Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33382e302f32332d3233203d3e20323634333937.roa
File:                     3136342e3136332e33382e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          zhisE325v3R/sPTC4Ykw6wEmkSQabaEDhrXvVjn1GXM=
Subject key identifier:   43:36:70:6C:83:5C:4A:D9:06:4B:58:AF:04:6C:2F:68:82:AF:45:42
Certificate issuer:       /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial:       01B7BD7CBE5B949D7EC3E8CCAF11E71F6B7C56E5
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33382e302f32332d3233203d3e20323634333937.roa
Signing time:             Mon 16 Dec 2024 16:27:45 +0000
ROA not before:           Mon 16 Dec 2024 16:22:45 +0000
ROA not after:            Mon 15 Dec 2025 16:27:45 +0000
asID:                     264397
IP address blocks:        164.163.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b7:bd:7c:be:5b:94:9d:7e:c3:e8:cc:af:11:e7:1f:6b:7c:56:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
        Validity
            Not Before: Dec 16 16:22:45 2024 GMT
            Not After : Dec 15 16:27:45 2025 GMT
        Subject: CN=4336706C835C4AD9064B58AF046C2F6882AF4542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:bb:c2:a7:f5:01:37:9e:f3:c1:75:2e:b6:
                    2e:34:f9:63:fa:16:1e:34:8b:7e:36:60:9e:d0:04:
                    5d:f0:0e:84:00:d4:ed:9b:19:bb:3f:a6:b0:c8:f4:
                    ff:a3:e2:42:9e:34:8a:f2:c7:fa:69:9e:2b:c6:01:
                    b9:35:e0:45:23:25:f2:2c:67:ee:51:df:5a:e9:25:
                    09:3e:7f:62:c0:90:87:88:4d:9c:97:9b:c6:9f:f7:
                    9b:df:a3:b5:b2:94:1b:92:95:86:65:d4:02:26:51:
                    15:7d:ad:e3:c3:49:d5:4c:34:b9:d9:d0:eb:18:0b:
                    03:91:a7:c3:25:1d:88:a9:94:5e:b4:81:38:5f:82:
                    94:09:c0:04:e0:d0:6d:29:62:e3:fa:14:24:dc:0a:
                    21:aa:cb:90:f0:6a:2f:ab:b0:db:38:63:1d:79:2e:
                    77:b5:72:c3:20:eb:71:6c:4a:4d:ee:7c:e4:ff:98:
                    f4:d0:88:5c:b7:e2:dc:1d:69:61:b0:c2:50:72:e3:
                    ea:cb:15:d2:f1:f0:4e:1e:c3:c6:be:f7:05:aa:7a:
                    85:b3:6e:cf:9c:13:62:c5:d9:79:fb:b3:7c:cc:56:
                    e3:d1:c3:f2:1a:61:e7:8d:bd:61:ee:5e:e9:e6:92:
                    e3:a4:b5:2b:60:38:b1:e0:ea:96:93:3d:d3:d0:6a:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:36:70:6C:83:5C:4A:D9:06:4B:58:AF:04:6C:2F:68:82:AF:45:42
            X509v3 Authority Key Identifier:
                keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33382e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:e0:bc:57:d7:78:cd:05:ef:a1:9a:8d:a6:43:fc:9c:24:
         e6:eb:83:4c:41:ab:9a:38:94:bb:64:fc:f3:c8:8a:f8:9f:b9:
         98:c5:74:05:e2:04:78:78:2c:47:ff:3a:15:c8:d2:b4:9c:13:
         4d:61:f6:29:84:e4:99:b0:dd:31:de:86:5c:24:2b:e2:4d:f2:
         bd:3b:ec:c7:4f:84:d0:0e:af:dc:33:a9:aa:2d:75:17:e9:e6:
         49:32:5b:44:88:f8:b4:99:0e:af:03:b0:21:5b:24:38:19:d1:
         71:58:09:0a:44:30:f7:31:d3:16:d7:12:fd:bc:9a:3c:07:5c:
         3d:da:6f:ad:83:93:80:7c:67:ba:ef:8f:34:da:ce:7c:03:a8:
         03:6c:9f:0d:8d:d2:f3:23:97:e8:44:50:ce:f5:b1:ff:7b:16:
         1c:d3:08:0e:29:e5:61:f2:d4:db:c9:93:35:cd:d2:c3:93:97:
         70:bc:94:ca:15:d7:74:18:fc:6d:0b:3c:85:5b:df:84:2a:bd:
         c9:11:ac:46:90:6c:f2:f5:df:d8:b0:a1:98:b8:1f:8b:fa:29:
         2a:28:df:22:57:c1:34:d0:90:e1:0b:46:32:58:9d:3c:b0:c8:
         b3:b3:72:06:f4:6c:6b:c0:65:d4:b4:6a:0b:3d:7b:66:66:36:
         af:fd:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:24:57 2025 by rpki-client