Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
File:                     3136382e3230352e38352e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          Q+BdXVyvt4eF+R7CalkZx60jMajawbzT950+JKYruIE=
Subject key identifier:   04:85:9F:69:8F:67:56:18:60:ED:62:BF:1B:92:04:F3:5F:91:23:A9
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       67FE65E78AE9727F1D7CFCF85839F4E51F7A2C32
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:12 +0000
ROA not before:           Wed 06 Mar 2024 17:57:12 +0000
ROA not after:            Wed 05 Mar 2025 18:02:12 +0000
asID:                     52780
IP address blocks:        168.205.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fe:65:e7:8a:e9:72:7f:1d:7c:fc:f8:58:39:f4:e5:1f:7a:2c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:12 2024 GMT
            Not After : Mar  5 18:02:12 2025 GMT
        Subject: CN=04859F698F67561860ED62BF1B9204F35F9123A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:99:72:b5:3b:1f:5c:4f:6d:f0:c9:e2:ca:
                    e9:45:32:fe:c6:a9:82:7f:73:73:35:09:56:5f:d0:
                    81:b1:1e:69:23:ce:fc:f3:36:81:86:43:ed:64:f3:
                    a7:1a:b9:c3:7f:65:9a:a2:a3:70:ae:7d:c5:af:7e:
                    97:e6:cf:95:d0:51:b0:e1:32:aa:f0:01:d4:cf:47:
                    d0:7e:db:e9:c0:e2:8f:3c:7f:bc:a1:d6:56:a5:81:
                    69:de:29:f7:74:01:dd:b9:60:36:c2:38:8d:b7:18:
                    ff:66:4e:4b:c5:6b:fa:13:ea:44:5d:c3:e6:97:28:
                    64:f6:83:39:14:c8:f8:91:ea:2d:43:05:f2:98:b2:
                    65:bd:e5:69:b9:70:dc:1b:8b:86:19:3b:24:a1:fa:
                    f9:24:a2:d2:91:eb:08:0b:34:2f:77:57:c3:a8:79:
                    41:18:36:e4:be:a6:be:6c:9c:3c:80:30:68:98:05:
                    54:3b:86:a8:88:dc:10:9d:3d:8d:dd:00:bc:50:6c:
                    09:23:51:c0:c6:43:9b:17:23:f7:f5:34:3f:77:ca:
                    bd:d3:8d:ba:48:f5:33:27:2b:92:99:24:36:cb:1b:
                    0d:18:f2:ae:7c:1f:3e:42:3b:bf:f2:1b:10:0f:1b:
                    98:95:65:16:6f:3f:c7:e6:23:be:cf:e6:cc:4d:4c:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:85:9F:69:8F:67:56:18:60:ED:62:BF:1B:92:04:F3:5F:91:23:A9
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38352e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:a4:1b:76:45:7e:be:13:54:9f:09:8d:7a:70:a2:6e:82:
         01:c5:d9:8f:46:4d:18:9a:6b:87:20:81:94:bf:4a:f4:cc:83:
         e8:24:0e:5c:19:c1:bb:e9:30:0f:44:b2:7a:dc:88:17:16:37:
         6b:16:9b:58:1d:42:a0:94:7d:5d:5a:d9:18:92:56:a4:78:36:
         6f:c7:15:8f:6c:08:de:ca:b4:d9:8a:68:fa:b5:40:3c:a4:8f:
         2d:ed:52:16:3b:ac:5e:6b:69:c3:7d:1a:4a:11:ea:1e:e0:b8:
         eb:e1:72:78:52:9d:81:4c:66:d9:73:04:09:ac:89:e9:34:23:
         4e:f9:1f:fd:ea:8f:6d:81:0e:1c:47:51:ee:28:13:5a:c0:32:
         04:e3:38:c8:f9:ef:7d:ba:71:4d:ae:8f:f2:2d:2c:bf:21:26:
         34:67:be:78:1f:67:49:3f:6d:e9:99:e1:02:55:25:aa:30:1c:
         83:0a:4f:93:65:40:8c:36:1e:85:35:bc:e8:b9:00:b9:0c:89:
         b0:f0:09:3b:41:9b:04:04:f2:ff:6c:e1:13:a7:b6:5d:03:22:
         ba:f2:c3:0d:60:f7:76:5a:72:ad:67:c4:6e:d4:d6:87:d7:21:
         2e:7d:16:24:bc:7b:31:8b:9a:78:85:ae:17:dd:f5:ac:3b:32:
         8e:a1:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:08 2025 by rpki-client