Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133312e302f32342d3234203d3e20323633303639.roa
File:                     3136382e302e3133312e302f32342d3234203d3e20323633303639.roa (raw, json)
Hash identifier:          ovLYWXOWLoLgqIbSCsDd3S0n49vZ2hAfNN0jMBa8zME=
Subject key identifier:   E7:09:AD:D9:79:5B:3A:D6:C7:D7:C8:6C:21:58:B1:FA:6B:3A:FA:BC
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       0E08CD197F23DE88F2D0ABB87BAC02EFFD2C2E96
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133312e302f32342d3234203d3e20323633303639.roa
Signing time:             Mon 11 Apr 2022 18:02:37 +0000
ROA not before:           Mon 11 Apr 2022 17:57:37 +0000
ROA not after:            Mon 10 Apr 2023 18:02:37 +0000
asID:                     263069
IP address blocks:        168.0.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:08:cd:19:7f:23:de:88:f2:d0:ab:b8:7b:ac:02:ef:fd:2c:2e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Apr 11 17:57:37 2022 GMT
            Not After : Apr 10 18:02:37 2023 GMT
        Subject: CN=E709ADD9795B3AD6C7D7C86C2158B1FA6B3AFABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:05:80:a2:c2:31:eb:eb:92:00:6b:1e:53:
                    5c:7c:9d:7b:f5:48:e5:35:f6:d0:06:8d:21:0c:dd:
                    30:f4:50:ce:8a:d9:f9:fc:51:c3:15:23:62:80:50:
                    b9:e5:fe:dc:d7:03:9d:47:1d:6a:7b:96:c8:cf:d0:
                    36:3d:04:1a:5b:d7:a9:c5:27:cb:fd:22:06:c8:53:
                    20:9b:f7:bd:e3:89:60:4b:41:24:2c:35:69:e1:b0:
                    c7:29:76:f5:05:a2:e6:d9:7a:d5:77:a8:e7:bb:60:
                    99:1e:2b:b7:0e:16:78:bf:5c:4b:35:2a:a7:2c:2a:
                    bc:3e:df:e2:bd:62:32:5f:44:ed:9a:bf:bb:a2:54:
                    91:a8:a6:67:fb:96:d2:03:26:5b:42:7a:ee:ce:ce:
                    14:cb:aa:d4:2a:c2:89:70:f5:b1:34:a8:a5:fb:25:
                    7a:4c:ce:37:e2:6b:ff:91:c7:c6:8f:31:88:4b:cd:
                    c1:d8:89:d9:a7:23:08:a7:42:7d:db:aa:ce:90:5d:
                    17:af:6d:a5:8c:e4:f5:82:cc:5e:e5:98:ce:a3:66:
                    44:2a:89:42:be:ff:71:1f:3b:74:17:d3:89:c5:d0:
                    f4:c5:87:96:19:18:2b:dd:c1:1b:ec:9a:39:76:25:
                    48:78:36:95:59:45:d4:80:a7:e2:f2:9d:48:8b:31:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:AD:D9:79:5B:3A:D6:C7:D7:C8:6C:21:58:B1:FA:6B:3A:FA:BC
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133312e302f32342d3234203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:dc:36:b1:df:2e:11:a3:d1:b2:29:4c:db:38:7f:f2:2e:
         0e:99:96:3a:f3:c6:6a:55:f7:e0:80:5a:42:d3:fb:9f:0c:5a:
         25:4a:fc:50:ed:54:cc:1a:27:31:74:f8:b3:36:65:03:7e:05:
         de:b2:ec:ac:da:32:3e:e3:46:8d:22:31:15:bb:4f:ad:aa:54:
         2b:5c:2b:79:ce:23:95:c6:35:d3:e0:fb:7f:0e:6a:c2:71:90:
         aa:39:b2:bb:55:24:78:b6:ba:f0:9b:40:a3:d6:79:97:3a:31:
         fe:b5:45:fa:ff:d0:14:ab:e7:40:2a:85:ed:7a:d7:9f:cf:0f:
         b5:62:06:3e:fe:71:92:b2:69:59:cd:cb:9c:e6:ad:c5:3a:ee:
         c5:da:13:77:9f:da:7f:9f:4c:b2:49:67:8c:1b:a8:f1:df:2b:
         55:db:0d:e4:30:a7:d4:9a:e4:78:b6:ce:7b:a0:04:41:d2:7d:
         a2:de:98:ce:0f:c2:29:1f:44:f9:98:7d:ad:82:dd:24:cf:e6:
         60:cd:f7:17:82:bf:dc:55:2a:e5:bc:34:20:d6:cc:fc:52:0c:
         f9:35:49:4e:ff:00:63:9e:71:29:f7:e9:ef:07:8c:ff:e6:4f:
         4e:a1:5c:e9:9a:5a:a3:43:e5:e8:7d:e8:d4:92:0e:aa:03:7b:
         1a:9b:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:36:28 2025 by rpki-client