Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa
File:                     3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa (raw, json)
Hash identifier:          0EMT48G8FQDA7ZsJMukvq7wWl2/MUYhX4uQMCotqWhM=
Subject key identifier:   DF:31:E0:F8:A3:75:B3:9B:61:8C:E0:39:63:50:E9:46:4E:5E:23:39
Certificate issuer:       /CN=F519D15386DA423A1E940A04F10CC7E07C4554F8
Certificate serial:       1B64294AD0D826D05AC9A79600A73DF28822926C
Authority key identifier: F5:19:D1:53:86:DA:42:3A:1E:94:0A:04:F1:0C:C7:E0:7C:45:54:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa
Signing time:             Thu 06 Mar 2025 11:33:15 +0000
ROA not before:           Thu 06 Mar 2025 11:28:15 +0000
ROA not after:            Thu 05 Mar 2026 11:33:15 +0000
asID:                     264872
IP address blocks:        168.227.48.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:64:29:4a:d0:d8:26:d0:5a:c9:a7:96:00:a7:3d:f2:88:22:92:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F519D15386DA423A1E940A04F10CC7E07C4554F8
        Validity
            Not Before: Mar  6 11:28:15 2025 GMT
            Not After : Mar  5 11:33:15 2026 GMT
        Subject: CN=DF31E0F8A375B39B618CE0396350E9464E5E2339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:ce:44:f3:b2:7f:ff:89:6c:ff:98:7c:16:
                    61:07:af:d3:b1:1c:db:01:63:65:ad:62:be:ee:8b:
                    64:db:b9:a1:b5:91:fc:3c:7b:51:96:3b:45:94:47:
                    80:e7:c5:36:36:9b:fe:e7:1c:d2:a8:35:6c:36:2f:
                    21:7f:d9:86:f4:8c:eb:ea:56:f9:b2:07:a5:f8:d2:
                    78:1f:b3:3c:c3:9b:99:e0:ec:13:bc:cc:f1:38:8a:
                    99:ce:dc:86:d1:77:c0:95:8d:4f:84:d4:40:4c:5d:
                    96:ff:46:4b:4c:e7:4c:21:af:30:46:88:7b:f7:f2:
                    d9:36:f5:29:3a:8d:29:80:61:6a:8d:b9:93:d2:9b:
                    77:71:da:f0:66:8f:41:05:98:0e:0c:22:07:fa:75:
                    09:43:17:60:2f:8e:8e:88:2f:c7:4f:0e:f5:31:6c:
                    9e:b6:43:32:c7:7e:e8:85:26:d5:eb:8b:51:04:50:
                    f5:f6:78:5c:65:56:74:b8:10:02:61:7b:11:1a:c6:
                    6b:7c:c5:a4:20:d0:77:41:1e:23:91:27:04:f9:02:
                    b5:fd:6e:a4:a3:41:a1:fa:f9:f8:dd:2e:a0:d7:ee:
                    79:f2:cb:ec:43:9e:73:8f:3f:e4:74:da:53:1f:10:
                    c3:05:ec:9a:41:90:1d:32:83:1a:ef:03:e4:f8:a0:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:31:E0:F8:A3:75:B3:9B:61:8C:E0:39:63:50:E9:46:4E:5E:23:39
            X509v3 Authority Key Identifier:
                keyid:F5:19:D1:53:86:DA:42:3A:1E:94:0A:04:F1:0C:C7:E0:7C:45:54:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/3136382e3232372e34382e302f32332d3234203d3e20323634383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:b9:0f:71:8d:07:72:b4:1f:fd:49:c7:f9:60:88:13:67:
         6b:86:53:84:fb:5f:66:31:b9:92:b1:9e:3c:00:bc:b0:86:00:
         19:f4:c7:b6:93:a6:90:59:d2:85:b0:17:10:4c:73:e3:cc:f3:
         96:91:9a:54:99:af:9e:51:4a:a3:2f:81:c6:17:0b:d0:b7:64:
         da:1b:2e:32:c4:a4:d3:0f:a1:ef:f0:74:f2:27:86:12:ab:ed:
         a3:41:19:4a:7f:85:bb:5f:bb:7a:4b:3d:1f:a3:38:74:43:25:
         3a:31:1b:f6:d0:5f:05:37:e6:4e:35:dd:fd:a6:b7:a9:ae:e7:
         9d:f4:a2:2e:2b:c8:a0:a5:43:d3:9a:11:fd:54:ce:30:cd:39:
         e2:3a:3d:2c:aa:db:78:f4:74:c9:0f:e8:cf:d6:0e:5c:07:54:
         b9:a5:a9:25:a5:72:cb:f8:ae:bc:17:bb:ef:94:29:e5:ad:3b:
         34:1b:ce:ee:f0:12:6a:ad:97:c8:f6:6d:10:4f:95:0f:3e:30:
         6f:b9:d2:b8:1c:74:35:b4:60:fa:bd:67:3b:d1:36:95:b7:a7:
         03:28:f5:39:15:30:b3:20:da:ad:b9:1d:a7:e1:83:ae:09:46:
         96:6c:7b:c5:c9:9b:0b:69:a9:b9:5a:b5:1c:b4:28:f2:25:87:
         9a:21:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:19:27 2025 by rpki-client