Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32322d3234203d3e20323633303639.roa
File:                     3136382e302e3132382e302f32322d3234203d3e20323633303639.roa (raw, json)
Hash identifier:          1ic32CjgNeWgG1PNU2UYyVlX1NeK7NZ2RdVrDO1lEiE=
Subject key identifier:   6D:0A:92:A4:CE:4B:A4:EE:7D:95:90:1A:49:DC:E8:D5:A4:9F:31:1A
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       41B302ABF190D34876D0501287A4289DB1E54BE4
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32322d3234203d3e20323633303639.roa
Signing time:             Wed 01 Nov 2023 12:31:24 +0000
ROA not before:           Wed 01 Nov 2023 12:26:24 +0000
ROA not after:            Wed 30 Oct 2024 12:31:24 +0000
asID:                     263069
IP address blocks:        168.0.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b3:02:ab:f1:90:d3:48:76:d0:50:12:87:a4:28:9d:b1:e5:4b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Nov  1 12:26:24 2023 GMT
            Not After : Oct 30 12:31:24 2024 GMT
        Subject: CN=6D0A92A4CE4BA4EE7D95901A49DCE8D5A49F311A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:17:82:45:bd:90:8b:27:a9:d5:bd:2f:9d:
                    90:c4:1c:d1:34:47:91:69:49:34:0d:48:82:74:61:
                    4f:6c:2a:1b:d9:c3:3b:fe:ad:82:78:2c:fb:35:0f:
                    d2:70:e5:72:5f:2e:35:2d:47:3e:07:7f:a4:38:c1:
                    3d:ff:3f:13:04:40:9e:4a:62:21:3b:6a:87:03:73:
                    48:a4:ec:c4:47:c8:0b:1b:ba:01:75:c2:52:32:b0:
                    22:d5:f1:97:4c:ce:a6:0d:81:af:54:66:1c:28:31:
                    c1:79:a5:0b:25:09:86:2f:9d:00:bd:0f:68:00:6b:
                    86:13:ef:df:cf:e0:e8:bc:88:7f:26:2c:12:4a:4d:
                    8f:a5:07:b0:aa:72:61:5b:9e:eb:49:4a:a7:1a:8b:
                    01:4e:0b:32:3f:03:41:7e:18:33:c3:df:a0:41:22:
                    76:cf:fe:64:a2:e9:76:a5:0f:d7:15:68:5d:a0:22:
                    48:ad:97:f8:5c:00:05:6f:6d:e2:7d:08:c3:ae:5e:
                    47:37:6d:80:de:99:3e:70:82:3a:bb:bd:99:45:12:
                    64:b3:98:b0:5c:28:9d:9d:89:a6:30:1e:84:6a:6e:
                    65:c3:10:19:38:57:57:6d:0b:27:da:13:44:32:2c:
                    4b:91:37:de:01:00:88:91:7c:b8:7b:ce:40:e7:24:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0A:92:A4:CE:4B:A4:EE:7D:95:90:1A:49:DC:E8:D5:A4:9F:31:1A
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32322d3234203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:10:52:7d:9d:d5:40:73:d6:32:4c:d3:5f:ec:f3:8c:d1:c3:
         fb:78:41:f4:57:ad:23:26:c8:a2:5c:af:1e:e1:8a:57:3d:39:
         05:91:bb:29:8b:fd:0a:9b:d6:1a:fe:86:8b:07:02:4c:70:50:
         78:9f:b0:26:b7:ba:6b:18:dd:ab:4a:d1:10:24:58:56:d9:16:
         c8:74:59:79:ac:34:8c:98:6e:5d:7a:24:a3:3a:ed:cb:25:01:
         4d:7f:54:30:91:36:9b:e1:c3:b8:35:7f:17:74:53:d8:f4:22:
         35:5b:f4:ec:e9:30:88:bf:13:63:c2:d9:71:96:e0:7e:f1:f3:
         13:d1:d2:ce:a7:16:4b:2c:35:b3:15:07:62:dd:ef:44:b7:88:
         96:d6:a6:f2:d3:9c:f5:1a:90:44:33:60:fd:4e:fb:25:8c:11:
         78:04:9e:cc:ec:30:db:9c:01:c2:65:c9:b8:04:e6:7b:8c:3d:
         9f:92:47:38:5f:6e:9b:2e:6e:f7:75:e9:82:fe:9f:57:d4:fb:
         20:df:cb:f5:76:1a:f2:33:19:57:2c:47:69:c3:3a:e6:2c:0b:
         53:bd:b3:f3:f8:3f:85:47:aa:0c:38:b3:36:63:31:a0:a9:a0:
         ec:eb:d8:a6:d1:10:9d:41:fa:e1:50:14:36:5f:43:ca:df:12:
         bc:09:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:41 2025 by rpki-client