Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32332d3233203d3e20323633303639.roa
File:                     3136382e302e3132382e302f32332d3233203d3e20323633303639.roa (raw, json)
Hash identifier:          aARcEifc4iPRu0fI8lBqh3tLF74jvovuhdvia6aCpS4=
Subject key identifier:   FC:EF:70:24:40:CB:68:95:B8:4A:FC:24:9B:C2:FA:98:1E:45:4A:EA
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       29A2A5AF949B6500CECFEFF01FECA01003542D27
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32332d3233203d3e20323633303639.roa
Signing time:             Mon 11 Apr 2022 18:01:14 +0000
ROA not before:           Mon 11 Apr 2022 17:56:14 +0000
ROA not after:            Mon 10 Apr 2023 18:01:14 +0000
asID:                     263069
IP address blocks:        168.0.128.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a2:a5:af:94:9b:65:00:ce:cf:ef:f0:1f:ec:a0:10:03:54:2d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Apr 11 17:56:14 2022 GMT
            Not After : Apr 10 18:01:14 2023 GMT
        Subject: CN=FCEF702440CB6895B84AFC249BC2FA981E454AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:bd:ea:f7:ca:bd:41:12:68:72:a2:18:20:
                    84:3d:ab:17:e8:9f:10:a0:0b:db:fb:4d:cc:97:56:
                    96:9e:fb:5b:d1:66:96:97:8c:5d:ae:70:7d:bd:ad:
                    75:35:9b:87:e7:fe:bf:a3:2f:56:8a:79:1b:10:63:
                    5c:96:b1:da:09:03:15:47:11:9e:e4:b8:af:d3:58:
                    9b:ff:b6:c6:45:57:3a:bd:d6:2e:08:13:87:96:3e:
                    80:f9:fb:7c:ad:42:9e:ba:df:3c:d4:7d:ba:82:ae:
                    3b:90:71:62:b1:c5:c3:ba:34:dd:49:c2:10:c3:7e:
                    c7:9b:1b:a9:d7:31:f8:8f:6c:c6:85:01:cc:8e:c9:
                    4e:86:ef:48:c8:f4:92:38:c0:ee:2c:46:9f:6c:9f:
                    b6:06:40:71:2c:1a:45:04:d3:e6:61:01:3c:43:77:
                    80:8e:f8:03:9c:c2:2d:d7:f5:80:9c:92:fb:38:33:
                    14:29:25:d2:08:ee:fa:5f:14:09:d2:06:4f:a5:cc:
                    04:16:a2:cd:97:ee:20:42:56:c0:72:46:68:94:0b:
                    76:18:0c:42:51:1f:f2:fa:3f:ef:0f:85:57:ac:13:
                    df:3c:d0:5c:22:46:38:68:47:02:26:0d:6d:53:87:
                    16:4c:da:40:aa:4a:46:09:21:1d:e1:d8:c2:dd:39:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EF:70:24:40:CB:68:95:B8:4A:FC:24:9B:C2:FA:98:1E:45:4A:EA
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3132382e302f32332d3233203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:af:63:fc:96:96:67:2a:09:f3:0a:e6:de:f1:4c:ff:3c:
         04:f3:a0:fd:0f:74:cd:05:02:3f:9c:45:cc:e2:cd:6b:3d:bd:
         a8:ff:ae:ba:9a:87:0d:eb:b9:ac:05:8b:ce:5a:93:7d:b1:52:
         8e:25:34:a1:26:9e:79:32:fc:01:1c:d2:73:54:d8:1b:19:74:
         88:da:be:23:d8:08:da:6d:91:09:70:22:a4:cf:17:e3:e3:79:
         7b:ce:c4:be:27:ca:30:cf:01:0c:f1:d4:c5:35:65:be:a1:e7:
         6d:57:3c:6c:9a:a2:45:90:4c:3a:dc:58:6c:be:e5:3c:5b:84:
         7b:a1:bc:e2:29:69:51:a6:f6:dc:fd:72:13:b9:09:8b:ac:fb:
         a3:cb:d1:99:64:be:c6:f9:b9:d5:99:cd:14:7d:7e:9e:03:cb:
         82:66:a4:47:20:24:7d:6e:77:2d:b4:4b:ad:83:73:37:19:23:
         c6:6b:21:62:72:7f:09:83:68:20:f7:38:27:df:06:f6:44:61:
         2f:4e:47:cd:41:f3:30:6b:63:38:66:2b:45:bd:1c:cb:36:a5:
         c5:a4:23:e5:cc:59:42:ff:95:1c:71:d4:fa:59:01:45:48:64:
         12:2c:5e:86:bd:c6:25:21:1a:30:f6:5f:a4:7b:16:dd:8a:a1:
         95:35:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:44:39 2025 by rpki-client