Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa (raw, json)
Hash identifier:          RgDCyyORal19PDi9tLy6N/7yDIqKrOUKUAMAWHDlBWI=
Subject key identifier:   A7:6C:69:59:82:74:96:96:A1:0C:AA:44:DD:A6:65:10:02:3D:B5:31
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       0CA2AF51429380E33B56AF712EBAFD73664DE2A0
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:07 +0000
ROA not before:           Mon 26 Aug 2024 19:28:07 +0000
ROA not after:            Mon 25 Aug 2025 19:33:07 +0000
asID:                     269359
IP address blocks:        168.194.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a2:af:51:42:93:80:e3:3b:56:af:71:2e:ba:fd:73:66:4d:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:07 2024 GMT
            Not After : Aug 25 19:33:07 2025 GMT
        Subject: CN=A76C695982749696A10CAA44DDA66510023DB531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:96:40:1b:13:47:ec:a1:1a:6e:c9:4e:5e:
                    17:bc:f3:16:27:24:01:9f:0b:73:33:d1:06:65:4f:
                    78:40:f0:f6:b1:9f:77:1d:c3:09:d6:db:e1:80:a3:
                    e2:d7:4b:79:32:9b:51:0b:c8:8c:b0:02:6d:96:36:
                    df:03:d2:31:9f:b7:ed:64:3f:e1:ca:55:a0:ce:a9:
                    97:86:a4:06:40:18:68:1c:28:38:10:ca:f3:33:73:
                    e7:94:e5:5f:2e:f3:e4:88:0f:39:b7:af:1b:3a:0c:
                    11:2b:dc:39:bd:01:3d:b5:87:df:4f:53:c1:a2:bf:
                    73:cb:ff:a0:e1:45:8a:ad:83:87:9f:86:33:ea:83:
                    32:5f:c7:07:c9:9f:3e:9e:b6:7d:1d:76:87:52:0f:
                    b5:3d:52:eb:2b:12:26:02:f4:3d:61:76:1b:02:e7:
                    77:75:b6:ed:13:db:01:5c:aa:43:cf:db:fa:4d:33:
                    f1:53:fe:7b:7b:52:82:df:6a:ff:9a:0d:0d:d5:e3:
                    17:9c:dd:cb:fe:93:e4:7c:1b:dc:f0:79:23:fc:38:
                    0e:a8:dd:c0:1a:f0:b8:16:ec:86:d5:2c:c7:ef:be:
                    26:7b:94:e5:2c:8f:3c:e6:84:d3:af:14:dc:b3:33:
                    06:a5:f8:0d:8a:f3:95:7b:26:cd:19:b8:ee:11:79:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:69:59:82:74:96:96:A1:0C:AA:44:DD:A6:65:10:02:3D:B5:31
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3232203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:33:5d:39:41:a7:0a:96:82:ae:c9:44:83:49:00:28:54:0d:
         8d:c7:6f:28:5c:b7:8b:09:2b:50:be:0e:35:7b:d4:e0:92:2b:
         6e:ca:62:0c:bb:15:06:ce:ce:36:2c:bf:1f:54:12:d5:c6:35:
         28:c2:df:5d:5f:8f:35:63:5d:09:74:0d:fd:a1:3f:eb:c1:24:
         b9:cd:37:ae:42:85:2c:eb:f8:ed:c8:69:aa:9a:3c:d5:a2:2b:
         60:0d:a0:a6:90:67:fc:30:c4:2f:ab:f2:c8:eb:a9:7e:03:35:
         9d:3e:38:e9:54:9b:44:b0:e5:72:51:ce:e8:fe:0f:50:b9:08:
         46:bf:e7:b6:9e:78:2b:30:78:c2:4b:e6:d3:60:4b:94:26:04:
         3c:c7:c1:c1:27:c3:5b:35:3b:a2:ca:3b:cc:24:64:ed:2c:54:
         48:67:0c:55:3a:29:2c:f0:b7:c7:c5:34:a6:2c:0c:d5:3c:62:
         1e:15:93:e0:03:54:48:7a:e0:f0:1a:8e:51:d5:30:5e:93:a5:
         e1:dc:d9:55:b6:f7:d7:2f:77:73:59:df:63:59:9d:74:5c:86:
         33:89:a9:33:6a:96:05:1a:86:21:92:1e:b0:ab:16:1c:72:81:
         cf:ed:dd:be:3b:51:bc:11:92:5c:de:11:69:c2:5c:ab:ea:b7:
         53:ee:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:30 2025 by rpki-client