad:ac:
                    48:62:28:df:af:bf:5c:d6:dc:85:5e:ad:4d:92:3e:
                    83:cf:8a:29:c3:9f:1e:d9:cc:79:02:31:10:d6:39:
                    1d:19:1b:d0:6c:46:8f:28:58:ef:7a:66:b2:b9:bd:
                    e6:fd:a4:f6:68:53:c3:a2:ba:0c:1a:aa:85:47:01:
                    57:3b:a4:ef:fa:14:90:bf:87:b0:1e:f0:be:9c:ed:
                    2f:d1:f7:f1:e5:a3:2a:9c:49:62:cf:d8:4e:fe:a3:
                    59:3c:bb:21:8b:cd:14:ba:9f:d8:56:72:26:65:fd:
                    d5:3b:51:6f:d1:ec:7d:f7:8f:50:3c:61:fc:c7:fc:
                    58:7e:9e:5d:b1:ac:8e:5e:d7:8d:91:ca:75:d3:76:
                    0b:1e:c6:7a:de:e2:e0:2f:01:c9:39:48:7d:e0:92:
                    59:38:18:78:31:35:6c:c9:7e:54:39:67:e2:14:6a:
                    94:ec:bb:42:a3:fa:cd:22:fd:e3:de:2a:cf:c2:31:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:EF:A4:13:36:85:0F:D8:90:A1:F6:E8:F4:CB:CC:57:58:C9:ED
            X509v3 Authority Key Identifier:
                keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:6c:d8:54:8f:07:5b:51:a8:a4:09:ac:98:7b:8c:ef:6a:
         34:88:27:92:ee:62:60:77:34:2c:30:a5:dd:f2:84:c6:c4:70:
         55:69:78:1f:44:16:23:ff:90:01:d4:96:42:7b:b3:7a:64:ba:
         59:87:e6:70:9e:ff:d0:08:bd:79:10:9e:11:e5:d4:66:e1:b5:
         e5:f9:1c:d3:c1:2a:ff:35:5c:41:9d:22:b2:e3:22:3b:7b:97:
         d6:35:9f:80:3e:15:c8:08:68:09:e9:4b:13:73:0b:bf:b3:91:
         a1:c9:75:b9:3f:a5:f3:6c:4a:d1:ef:20:9b:39:8c:4b:c9:fe:
         18:0f:37:d4:6d:53:db:d0:8e:77:aa:b0:4a:86:de:aa:c5:24:
         9c:6e:f8:81:02:af:c6:77:0d:5b:31:1f:db:18:3b:83:03:b2:
         1d:71:0c:92:cb:04:eb:4d:39:70:11:26:54:c2:9c:d2:6f:37:
         c0:76:04:a2:e1:76:1f:2b:d5:74:7a:05:1b:80:2d:c5:80:ee:
         7f:70:92:69:89:d4:cc:7b:6a:93:71:a0:ca:c2:c0:77:8c:ad:
         01:58:35:b7:c9:dc:7b:cb:55:59:fd:a5:c0:62:88:65:57:cd:
         06:94:bb:e8:dd:56:62:0a:83:f4:2a:75:0a:b7:58:9e:f8:eb:
         86:69:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:25:00 2025 by rpki-client