Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/3136382e3138312e3234382e302f32322d3232203d3e20323635333439.roa
File:                     3136382e3138312e3234382e302f32322d3232203d3e20323635333439.roa (raw, json)
Hash identifier:          6OuSYaQr+/6jJBfwGhNZCOtNznfL9+lbru59Tz2mOZ0=
Subject key identifier:   ED:5B:26:69:26:BA:5D:AA:D7:91:1B:56:AB:57:D1:E8:E5:36:2A:61
Certificate issuer:       /CN=1F76F8120090A00C139D1339571B6D69F3DF42BF
Certificate serial:       722CA04535DF6A041805C921197BCB477A4AC698
Authority key identifier: 1F:76:F8:12:00:90:A0:0C:13:9D:13:39:57:1B:6D:69:F3:DF:42:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F76F8120090A00C139D1339571B6D69F3DF42BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/3136382e3138312e3234382e302f32322d3232203d3e20323635333439.roa
Signing time:             Wed 14 Dec 2022 20:00:00 +0000
ROA not before:           Wed 14 Dec 2022 19:55:00 +0000
ROA not after:            Wed 13 Dec 2023 20:00:00 +0000
asID:                     265349
IP address blocks:        168.181.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:a0:45:35:df:6a:04:18:05:c9:21:19:7b:cb:47:7a:4a:c6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F76F8120090A00C139D1339571B6D69F3DF42BF
        Validity
            Not Before: Dec 14 19:55:00 2022 GMT
            Not After : Dec 13 20:00:00 2023 GMT
        Subject: CN=ED5B266926BA5DAAD7911B56AB57D1E8E5362A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:ef:9c:42:b6:3f:a7:04:ec:8b:26:f7:96:
                    e0:49:bc:ae:ea:68:c5:09:7d:dc:6a:87:4f:1d:c6:
                    da:9d:ad:ac:2b:c9:d7:08:82:18:0a:f6:8c:d4:33:
                    d5:eb:12:e2:b4:dc:f2:d1:da:a7:19:58:67:fc:f3:
                    25:9f:1b:c1:b9:4d:8c:ca:67:c6:e2:e1:4f:3a:5b:
                    7b:a2:78:f2:40:b9:3a:bc:9c:c4:05:67:8a:06:e3:
                    5c:2d:87:9c:26:1f:12:36:88:a4:cc:9e:ad:69:7b:
                    d2:dc:76:48:98:25:7a:21:7f:e4:03:04:46:49:e5:
                    f1:c6:10:8b:d3:07:f4:bf:ef:cf:45:38:8a:15:e4:
                    c1:df:48:fa:11:78:4b:72:d4:93:f2:21:c0:ab:b7:
                    ae:62:48:83:71:41:ae:23:f8:03:4a:f5:9e:94:0d:
                    d6:4a:8b:ce:2b:48:df:e1:9a:00:a6:1e:df:23:6f:
                    5f:5a:12:50:0a:22:74:4c:b1:d1:b5:e0:e2:3c:75:
                    5e:d5:1d:b0:14:16:9b:c6:b9:65:f1:22:82:52:a6:
                    2f:bf:83:56:95:01:a6:e9:f0:2d:63:60:3d:91:32:
                    9d:d0:0e:51:c1:cd:47:af:7d:42:b3:ff:27:b4:47:
                    ab:ce:2d:3d:99:bf:29:ce:91:4a:aa:d6:ed:d6:93:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:26:69:26:BA:5D:AA:D7:91:1B:56:AB:57:D1:E8:E5:36:2A:61
            X509v3 Authority Key Identifier:
                keyid:1F:76:F8:12:00:90:A0:0C:13:9D:13:39:57:1B:6D:69:F3:DF:42:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/1F76F8120090A00C139D1339571B6D69F3DF42BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F76F8120090A00C139D1339571B6D69F3DF42BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/3136382e3138312e3234382e302f32322d3232203d3e20323635333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:c8:88:df:fd:43:24:1a:11:1e:24:d4:95:db:15:0b:34:
         a5:e4:a1:7b:2b:7c:2e:0c:e9:fb:a7:2e:a9:59:fa:b0:09:47:
         fc:18:ca:23:16:a8:81:11:90:55:d0:c2:36:43:a5:89:97:e5:
         ce:6b:3a:60:73:0d:7f:0f:1e:a9:25:c7:04:04:96:c3:88:35:
         e0:c6:a5:77:f2:e2:a3:c2:4d:7e:44:c2:f9:cc:f2:56:af:0c:
         8e:57:0a:56:f5:c9:00:e7:76:90:2c:a8:5c:7f:3f:29:91:6c:
         a8:8e:9e:72:06:48:79:d8:a4:6a:c9:ba:ae:bf:df:62:e6:05:
         3d:27:7d:16:ae:1f:1b:99:f3:6d:d7:90:b9:be:10:1e:a7:6c:
         ee:be:3d:55:68:44:9e:36:f6:1d:92:0d:07:36:99:dc:11:81:
         eb:5f:ee:64:90:b5:2a:4e:cc:47:37:8e:14:9b:76:33:70:3e:
         68:13:5b:be:6b:2b:a0:60:ee:ec:49:38:cf:56:22:f9:80:f4:
         3b:04:0a:2d:ae:9f:ad:d6:55:51:43:18:fc:d2:6c:6f:61:4f:
         60:2b:21:ec:1c:70:f7:64:25:97:82:ed:ca:06:45:b0:48:4a:
         f8:d1:fe:2c:51:45:d2:80:05:29:6e:f7:ce:03:eb:7f:f3:53:
         fe:41:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:19 2025 by rpki-client