Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          6NzmUrzDnUXHwDFCFcekr2fbgjJfN/S1PMyqUVtEwf4=
Subject key identifier:   C1:9B:80:51:E8:3C:8B:70:C5:63:CD:3B:BA:68:F3:F7:AB:77:CF:37
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       2CF740C948EB1929FC6CAD4A55D41540DB5010EA
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:07 +0000
ROA not before:           Mon 26 Aug 2024 19:28:07 +0000
ROA not after:            Mon 25 Aug 2025 19:33:07 +0000
asID:                     269359
IP address blocks:        168.194.248.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f7:40:c9:48:eb:19:29:fc:6c:ad:4a:55:d4:15:40:db:50:10:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:07 2024 GMT
            Not After : Aug 25 19:33:07 2025 GMT
        Subject: CN=C19B8051E83C8B70C563CD3BBA68F3F7AB77CF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:4f:81:40:3e:f9:37:cf:67:e4:4a:b8:f5:
                    37:f2:82:11:52:e5:28:cc:08:9e:30:47:dd:c7:0c:
                    15:ed:57:03:28:6a:56:70:dd:82:da:50:6f:37:35:
                    b8:46:58:41:78:a2:8c:4f:ca:c2:b1:7b:7e:db:d8:
                    3d:e9:ff:3e:18:fd:c5:df:55:e3:67:86:c4:ff:8c:
                    bb:1f:0d:55:4a:26:0c:0d:6e:c2:d2:af:35:74:93:
                    6a:54:fe:8c:37:ed:59:97:de:17:cf:4f:19:64:94:
                    01:ce:d1:6b:c3:e0:f3:bf:9b:7a:f4:6c:f0:2e:3f:
                    8c:5e:53:94:ee:e2:9d:e3:f4:ed:03:6c:2b:c8:af:
                    16:c7:17:cd:52:cf:ef:6d:b3:87:2d:5f:b5:a3:e1:
                    9c:3e:b0:09:9b:bf:0b:a5:b9:e1:6d:8a:7f:58:6a:
                    65:3c:b0:af:32:87:62:47:44:28:e3:ac:07:4d:97:
                    5b:31:f7:f7:6f:3b:3f:c0:fe:ca:1a:40:16:a0:41:
                    37:ae:08:6d:1b:77:22:c8:24:c5:25:4a:09:e4:5a:
                    64:21:44:81:1e:8d:e2:86:8c:b3:d1:32:1d:5f:4c:
                    24:47:16:37:83:0b:40:a9:02:cc:be:f0:17:cd:4b:
                    ec:f4:9f:6e:44:a6:82:27:21:35:06:8b:f3:e6:73:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9B:80:51:E8:3C:8B:70:C5:63:CD:3B:BA:68:F3:F7:AB:77:CF:37
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:bd:c6:a0:f3:51:a8:aa:92:03:3e:ad:97:b9:be:fc:43:
         e0:d6:cb:7a:8c:e2:83:dd:fd:eb:35:f7:c8:5d:a8:c2:27:0c:
         89:dc:3f:83:a8:d4:a8:70:16:78:e2:72:43:ad:27:fe:b0:e7:
         6c:0d:a7:5e:43:94:eb:d7:d0:99:a9:2a:82:b3:c1:1a:a0:6f:
         73:b1:6f:ca:b3:18:d7:5d:b9:db:4e:7c:88:dc:dd:ef:86:1a:
         d8:54:ea:46:a5:32:51:36:9c:05:d7:ab:37:23:49:9e:e6:f3:
         f5:ef:e8:53:71:e9:9b:80:6f:be:ca:4f:43:84:53:d9:b6:ed:
         2a:c0:15:fe:9d:d5:72:a7:98:b9:4c:33:c0:df:22:e7:e4:74:
         21:31:55:d8:66:cc:f0:a1:b7:c4:27:35:a7:f8:91:70:31:b6:
         c9:04:c5:da:6b:14:ea:79:68:b3:83:25:d4:d2:50:05:f2:34:
         d8:bf:79:08:4f:63:b6:b7:5b:4b:11:8b:12:92:75:e2:1c:4a:
         21:8d:1f:c4:2a:05:bc:1e:a3:73:86:fe:a9:51:5c:c8:2e:9c:
         61:5c:9c:7c:d6:67:39:58:93:35:70:48:d5:0d:47:8b:60:db:
         6f:90:49:01:2d:6c:c3:10:b6:e7:87:29:d6:4b:d1:1e:cf:6b:
         54:7d:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:15 2025 by rpki-client