Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3232203d3e20323635343039.roa
File:                     3136382e3139342e3231322e302f32322d3232203d3e20323635343039.roa (raw, json)
Hash identifier:          b6G7mCcANYZ0rfuAqtq4h1IhWpoBpJlVRmM5UO8S/ow=
Subject key identifier:   F6:78:21:16:E2:C1:F8:6D:DA:48:1E:A7:D1:7D:70:DC:D6:E9:74:35
Certificate issuer:       /CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
Certificate serial:       37949254A526684C7E6C512DB03504BC116BC107
Authority key identifier: A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3232203d3e20323635343039.roa
Signing time:             Tue 09 May 2023 17:44:16 +0000
ROA not before:           Tue 09 May 2023 17:39:16 +0000
ROA not after:            Tue 07 May 2024 17:44:16 +0000
asID:                     265409
IP address blocks:        168.194.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:92:54:a5:26:68:4c:7e:6c:51:2d:b0:35:04:bc:11:6b:c1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAA7DCDF8B78237BED95AF00752072151F0F73
        Validity
            Not Before: May  9 17:39:16 2023 GMT
            Not After : May  7 17:44:16 2024 GMT
        Subject: CN=F6782116E2C1F86DDA481EA7D17D70DCD6E97435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:f5:76:bd:88:0a:53:4a:d9:1b:29:6c:d5:
                    eb:9c:65:98:13:4f:9c:60:a5:d3:00:e8:f6:f1:7e:
                    99:3c:da:fb:86:54:5a:53:3d:9a:33:e0:ec:75:6a:
                    b6:48:05:66:59:42:4e:ce:8c:73:d8:a5:ba:b0:f1:
                    eb:53:ed:f1:b4:1e:fe:fd:7b:66:5e:29:f1:ff:9c:
                    50:ce:0e:42:ba:1d:29:15:70:4a:8b:80:b8:72:e6:
                    42:72:2b:19:69:06:bd:14:bc:18:c6:12:59:f9:87:
                    80:f0:e6:72:36:56:8d:20:11:de:db:15:99:60:69:
                    a4:7e:3a:ee:1e:8e:86:5b:72:e8:44:0a:55:9b:15:
                    39:0a:c8:1f:42:67:51:32:f8:55:96:71:71:11:8f:
                    21:1f:8e:1f:26:49:a4:69:07:7d:e5:40:36:a5:52:
                    24:df:49:56:45:5c:7f:76:67:f9:a5:c3:c4:6e:94:
                    79:db:e4:04:15:2d:c1:3b:4f:72:59:de:16:2f:12:
                    5c:2d:0b:10:71:58:5d:a2:88:b1:63:b0:1d:ea:27:
                    e2:32:b1:b5:49:b2:69:e6:4f:af:8e:9b:b4:bc:bb:
                    f9:b6:06:b4:49:c6:c6:e6:d3:22:8c:37:30:4f:7c:
                    7e:76:82:0a:15:f4:bd:74:43:58:5e:9c:f7:32:0e:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:21:16:E2:C1:F8:6D:DA:48:1E:A7:D1:7D:70:DC:D6:E9:74:35
            X509v3 Authority Key Identifier:
                keyid:A0:DA:A7:DC:DF:8B:78:23:7B:ED:95:AF:00:75:20:72:15:1F:0F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0DAA7DCDF8B78237BED95AF00752072151F0F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3232203d3e20323635343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:ed:fc:1f:f2:ee:85:34:17:bd:4b:f2:70:3e:20:60:e2:
         47:5a:33:df:0c:9d:73:49:ca:c9:43:b8:d1:d4:c7:2c:9d:f0:
         28:f3:46:ff:8d:36:98:a9:c6:be:0e:69:75:f5:c2:40:53:84:
         7e:6c:78:5b:64:05:82:99:a0:f8:1f:c1:d4:e0:3f:fe:bd:09:
         8d:41:35:0f:68:de:89:8e:08:17:65:6a:80:33:32:75:bc:f5:
         ee:0c:46:76:6e:a3:1c:fa:10:6c:4e:41:c8:1d:cc:74:8d:59:
         5f:f3:af:c7:2d:25:d4:a8:9a:26:3e:44:fa:3d:4d:9e:12:1e:
         f5:5c:3c:02:3b:55:49:58:99:34:66:81:5e:bd:9b:1f:31:a3:
         0f:37:c0:da:85:e4:5a:1a:37:90:43:fd:ea:5e:70:a2:46:b9:
         3c:7d:78:37:c8:70:bb:2e:a6:7a:1e:ef:c0:98:ef:59:a3:48:
         22:d6:87:b8:5a:21:41:5f:14:89:28:37:61:f6:bb:6e:39:ea:
         17:77:89:b1:6b:13:be:27:e0:74:8b:e1:8a:94:86:6b:df:b6:
         3a:f6:17:f0:52:de:49:b7:ac:c6:85:78:6e:23:e8:e8:95:09:
         d0:35:81:a2:1f:26:e1:74:e0:f2:9d:3a:c8:c4:ce:c4:ec:e0:
         14:04:2e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:15 2025 by rpki-client