Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38342e302f32332d3236203d3e203532373830.roa
File:                     3136382e3230352e38342e302f32332d3236203d3e203532373830.roa (raw, json)
Hash identifier:          JygmHiFd0qTBVj+En84HnPP6U7UPqh8Yc2PM4oQYSik=
Subject key identifier:   DA:76:CA:78:14:FC:60:CC:15:55:15:32:0A:7A:27:E5:40:83:18:9A
Certificate issuer:       /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Certificate serial:       3CA87345416BAD064F3C0EA01F31699DD68E96E9
Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38342e302f32332d3236203d3e203532373830.roa
Signing time:             Tue 05 Dec 2023 14:44:31 +0000
ROA not before:           Tue 05 Dec 2023 14:39:31 +0000
ROA not after:            Tue 03 Dec 2024 14:44:31 +0000
asID:                     52780
IP address blocks:        168.205.84.0/23 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:73:45:41:6b:ad:06:4f:3c:0e:a0:1f:31:69:9d:d6:8e:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
        Validity
            Not Before: Dec  5 14:39:31 2023 GMT
            Not After : Dec  3 14:44:31 2024 GMT
        Subject: CN=DA76CA7814FC60CC155515320A7A27E54083189A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:47:4c:57:4b:ca:e1:c2:c9:03:ba:c5:ca:
                    95:81:b4:27:7b:46:ab:0b:bd:f3:e4:d1:20:f6:0d:
                    f5:e5:f1:33:86:5c:4b:89:23:d4:2d:be:37:6f:55:
                    c7:d6:a9:67:5c:f7:74:27:63:2e:8c:88:f6:19:d7:
                    43:4c:d7:e5:18:01:66:1d:29:9d:52:15:6b:34:89:
                    2c:85:fb:59:39:38:67:b0:4e:60:47:55:b3:c2:6d:
                    a3:58:c0:c5:de:11:f6:cd:6d:69:2a:16:1b:06:2b:
                    33:03:b1:71:56:4a:49:49:c5:3f:73:1e:95:bc:0f:
                    47:fd:52:6f:a6:e6:b5:20:4a:03:ec:15:9a:26:5f:
                    3f:aa:b7:40:c9:7c:e6:85:d8:e9:8b:f0:44:26:6b:
                    03:2d:d8:87:c8:fd:12:dc:f8:21:c8:ce:ba:47:85:
                    15:4a:9d:04:fb:9f:58:98:68:4a:14:04:09:4f:ca:
                    d6:7e:4f:00:1a:9a:9a:90:d0:f2:f4:0a:db:1f:03:
                    6e:e7:ff:c5:1a:43:04:71:57:24:47:59:66:b7:ce:
                    06:2a:8d:7b:12:3f:b2:9d:f9:18:7f:38:09:95:b8:
                    15:98:0b:22:a3:3d:bd:df:18:7d:52:ce:fd:3c:e8:
                    f9:08:cf:d8:8b:90:9d:e6:4f:8f:d7:4d:e2:d4:5e:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:CA:78:14:FC:60:CC:15:55:15:32:0A:7A:27:E5:40:83:18:9A
            X509v3 Authority Key Identifier:
                keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38342e302f32332d3236203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:4c:6e:55:a0:ad:48:c1:cf:e5:08:43:6d:c2:52:51:ee:
         8e:24:ec:59:de:c3:fb:35:30:de:56:7b:fd:c4:4d:32:fd:8e:
         3d:3e:1b:86:98:07:e3:70:d4:a6:21:27:60:16:0a:63:d5:5e:
         7b:9e:dd:05:16:9b:e5:34:04:0a:9e:b7:72:51:3b:25:28:0d:
         10:5e:9f:7e:02:65:2b:54:62:da:0a:97:5a:5a:34:bd:d7:04:
         50:a1:ef:4d:34:56:e6:e2:dd:1d:9e:53:58:3f:c0:0d:ab:58:
         18:eb:43:02:c2:ad:c4:23:02:b3:91:7e:f9:dc:b5:2f:08:93:
         77:0b:b6:fc:c1:03:e8:33:dd:0a:43:d5:a2:49:77:cf:53:a8:
         eb:28:30:a3:4d:6b:b6:17:ef:e1:68:9a:2f:1e:da:9e:96:71:
         b1:b0:eb:9e:dc:08:64:c1:58:a9:cd:5b:10:0f:fa:6a:68:24:
         2f:37:28:34:e6:17:94:59:66:34:af:c1:56:72:ac:bc:3b:bf:
         45:a4:46:f8:27:98:db:14:90:eb:d9:34:8f:a1:f3:44:9d:af:
         78:0f:ff:9a:11:30:fd:82:49:e4:53:76:12:b4:39:77:fa:e5:
         05:d3:92:35:fd:3d:e0:88:64:31:81:fc:8b:2e:4c:41:a4:20:
         13:6f:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:00 2025 by rpki-client