Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31342e302f32332d3233203d3e20323633303733.roa
File:                     3136342e3136332e31342e302f32332d3233203d3e20323633303733.roa (raw, json)
Hash identifier:          bZCFjqWd3viQzXknywrrDP4HVXJxwG69MlBDkmifkq0=
Subject key identifier:   BF:12:B7:8B:97:37:69:C6:97:D8:2C:60:70:57:0F:C6:F8:1B:73:AB
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       3BFF68A283E3D4D6520E38B269B9922CCC3F989C
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31342e302f32332d3233203d3e20323633303733.roa
Signing time:             Mon 24 Mar 2025 12:10:28 +0000
ROA not before:           Mon 24 Mar 2025 12:05:28 +0000
ROA not after:            Mon 23 Mar 2026 12:10:28 +0000
asID:                     263073
IP address blocks:        164.163.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ff:68:a2:83:e3:d4:d6:52:0e:38:b2:69:b9:92:2c:cc:3f:98:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar 24 12:05:28 2025 GMT
            Not After : Mar 23 12:10:28 2026 GMT
        Subject: CN=BF12B78B973769C697D82C6070570FC6F81B73AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:0a:7f:bc:5e:3d:94:ea:da:ee:1a:b6:c1:
                    86:0d:7a:22:01:45:2f:e3:cb:c8:ca:80:78:0a:86:
                    06:02:97:76:01:e3:27:a7:ca:e0:18:0f:79:21:6c:
                    47:c1:3d:6a:4d:06:83:4b:c5:48:e6:b2:52:6f:d6:
                    db:26:ac:63:aa:f4:2a:ac:1a:ca:5d:ac:c2:14:62:
                    24:c2:fd:4f:8a:88:39:be:21:2b:c2:06:9b:87:62:
                    99:60:d4:c9:72:63:49:da:46:32:69:6d:05:61:65:
                    14:40:9c:5f:78:fc:fa:91:29:a6:fc:0b:9c:a9:45:
                    0c:7e:8b:fd:e5:f1:9c:a4:07:65:fd:b4:ca:4a:71:
                    ee:41:c2:6e:de:ee:9a:69:74:6c:c6:d8:bf:9c:d2:
                    23:8a:92:7b:f3:47:df:87:d1:2a:c7:19:a9:32:37:
                    06:42:34:b4:27:a9:87:0a:41:ce:10:cd:64:87:5e:
                    3f:3f:2f:63:08:ff:58:15:14:e1:96:20:65:01:4d:
                    55:84:4a:81:e1:c2:d3:2a:2d:de:de:ff:37:0e:a6:
                    d0:41:9e:8d:2a:aa:c8:4c:77:47:d5:ce:ac:7e:04:
                    ec:3b:da:49:b3:e0:d5:e5:82:fa:5d:d1:02:f1:b3:
                    5c:ae:62:e2:d4:b4:3b:2a:93:7c:da:21:1a:1b:7a:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:B7:8B:97:37:69:C6:97:D8:2C:60:70:57:0F:C6:F8:1B:73:AB
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31342e302f32332d3233203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:9c:05:ff:1e:ef:06:f5:d1:a2:4f:4f:f9:97:dc:cf:a1:
         3f:26:ed:f1:92:13:57:e6:6a:2a:3e:d6:f5:c2:48:ce:8a:24:
         f2:38:7c:ef:2c:bf:81:8c:af:37:0c:5e:c5:9c:fe:04:d0:37:
         bd:06:98:84:b2:65:f0:67:c5:ff:d8:6e:89:f6:cb:e7:5a:fa:
         e3:81:72:28:e6:a8:1c:03:85:fa:86:39:31:4b:21:88:0a:18:
         b7:07:b1:cd:7b:8b:e5:9e:a6:8c:47:d0:14:0b:a3:22:42:41:
         fe:c8:3a:49:fd:d5:df:c1:3b:9b:53:4c:f1:3f:df:1e:0e:f1:
         09:be:27:7e:9a:eb:9a:96:0f:66:e6:79:ce:8a:a4:95:d4:c1:
         62:02:0a:74:88:17:a2:6a:70:df:e5:7d:3d:1a:25:eb:c6:c5:
         bf:8e:66:d5:bf:2e:30:1a:46:1d:a6:53:f6:6f:dd:df:de:42:
         76:26:0d:7d:02:64:12:d6:df:37:31:3c:3c:50:9d:17:c8:35:
         f0:3b:fa:28:5b:ca:6e:cd:40:c4:80:95:5a:05:51:00:f6:98:
         7f:62:3e:f4:23:8e:80:59:9d:0c:28:2c:3e:45:ff:f8:67:ae:
         9a:3b:87:c2:49:2d:c4:ca:fd:ea:0c:aa:02:5b:1a:ef:33:8f:
         fd:92:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:46:46 2025 by rpki-client