Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/3136382e3132312e37362e302f32322d3232203d3e20323635333031.roa
File:                     3136382e3132312e37362e302f32322d3232203d3e20323635333031.roa (raw, json)
Hash identifier:          O4/Se6ZrLtJF2x6fYR/pcw3CZYGTQ7mxoa61qtDZTDg=
Subject key identifier:   0B:57:DD:3A:CE:6B:28:1D:17:CB:31:38:A8:F8:87:56:BF:FC:E2:4B
Certificate issuer:       /CN=E35DBE2041EBF34AAB0D87561D88726CB15142C5
Certificate serial:       30DEBBCB8F7C1F4CC2009570FCE994CD1C068495
Authority key identifier: E3:5D:BE:20:41:EB:F3:4A:AB:0D:87:56:1D:88:72:6C:B1:51:42:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/3136382e3132312e37362e302f32322d3232203d3e20323635333031.roa
Signing time:             Thu 10 Nov 2022 18:34:32 +0000
ROA not before:           Thu 10 Nov 2022 18:29:32 +0000
ROA not after:            Thu 09 Nov 2023 18:34:32 +0000
asID:                     265301
IP address blocks:        168.121.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:de:bb:cb:8f:7c:1f:4c:c2:00:95:70:fc:e9:94:cd:1c:06:84:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DBE2041EBF34AAB0D87561D88726CB15142C5
        Validity
            Not Before: Nov 10 18:29:32 2022 GMT
            Not After : Nov  9 18:34:32 2023 GMT
        Subject: CN=0B57DD3ACE6B281D17CB3138A8F88756BFFCE24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:5d:37:00:77:1a:c2:59:88:1c:3b:ed:af:
                    c6:93:ba:84:3c:59:22:97:67:16:59:21:bc:71:2d:
                    9d:90:f3:8d:51:f8:29:bd:ee:9d:2a:f0:cf:51:59:
                    cd:8c:4b:c0:e8:87:fa:5a:f2:af:e6:3c:a1:fe:22:
                    01:a8:2f:cc:44:86:2c:69:7f:89:76:46:0b:47:81:
                    78:3c:65:9e:a4:32:ee:ff:aa:af:5d:eb:79:f1:eb:
                    3d:b4:27:b3:99:58:25:7b:33:7b:e5:32:a3:e7:69:
                    3b:88:ac:75:4c:d6:72:ea:21:79:f6:23:65:15:d7:
                    f4:99:84:66:58:d5:d1:6a:dc:94:af:f1:f6:d0:7a:
                    3b:83:a0:cb:ff:4c:34:67:6a:9d:52:e3:47:f8:7c:
                    ed:87:1d:ea:58:9d:cb:e0:eb:2c:ce:da:1e:0b:67:
                    9b:da:b0:ff:1e:79:59:a0:1a:96:bb:48:92:61:8d:
                    ac:b1:62:46:29:a2:22:3a:bd:34:91:9f:a1:61:37:
                    b6:ca:61:c8:5e:46:eb:10:8e:62:d0:23:1a:c5:25:
                    6e:93:fb:6c:a1:0d:34:2c:09:7f:41:54:ad:57:af:
                    76:af:5f:12:00:55:50:ec:1c:e0:9d:bd:26:62:46:
                    9b:3b:0e:c1:6c:50:20:c7:dd:29:82:6c:8d:07:98:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:DD:3A:CE:6B:28:1D:17:CB:31:38:A8:F8:87:56:BF:FC:E2:4B
            X509v3 Authority Key Identifier:
                keyid:E3:5D:BE:20:41:EB:F3:4A:AB:0D:87:56:1D:88:72:6C:B1:51:42:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/3136382e3132312e37362e302f32322d3232203d3e20323635333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:8c:15:07:6b:23:33:0a:6d:2a:b4:4b:72:1d:d0:34:5f:
         81:49:14:fb:ec:9f:9e:ae:46:b8:45:e7:92:c7:2a:df:70:2d:
         b0:b2:93:91:35:cf:99:fd:40:f1:99:01:82:d4:9c:23:a4:b4:
         d4:8b:fd:78:7a:6c:a5:8f:ee:25:0c:a9:c2:b7:bf:ce:d8:c9:
         45:ef:8b:48:42:f7:38:6d:0a:22:5d:9d:7e:a2:2e:3a:5c:c9:
         fe:3b:70:14:9c:fe:7e:fb:87:e9:16:07:c8:77:b7:96:db:b2:
         e3:a2:9d:17:58:7d:54:57:30:37:74:70:45:17:a2:cc:73:b1:
         61:49:59:a3:de:d0:0d:0f:10:29:ec:dc:b6:b4:b3:6a:e4:5c:
         6d:6a:45:20:7c:be:7e:ce:70:86:d0:95:08:20:0e:e1:c4:33:
         8d:77:6b:a3:32:83:32:bb:0d:61:c1:e2:e5:ab:68:8f:4f:1f:
         61:a3:67:59:de:2f:9b:17:75:2b:5b:0a:c9:5d:d5:23:4e:a4:
         6c:98:a3:04:eb:85:bd:c7:52:05:c1:ee:41:cb:7c:cb:db:db:
         35:b9:b9:17:8e:d0:60:23:76:3b:6e:0f:ef:10:5d:38:dc:c9:
         14:4d:42:64:61:3d:46:ea:59:98:3a:78:ed:96:f3:79:fd:7d:
         10:10:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:45 2025 by rpki-client