Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa
File:                     3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          VRoRPMRWEp27oG7La7nsaV76lRGaljnF7MBhaD2SwHc=
Subject key identifier:   6D:B6:BC:B6:4F:F7:3D:08:5C:BF:21:AB:E3:FC:02:DB:1E:D9:C9:08
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       5A9354DA3BD260D334CB5DED2AE5BEBF88CC92EE
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 21:02:10 +0000
ROA not before:           Wed 12 Jul 2023 20:57:10 +0000
ROA not after:            Wed 10 Jul 2024 21:02:10 +0000
asID:                     263880
IP address blocks:        168.181.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:93:54:da:3b:d2:60:d3:34:cb:5d:ed:2a:e5:be:bf:88:cc:92:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:57:10 2023 GMT
            Not After : Jul 10 21:02:10 2024 GMT
        Subject: CN=6DB6BCB64FF73D085CBF21ABE3FC02DB1ED9C908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:95:04:64:4c:2a:23:9b:6c:6e:19:8e:f4:
                    e9:2f:3a:f4:64:b1:7d:b2:b6:09:f5:e0:e8:5a:3b:
                    aa:16:80:68:6c:84:7a:a1:bc:e1:6b:39:7d:a3:7d:
                    5d:1b:1f:64:4d:da:13:ba:3c:1c:2d:f8:48:9a:31:
                    50:10:d0:20:a2:3f:e4:ff:b1:70:60:76:6c:63:ba:
                    13:87:c0:0c:ff:36:54:39:98:50:3a:67:91:45:ff:
                    3b:69:df:77:1b:06:af:38:8c:1b:02:f5:41:01:a3:
                    d6:c4:2b:c1:7c:5c:41:65:1d:57:e2:8d:ea:67:ef:
                    17:8a:04:3c:b3:20:54:0f:59:48:44:80:b9:72:0d:
                    88:07:9d:7b:08:83:f7:17:09:00:df:50:62:48:86:
                    f4:ff:60:22:30:89:7b:e7:d8:a7:00:66:72:08:0e:
                    06:d3:9f:e6:6b:0c:a0:ea:ea:22:04:b8:32:39:44:
                    45:a3:28:6f:67:25:cf:39:8b:8e:75:0d:07:c3:a5:
                    e2:e6:e5:cd:32:66:1b:e2:35:18:21:31:f6:81:cf:
                    e3:66:45:de:7e:38:c5:86:f0:a2:bd:2b:22:24:e2:
                    96:c7:24:0b:70:03:87:dc:ae:39:73:32:ea:f3:53:
                    5d:71:02:f3:57:ac:4e:b5:2b:5f:73:f5:c6:4d:9a:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:BC:B6:4F:F7:3D:08:5C:BF:21:AB:E3:FC:02:DB:1E:D9:C9:08
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:04:e6:2f:ad:1e:5f:bd:9b:bf:af:27:ed:35:10:20:0c:f7:
         91:29:c6:85:60:73:96:5b:82:a2:92:57:5a:5f:8e:44:25:87:
         70:46:89:52:bb:bf:0e:49:e4:0e:db:df:6f:2c:28:c9:30:e7:
         d3:eb:17:4f:18:bc:6f:00:b5:55:dc:12:44:c0:70:b2:89:22:
         f1:2e:9e:f7:19:df:60:71:e8:27:e4:7a:2f:e6:80:48:ea:1f:
         63:2e:ab:ff:5b:5c:2b:9c:ef:a3:8c:c3:d0:f3:b8:7a:6d:31:
         1f:b6:65:f2:d4:3b:6e:0c:4d:43:8c:ff:d9:a2:6e:43:6c:c4:
         26:2c:92:f0:b2:47:15:1e:48:7d:73:84:02:2c:f0:17:fc:e4:
         cf:95:c1:db:d6:07:43:34:c2:24:f4:2e:8d:77:2f:59:92:4e:
         2a:80:91:62:14:b2:7b:13:80:73:bf:9a:3c:ff:80:f1:43:54:
         db:fe:d1:2c:98:de:10:a4:21:ff:f8:98:d4:d1:42:53:b1:91:
         86:1a:bf:94:1a:3d:3f:74:ce:ee:98:69:14:17:a4:dd:83:8d:
         3a:b0:66:3b:6d:f2:17:d4:d7:8a:fa:4b:39:61:da:03:d5:0c:
         7a:c9:1f:3b:fe:2b:1f:cf:de:d8:01:7d:8e:f7:09:c5:6d:7b:
         53:4e:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:12:53 2025 by rpki-client