Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          agermYgXhtU63jQ9PA+deteiQ0ZkRXplsSpGuVdFPww=
Subject key identifier:   6D:C5:B6:E2:CF:C9:31:03:C1:92:DF:DF:F7:98:27:98:20:20:C3:39
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       173C4093D5A3934093F9B863E4B44472C5D73FED
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:32 +0000
ROA not before:           Tue 20 Jun 2023 13:48:32 +0000
ROA not after:            Tue 18 Jun 2024 13:53:32 +0000
asID:                     262765
IP address blocks:        168.232.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3c:40:93:d5:a3:93:40:93:f9:b8:63:e4:b4:44:72:c5:d7:3f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:32 2023 GMT
            Not After : Jun 18 13:53:32 2024 GMT
        Subject: CN=6DC5B6E2CFC93103C192DFDFF79827982020C339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:20:d5:50:8a:96:30:c6:9d:53:0b:7e:ef:
                    7e:40:d8:6e:8c:d6:6d:5f:01:42:af:b4:af:45:35:
                    5b:b0:86:37:b5:d8:0f:79:59:2d:b0:16:ff:7a:d7:
                    d2:c2:03:53:5c:22:5e:13:44:0d:68:5a:c6:84:a2:
                    c3:87:4a:02:f9:54:02:58:e3:83:20:96:b4:d3:4c:
                    70:9b:e6:39:27:df:e4:c7:1c:10:5c:06:55:2f:fd:
                    8b:d1:38:b7:6b:b7:a5:ae:31:e2:1e:a4:d9:2f:7e:
                    f6:7c:25:77:5f:fa:23:62:0c:3f:7b:c2:00:12:06:
                    e7:4c:7d:8a:15:05:6d:78:cb:07:0f:f0:c3:72:c3:
                    33:fb:2d:f6:a9:d0:8d:b8:37:0c:83:ba:1d:e1:bf:
                    3b:ac:f3:ac:9d:2c:7e:b4:9e:fd:07:cb:37:0e:3f:
                    63:f1:70:7c:98:4a:42:36:61:12:12:cf:74:73:55:
                    3d:ca:5a:8b:1f:a7:d3:29:04:a1:6f:82:50:90:de:
                    88:89:58:44:0c:2a:5b:57:c4:15:36:01:fc:44:ce:
                    61:e8:92:e1:ee:d5:5e:74:55:a4:cc:2f:9d:77:79:
                    e1:d0:54:44:6d:35:c0:3c:2c:52:a0:4f:50:f2:95:
                    96:42:53:70:39:23:7b:de:57:62:1a:e0:e8:d8:93:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:B6:E2:CF:C9:31:03:C1:92:DF:DF:F7:98:27:98:20:20:C3:39
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:5c:db:79:98:1f:80:82:6b:99:cc:0f:50:4c:2b:c7:4b:
         d5:b5:f7:f1:64:d0:af:c0:f5:b8:88:e4:ae:61:39:9e:97:ae:
         06:48:36:7b:a5:74:91:61:31:d9:8c:db:93:3a:31:89:9a:6e:
         71:2c:03:78:5c:e0:39:25:15:28:9d:71:89:65:c2:a8:bd:8a:
         a1:20:8a:71:cd:5d:3e:17:2f:90:bd:50:53:a3:88:fb:04:5d:
         56:8e:22:2e:81:4e:3a:9f:f4:2c:33:1a:79:68:28:a8:80:c8:
         f3:d9:21:ba:fe:ae:cc:e9:55:5b:39:3a:ba:f1:1a:25:37:6f:
         cd:05:f7:8f:b3:22:f4:6d:13:8b:34:93:7b:2e:0c:ae:d9:76:
         a5:48:19:97:e7:2d:6c:55:a4:83:a7:be:d1:c9:e5:e5:89:21:
         d0:e9:d9:77:b0:ff:d2:00:17:6a:66:e3:46:c9:6b:8d:fd:2b:
         80:32:b3:55:54:28:61:12:1f:d9:bb:07:a9:bb:2d:60:0b:5b:
         75:ea:ea:45:f7:c3:da:e1:ab:35:52:db:8f:4d:aa:cc:26:ab:
         0c:34:11:2a:07:0e:35:f4:49:ff:51:7f:25:a3:c8:8d:2f:d1:
         19:0e:72:2d:d7:c1:15:53:dc:4e:cb:f1:71:0c:11:96:24:de:
         8d:8a:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:13 2025 by rpki-client