Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31322e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e31322e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          CUnIzzaSh/tkR/ZGaQyfmF44TO0pHGiWyq/JfXd9Z+I=
Subject key identifier:   CE:C8:68:10:85:E5:55:52:E5:19:8B:26:77:96:8B:45:E1:4C:18:6D
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       75F9A04A6FCF78093D3EA2E0944B1B9D7FB023C3
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31322e302f32342d3234203d3e203233303734.roa
Signing time:             Fri 07 Feb 2025 01:45:00 +0000
ROA not before:           Fri 07 Feb 2025 01:40:00 +0000
ROA not after:            Fri 06 Feb 2026 01:45:00 +0000
asID:                     23074
IP address blocks:        164.85.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:a0:4a:6f:cf:78:09:3d:3e:a2:e0:94:4b:1b:9d:7f:b0:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Feb  7 01:40:00 2025 GMT
            Not After : Feb  6 01:45:00 2026 GMT
        Subject: CN=CEC8681085E55552E5198B2677968B45E14C186D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:5e:e1:03:f1:ec:57:1d:0a:07:c2:0c:d7:
                    ed:d8:f4:73:a6:c3:22:d3:d1:97:fd:09:cf:02:51:
                    47:17:af:99:e2:d4:19:0e:cb:20:92:e2:07:37:5b:
                    35:07:b4:60:61:ee:a5:01:87:6b:e8:3f:f0:26:00:
                    cb:24:af:ec:68:26:ed:c3:ab:15:0b:c4:87:58:fe:
                    ef:0a:85:99:88:1b:1b:da:e7:95:9f:6e:1e:5c:35:
                    80:a2:25:14:50:17:1b:da:9c:7a:23:e9:0a:9e:c0:
                    9f:b9:8c:85:29:50:83:e0:31:4e:11:b8:12:3e:03:
                    92:26:e0:39:41:0c:d8:41:b1:9f:ef:c9:18:00:89:
                    19:75:0b:3c:f5:0d:b6:e2:8f:c5:ec:a5:a9:b3:8c:
                    d2:9b:82:77:cf:ab:21:3f:87:99:4e:81:39:8c:39:
                    eb:8a:04:b8:2c:1a:7f:28:f8:41:e0:26:cf:02:78:
                    73:a3:cc:09:3e:a4:d8:c6:a8:4d:a1:e1:c2:9d:d3:
                    d2:13:2c:45:f7:d1:c2:4f:4e:c8:55:10:31:9c:b4:
                    0f:06:ee:55:93:b3:8b:8a:0c:67:26:43:66:17:93:
                    19:22:0a:b4:84:3c:0b:ef:0b:79:ed:3d:27:83:25:
                    ed:a1:9f:e0:04:d1:26:0e:40:03:5e:bf:ba:86:1a:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:68:10:85:E5:55:52:E5:19:8B:26:77:96:8B:45:E1:4C:18:6D
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31322e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:9d:93:07:08:cb:9d:91:82:68:b5:50:81:b8:98:45:16:
         54:1c:20:bb:c4:dd:12:d8:d5:ae:98:da:15:46:fd:e4:cc:73:
         15:df:b6:5e:de:c4:48:b2:c3:66:9c:8c:ef:be:69:56:c7:54:
         55:a7:cd:82:b4:3f:22:a0:fe:e4:f2:c5:73:35:1b:12:06:e8:
         ba:3a:28:cd:2b:76:99:ab:73:59:95:ae:84:49:39:2a:fc:47:
         6b:9f:c2:8f:7c:01:21:4d:18:1c:63:af:32:d1:d9:ba:d0:58:
         be:1d:86:24:28:0b:2b:a7:08:42:99:af:fa:a3:d1:ba:41:2c:
         f7:1a:55:18:86:09:e0:d9:b7:71:4e:46:f1:f4:c7:b0:b9:37:
         75:94:17:13:05:39:53:84:dc:10:bb:f1:5f:cf:cf:2b:5b:c7:
         05:68:38:8e:3d:90:b9:cd:c9:43:17:09:ec:43:1c:0c:c7:f3:
         ab:79:e2:71:18:04:79:c1:7d:b2:23:21:e7:fe:20:d3:03:a9:
         1d:ef:0c:6f:ae:26:4a:56:27:e9:a3:18:f8:67:7e:83:42:58:
         ab:27:1a:92:08:94:65:46:21:84:a0:6d:f7:86:5b:11:a7:12:
         ba:5a:a7:bb:5b:20:85:10:01:32:b4:08:9e:33:4d:d0:b0:86:
         af:ef:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:57:14 2025 by rpki-client