Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3136382e3233322e35322e302f32322d3234203d3e20323633363436.roa
File:                     3136382e3233322e35322e302f32322d3234203d3e20323633363436.roa (raw, json)
Hash identifier:          iiPadKp2eEkV0D5oyben92eEt2cLOXUOCREVeAYJo/U=
Subject key identifier:   FA:CC:6E:E7:35:9E:5F:BD:13:41:35:32:5C:3E:1C:94:85:F1:DC:11
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       2E67E4E51343759171C92427EC4E0F476AAABE38
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3136382e3233322e35322e302f32322d3234203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:40:49 +0000
ROA not before:           Fri 14 Jan 2022 23:35:49 +0000
ROA not after:            Fri 13 Jan 2023 23:40:49 +0000
asID:                     263646
IP address blocks:        168.232.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:67:e4:e5:13:43:75:91:71:c9:24:27:ec:4e:0f:47:6a:aa:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:35:49 2022 GMT
            Not After : Jan 13 23:40:49 2023 GMT
        Subject: CN=3082010A0282010100A1A8C9FF531A1952CF31B5A654452E3EF8B345CC7655FB49AF8F69084F6E668F41D3210D9027CB7681DEE7733DB35ABA4474E3A5CDF27D465F50FD31C2796032BF1C7B06860247F39455E1BAF2415887F7A09C6C736836FFC6961D3AF8149C102DF3B711975BBF3F7C298BD91BC0EA48924ECBB98976542AA980AF9A7D4D7DA5200C1629204770C606FA62185E77F3708D5B8087F505D197B9BD041157EA1ACC22FE78823A8A6B1A4CEE44508D770034A8457FB62ED63C941699D4756C1D894F5095AA6393AA1B6C5E1F9407C262456969AAFAE4E88FCC9CC3657281EDA37831945AA43F6021448007B83C64EDDFB67C254A20CDB41C547A8507BF5C4CB82C9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:c9:ff:53:1a:19:52:cf:31:b5:a6:54:45:
                    2e:3e:f8:b3:45:cc:76:55:fb:49:af:8f:69:08:4f:
                    6e:66:8f:41:d3:21:0d:90:27:cb:76:81:de:e7:73:
                    3d:b3:5a:ba:44:74:e3:a5:cd:f2:7d:46:5f:50:fd:
                    31:c2:79:60:32:bf:1c:7b:06:86:02:47:f3:94:55:
                    e1:ba:f2:41:58:87:f7:a0:9c:6c:73:68:36:ff:c6:
                    96:1d:3a:f8:14:9c:10:2d:f3:b7:11:97:5b:bf:3f:
                    7c:29:8b:d9:1b:c0:ea:48:92:4e:cb:b9:89:76:54:
                    2a:a9:80:af:9a:7d:4d:7d:a5:20:0c:16:29:20:47:
                    70:c6:06:fa:62:18:5e:77:f3:70:8d:5b:80:87:f5:
                    05:d1:97:b9:bd:04:11:57:ea:1a:cc:22:fe:78:82:
                    3a:8a:6b:1a:4c:ee:44:50:8d:77:00:34:a8:45:7f:
                    b6:2e:d6:3c:94:16:99:d4:75:6c:1d:89:4f:50:95:
                    aa:63:93:aa:1b:6c:5e:1f:94:07:c2:62:45:69:69:
                    aa:fa:e4:e8:8f:cc:9c:c3:65:72:81:ed:a3:78:31:
                    94:5a:a4:3f:60:21:44:80:07:b8:3c:64:ed:df:b6:
                    7c:25:4a:20:cd:b4:1c:54:7a:85:07:bf:5c:4c:b8:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:6E:E7:35:9E:5F:BD:13:41:35:32:5C:3E:1C:94:85:F1:DC:11
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3136382e3233322e35322e302f32322d3234203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:58:05:0e:3f:98:10:7b:7e:b5:17:d2:6b:7b:7c:7a:a6:
         f1:50:53:78:34:01:2d:78:b3:0b:32:a7:00:78:39:fb:93:ca:
         be:60:c8:2b:c4:2a:35:31:39:14:61:b8:a5:d3:4e:ab:cb:8d:
         4a:1c:a3:87:3f:b6:f2:df:52:4a:39:81:1f:d6:13:a0:8e:7e:
         d3:6b:d0:ae:da:f2:ba:ec:bf:56:82:51:96:50:58:2c:f4:34:
         51:0f:73:25:83:cc:b2:7a:fd:9e:46:ab:85:4b:f4:b2:0b:dd:
         99:89:51:47:54:3e:89:41:6b:f7:0a:6d:b1:8b:a8:bd:64:b6:
         cd:aa:01:5f:b6:9f:64:dc:07:9d:0e:bb:32:18:db:f6:6a:1b:
         7c:bd:dc:9a:90:6f:47:7f:ca:bc:d7:3c:b1:d7:4f:bd:68:df:
         57:bb:f0:1e:3e:19:a2:d1:8a:5b:b6:6c:cd:f7:67:e8:1b:f7:
         74:b0:d0:c9:22:1e:9a:f0:27:64:91:12:0b:d3:72:cd:ec:e2:
         0c:ee:16:61:9a:0d:e9:6c:8f:5f:71:17:02:23:a5:ca:89:fd:
         30:74:3e:b2:42:40:88:66:0f:14:dd:49:98:9c:dd:ab:a9:2d:
         8c:d1:2f:94:b9:4b:70:e8:11:69:c6:2e:39:03:02:6e:20:25:
         e6:05:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:23 2025 by rpki-client