Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa
File:                     3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          ObzRoXOfVUrU2208mhOffqAcjVQeesX+k+0PAbTY6Qk=
Subject key identifier:   55:52:25:11:8B:1A:FD:AB:E5:AD:BF:DA:39:66:ED:2D:EF:03:79:98
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       1B16ECB841508D0E36619BC2E82CD48B8D519CF1
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 05 Mar 2025 21:43:47 +0000
ROA not before:           Wed 05 Mar 2025 21:38:47 +0000
ROA not after:            Wed 04 Mar 2026 21:43:47 +0000
asID:                     262300
IP address blocks:        168.181.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:16:ec:b8:41:50:8d:0e:36:61:9b:c2:e8:2c:d4:8b:8d:51:9c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Mar  5 21:38:47 2025 GMT
            Not After : Mar  4 21:43:47 2026 GMT
        Subject: CN=555225118B1AFDABE5ADBFDA3966ED2DEF037998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:f4:59:ef:18:66:5a:af:05:0b:94:a7:65:
                    4b:79:01:52:29:7c:f2:e9:82:f7:da:b6:86:80:4e:
                    05:e0:a0:8f:76:41:42:70:1f:e4:33:80:54:5d:f2:
                    18:d3:74:64:04:c0:69:60:bf:8d:1a:92:02:ca:0b:
                    2c:53:56:26:1e:c2:e0:ea:77:f0:75:9e:6f:94:bf:
                    01:8c:fc:d1:63:96:43:94:96:e6:3b:1d:8c:93:a9:
                    b2:12:70:c1:7d:e9:16:5c:c3:4e:8e:1e:8c:ec:99:
                    b0:79:8f:77:9a:c9:33:f0:84:56:67:c1:20:bc:f7:
                    71:b9:da:ae:47:39:8f:8b:c5:3f:e4:49:6a:f5:5b:
                    43:30:15:5c:59:66:06:9f:32:44:ae:b7:a6:6f:11:
                    90:22:b4:89:c6:0e:08:d8:39:23:1e:37:84:58:d0:
                    36:c3:ff:33:a1:58:84:49:85:0e:bd:d7:54:30:7a:
                    39:cc:3b:53:5c:f6:68:0e:22:1a:f5:3e:06:d4:55:
                    ee:a1:36:47:bc:cd:a5:db:e0:6d:27:95:39:1b:6a:
                    4d:ee:e9:b9:65:40:de:38:ed:85:63:ae:11:25:35:
                    10:69:33:89:e4:41:25:c8:c6:37:8d:35:3e:33:a7:
                    c7:cd:b8:4c:28:b4:19:52:30:fe:3f:70:5c:ef:6d:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:25:11:8B:1A:FD:AB:E5:AD:BF:DA:39:66:ED:2D:EF:03:79:98
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3136382e3138312e3131322e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:ce:ac:b6:fe:d9:b5:fa:65:cf:53:16:08:a6:e0:03:e6:59:
         57:e8:53:49:b2:d0:b5:d6:95:c7:2e:0d:ef:50:67:d0:a8:8a:
         7e:ba:19:af:a0:07:f1:79:3a:17:e2:77:08:0b:58:a7:4b:c1:
         a9:82:0c:33:13:b0:9d:1e:49:14:5b:71:81:af:22:05:3d:8f:
         8b:12:22:74:70:92:33:73:66:33:88:a5:d1:a4:6e:e8:1c:58:
         5e:db:cc:a9:2a:69:e0:a4:61:76:dc:92:dc:d1:c4:aa:22:34:
         50:62:90:fb:c1:87:ed:4d:00:91:b4:02:54:69:a0:71:99:69:
         3e:8f:5d:f1:aa:0f:69:33:17:c8:60:7b:30:00:ee:21:9d:6f:
         45:5b:a3:3b:9b:3f:d1:6e:93:cb:4b:c5:89:c5:9c:4f:12:d2:
         db:fd:9d:c6:b1:bd:56:76:a9:be:59:38:01:9d:6b:d5:9b:8c:
         0e:a7:4d:b2:c2:92:c1:91:9f:1d:c3:20:95:50:ba:d9:da:48:
         64:87:7f:e2:fe:9c:97:1f:94:02:10:be:52:22:49:18:73:38:
         eb:aa:aa:08:79:3b:6f:9d:71:1d:ff:4e:79:15:01:2a:55:e4:
         2b:45:49:d7:9b:0a:54:7e:35:40:c7:74:bc:15:92:b5:88:33:
         ba:d4:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:44 2025 by rpki-client