Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa
File:                     3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa (raw, json)
Hash identifier:          ZIg4DSZ7eLrOXrjdgwf0rVnr7rAoqemRNQJfj+BHyqw=
Subject key identifier:   1C:9B:04:0C:D7:CA:8D:0B:2A:87:EF:A2:AF:C0:58:0B:BB:12:57:33
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       06188D0E7F0F8BC5AD4719782F59741BFA8696C8
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa
Signing time:             Mon 23 Oct 2023 18:25:22 +0000
ROA not before:           Mon 23 Oct 2023 18:20:22 +0000
ROA not after:            Mon 21 Oct 2024 18:25:22 +0000
asID:                     265447
IP address blocks:        168.196.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:18:8d:0e:7f:0f:8b:c5:ad:47:19:78:2f:59:74:1b:fa:86:96:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:22 2023 GMT
            Not After : Oct 21 18:25:22 2024 GMT
        Subject: CN=1C9B040CD7CA8D0B2A87EFA2AFC0580BBB125733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:bd:44:65:68:1f:c9:c3:1e:6f:7d:d4:5e:
                    4c:d9:d6:49:b3:23:cb:de:0a:ea:53:f6:52:2c:5a:
                    68:14:da:d4:aa:5e:47:35:d5:f1:38:2b:78:12:de:
                    97:33:87:fe:50:62:16:e5:77:7e:73:5e:41:f8:f5:
                    7d:df:d2:94:95:cf:07:9f:88:61:e9:6d:f5:e7:9c:
                    52:25:b6:97:b5:f2:a0:40:50:05:08:6f:7f:15:ca:
                    aa:13:98:16:2a:c5:15:48:02:44:42:37:9e:72:5a:
                    d2:93:43:80:9b:36:29:88:37:17:09:70:de:74:be:
                    a7:8c:a8:a5:01:e0:3e:c1:db:90:f1:15:f1:90:80:
                    4e:fc:00:d2:79:7b:c3:c9:e8:6c:78:2c:34:89:ec:
                    31:d8:39:f4:fb:36:cc:96:a6:65:93:7e:1d:e6:bc:
                    2a:a3:c9:ae:be:c1:ec:82:22:5a:35:a9:4d:20:49:
                    c7:5b:6e:b3:cf:3b:9e:df:c1:e6:5a:05:4a:86:8b:
                    a5:a4:d1:94:76:9e:8d:a6:c0:f7:69:c0:44:4b:c2:
                    4a:58:ed:09:30:79:98:28:3c:d1:e3:bb:9c:d0:2f:
                    88:4f:8d:6c:3e:22:ac:c3:42:6e:43:eb:0f:09:7d:
                    1f:c3:f9:05:0f:08:8b:15:b7:d1:23:4b:c6:3e:91:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9B:04:0C:D7:CA:8D:0B:2A:87:EF:A2:AF:C0:58:0B:BB:12:57:33
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38362e302f32332d3233203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:06:c6:51:9c:44:d9:cf:ae:1a:74:95:3f:6a:53:c6:79:
         e6:52:bd:29:ad:ed:1b:9a:ad:6f:7f:52:b9:a1:67:41:f8:e0:
         de:19:ca:95:33:4b:0a:c0:ed:99:e1:07:93:58:97:cf:0e:58:
         32:5c:5c:86:0e:0c:4e:1c:1e:83:a1:e3:85:93:75:b5:e0:83:
         d5:61:4b:8c:aa:db:3c:17:9e:c2:99:7c:43:dd:09:23:97:c8:
         af:0d:b3:ef:54:37:48:f2:02:fd:e2:35:f3:a4:57:33:52:be:
         77:07:68:c8:2e:19:59:df:49:58:75:ef:f4:ee:96:de:0a:c9:
         60:5f:97:51:1f:31:6f:3d:f4:26:79:12:c4:ed:a9:94:5e:2d:
         e4:39:32:5d:74:5d:cc:84:b8:4f:f9:df:1c:c6:d4:2c:37:c4:
         2f:87:49:3f:61:0f:e7:b7:6c:75:e2:e7:92:d7:c3:95:73:86:
         ca:92:8d:98:c3:0e:62:5e:ab:5b:82:58:ae:14:08:ac:e3:75:
         aa:68:15:90:ca:47:cc:9c:78:09:80:14:81:56:db:a1:2d:19:
         59:fc:d6:0b:f0:68:06:49:09:75:05:e6:3c:25:2f:74:84:c2:
         66:56:a4:63:3c:5b:de:11:2b:1b:6c:57:9f:f3:da:d1:9c:ac:
         c3:8d:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:33 2025 by rpki-client