Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
File:                     3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          nGLXZT7/C6tD0lf32fsIlJMYnYoYsn/yoe3ckKyFhmk=
Subject key identifier:   09:3C:58:4E:DB:F4:16:DB:81:2E:67:0C:30:E9:25:F3:EA:40:68:A3
Certificate issuer:       /CN=5D39942929DA6ADF1083B57D7ED72A3A4653C28F
Certificate serial:       330FCECD5F1712F40A39AB0058F72E999B37CF15
Authority key identifier: 5D:39:94:29:29:DA:6A:DF:10:83:B5:7D:7E:D7:2A:3A:46:53:C2:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
Signing time:             Thu 08 Feb 2024 15:02:54 +0000
ROA not before:           Thu 08 Feb 2024 14:57:54 +0000
ROA not after:            Thu 06 Feb 2025 15:02:54 +0000
asID:                     264886
IP address blocks:        168.227.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0f:ce:cd:5f:17:12:f4:0a:39:ab:00:58:f7:2e:99:9b:37:cf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D39942929DA6ADF1083B57D7ED72A3A4653C28F
        Validity
            Not Before: Feb  8 14:57:54 2024 GMT
            Not After : Feb  6 15:02:54 2025 GMT
        Subject: CN=093C584EDBF416DB812E670C30E925F3EA4068A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:7c:9c:39:91:71:d1:6a:08:f3:fb:a3:d3:
                    c2:29:33:00:3b:c9:f5:9d:3c:e2:f9:ef:c9:9f:f8:
                    4b:31:34:45:6b:39:e6:8f:32:39:c5:fa:4d:36:c2:
                    70:2f:b1:42:a3:bd:21:93:fb:47:e4:21:9f:c6:01:
                    ad:18:76:14:d2:28:d7:ff:80:11:71:11:11:69:e7:
                    51:41:63:de:18:8f:50:8f:02:0f:ee:31:c9:b0:e8:
                    58:33:ac:b9:32:a3:53:64:d6:e5:e2:ad:c1:94:ef:
                    1d:64:cd:a0:ed:9e:05:c7:e3:3c:d8:da:9f:01:c2:
                    6e:45:31:eb:c3:7e:4b:cd:9b:60:57:1f:0a:be:55:
                    2c:c2:10:42:3f:59:67:c4:d5:2c:fc:e5:71:a9:56:
                    4d:96:46:b1:eb:95:b6:97:6f:0b:00:e5:58:e5:a2:
                    38:13:7f:69:6f:99:3b:ad:6f:0b:7f:4b:a9:c5:f0:
                    3c:e8:e4:5a:97:49:89:4e:14:52:73:cd:e3:f4:00:
                    ca:3d:7f:2f:d2:27:b5:ff:09:3d:2b:f0:b6:8a:35:
                    dc:2c:45:6f:18:ed:3d:63:60:72:b0:19:4e:89:f7:
                    79:43:c3:92:cb:d4:ce:63:bf:23:0d:0c:9b:42:67:
                    8f:60:56:ab:b5:b2:0b:48:c8:5b:bb:a8:b8:e3:02:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:58:4E:DB:F4:16:DB:81:2E:67:0C:30:E9:25:F3:EA:40:68:A3
            X509v3 Authority Key Identifier:
                keyid:5D:39:94:29:29:DA:6A:DF:10:83:B5:7D:7E:D7:2A:3A:46:53:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:d5:f8:5d:08:58:8c:cd:7d:e9:34:b5:b4:8a:02:4c:db:0b:
         a7:01:bc:df:dd:29:74:98:5f:35:8d:98:5b:27:92:89:71:1a:
         25:f9:25:d6:fe:b8:48:a7:21:6c:bb:3a:41:d9:6d:53:3d:29:
         ca:9b:06:2b:39:28:54:78:da:44:56:8a:ca:c2:20:3e:96:7a:
         a8:52:f3:e7:ec:2d:86:30:61:79:31:6d:1b:41:3e:f2:8e:30:
         eb:a0:47:97:a2:78:68:d5:69:f4:4e:ae:fc:52:d1:f1:0f:46:
         45:bc:f4:ad:3a:7d:ae:ae:bf:61:78:84:3f:c8:73:08:a2:8f:
         c3:c5:5c:f0:3a:14:b2:78:6e:27:91:26:73:50:b6:c3:6c:d6:
         04:68:4f:36:17:d2:76:12:6e:2a:8c:b9:9f:8a:b3:9f:45:8e:
         45:e1:10:19:e4:e1:92:e4:bb:c4:49:28:ce:7d:8d:29:77:2f:
         dc:0a:0c:2a:95:f2:c6:a5:86:89:9f:90:77:e3:ae:f5:01:90:
         48:d3:da:87:3b:6b:ea:77:d3:46:2a:1a:ad:38:83:2f:e8:78:
         31:81:36:ad:03:2e:ae:34:b2:dc:c5:26:c0:16:82:cd:9c:fd:
         c6:90:6e:61:ed:24:3e:0e:5a:2b:38:6f:13:c2:35:d7:3e:c9:
         87:07:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:47 2025 by rpki-client