Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/3136382e3230352e35362e302f32322d3234203d3e203532353238.roa
File:                     3136382e3230352e35362e302f32322d3234203d3e203532353238.roa (raw, json)
Hash identifier:          9+FU87jP+L5uL9b6jHabJt8fxDRnxYB6N3UIz3s6W7k=
Subject key identifier:   6F:6E:69:3E:83:58:22:01:66:03:4C:78:95:57:D4:B1:49:B9:FC:94
Certificate issuer:       /CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
Certificate serial:       7D04E5AE639C5812601956AA2EB0E64B079183FC
Authority key identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/3136382e3230352e35362e302f32322d3234203d3e203532353238.roa
Signing time:             Wed 19 Feb 2025 11:34:26 +0000
ROA not before:           Wed 19 Feb 2025 11:29:26 +0000
ROA not after:            Wed 18 Feb 2026 11:34:26 +0000
asID:                     52528
IP address blocks:        168.205.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:04:e5:ae:63:9c:58:12:60:19:56:aa:2e:b0:e6:4b:07:91:83:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D029F4191C8EF817C89954B6B967C60EAE2451
        Validity
            Not Before: Feb 19 11:29:26 2025 GMT
            Not After : Feb 18 11:34:26 2026 GMT
        Subject: CN=6F6E693E8358220166034C789557D4B149B9FC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:d2:30:c3:f9:83:57:d9:51:58:c5:49:d9:
                    bf:7c:f0:79:50:11:34:5e:e4:74:e2:62:3d:4d:5e:
                    58:32:5a:07:c1:29:35:67:43:9f:a0:5f:2a:e5:c2:
                    9a:8e:c8:1d:a0:7c:a8:ff:a0:13:c7:dc:3c:09:49:
                    9c:44:ee:46:58:68:56:19:82:7a:40:50:7a:bf:5f:
                    73:96:a9:dd:2d:23:23:00:1d:dd:f9:16:97:5f:81:
                    3d:99:8a:95:a7:19:7e:bf:a0:2e:7c:9c:26:6b:86:
                    db:1f:39:2e:3c:c3:55:7b:e7:98:32:f9:73:70:f8:
                    d5:4b:40:52:85:a1:7a:67:80:bf:08:f8:41:d1:23:
                    ac:68:b2:78:d2:64:35:dd:81:ec:6d:72:e8:d4:95:
                    6c:ac:7f:04:fa:a7:b0:a0:a4:cb:d1:1c:33:3e:1e:
                    0c:34:18:22:c3:67:27:0d:33:55:90:0a:6d:6d:4f:
                    59:d2:ab:10:52:45:75:da:2b:2a:1d:ae:a3:5b:27:
                    d4:b1:c1:48:d7:c5:1a:36:04:21:22:6e:03:cd:42:
                    6b:80:33:e8:63:aa:43:29:fe:43:e6:a3:cb:bb:62:
                    86:3b:61:54:5d:35:0d:5f:16:70:11:77:6e:af:7b:
                    68:73:84:b6:39:06:78:78:b9:96:e1:a1:72:9f:2b:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6E:69:3E:83:58:22:01:66:03:4C:78:95:57:D4:B1:49:B9:FC:94
            X509v3 Authority Key Identifier:
                keyid:F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/3136382e3230352e35362e302f32322d3234203d3e203532353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:ed:83:35:63:8f:3d:75:79:be:51:39:2f:3a:5e:a2:24:37:
         8b:67:ed:9e:5e:5d:dd:95:15:b2:58:27:f6:68:da:0b:e6:49:
         d8:b7:b0:0c:b0:21:03:b1:35:2d:ea:0e:e5:9a:1c:ca:ce:06:
         78:de:37:10:00:4e:2d:85:d3:a8:96:f9:fb:f2:c5:29:84:2a:
         0e:a7:e0:c5:10:29:c0:81:de:c9:37:77:fb:99:2a:9f:eb:01:
         94:c9:af:d0:63:2a:1b:fb:18:f2:12:2b:6c:1c:e8:c3:02:a9:
         0b:61:79:de:36:cb:49:d8:1f:76:0f:62:5d:92:8b:fa:89:dc:
         62:aa:f8:5b:fc:f3:f8:ab:6a:68:bb:b5:ef:48:5e:22:a0:43:
         9d:9f:31:4f:f5:9f:49:6e:7a:36:af:c1:29:92:48:05:59:5c:
         fb:bd:23:05:4e:55:12:bb:eb:bf:88:ce:5c:92:f3:29:7a:58:
         8d:fd:23:ba:fb:5a:d1:8c:e3:09:d6:02:b9:8d:9f:78:95:a5:
         52:cd:41:bb:bc:a8:a6:df:96:16:97:df:c9:5b:fc:cf:6f:8a:
         e8:e1:b2:cf:36:37:cd:f9:39:eb:4b:4a:60:04:da:ce:46:31:
         91:89:ae:2d:39:56:a0:9d:a7:3c:e3:f1:2d:20:11:20:10:46:
         cb:e9:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:20:42 2025 by rpki-client