Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/3136382e3138312e3234382e302f32342d3234203d3e20323635333439.roa
File:                     3136382e3138312e3234382e302f32342d3234203d3e20323635333439.roa (raw, json)
Hash identifier:          MglOMDtDa4K0hPCF43ia44GQyluGS7ou55qPLN+47MY=
Subject key identifier:   EA:6A:3C:7E:2A:A9:E6:78:20:82:68:4F:09:2B:F3:E4:69:54:B2:6F
Certificate issuer:       /CN=1F76F8120090A00C139D1339571B6D69F3DF42BF
Certificate serial:       0EF923AF5B3B08B0C96CC356B5F2F2C6CDB1057E
Authority key identifier: 1F:76:F8:12:00:90:A0:0C:13:9D:13:39:57:1B:6D:69:F3:DF:42:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F76F8120090A00C139D1339571B6D69F3DF42BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/3136382e3138312e3234382e302f32342d3234203d3e20323635333439.roa
Signing time:             Wed 14 Dec 2022 20:00:00 +0000
ROA not before:           Wed 14 Dec 2022 19:55:00 +0000
ROA not after:            Wed 13 Dec 2023 20:00:00 +0000
asID:                     265349
IP address blocks:        168.181.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f9:23:af:5b:3b:08:b0:c9:6c:c3:56:b5:f2:f2:c6:cd:b1:05:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F76F8120090A00C139D1339571B6D69F3DF42BF
        Validity
            Not Before: Dec 14 19:55:00 2022 GMT
            Not After : Dec 13 20:00:00 2023 GMT
        Subject: CN=EA6A3C7E2AA9E6782082684F092BF3E46954B26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:e4:21:13:af:63:46:12:e5:9e:d2:c3:cc:
                    db:bc:24:99:b5:c0:6e:91:17:22:d2:c1:f6:5a:de:
                    ed:59:f2:94:4b:d6:64:ca:9b:2f:5c:d7:88:3a:e8:
                    bd:e4:0a:d8:03:f7:7f:15:74:2b:66:c3:4a:04:21:
                    6f:29:b0:13:72:5f:c3:8e:47:7e:ef:62:3b:0b:2c:
                    64:15:d1:17:93:e4:93:18:7e:69:3d:de:e8:a9:82:
                    10:d6:0a:bb:15:9d:0d:8c:d8:eb:9e:94:b9:ba:af:
                    d6:66:a2:fb:40:84:47:62:5c:f3:cf:d1:dc:b2:d8:
                    cc:a8:48:1e:3d:52:73:2a:ef:46:83:59:22:f2:d1:
                    4d:4c:7f:06:f3:7e:11:79:5c:ba:c5:10:e1:bd:96:
                    fd:ae:77:4d:60:c9:bb:51:bc:50:8f:4f:0d:e9:fa:
                    eb:ca:77:75:b2:57:b6:7c:4a:d7:e7:c8:45:33:61:
                    54:14:d2:28:0d:16:d1:91:8e:0b:5f:84:09:50:59:
                    2e:8b:aa:96:a5:bd:77:cf:08:3f:e4:f7:14:3a:1b:
                    ee:82:8e:3c:1c:27:17:dd:a5:30:c5:ed:aa:2c:be:
                    07:3d:15:a0:15:8f:be:a8:df:8d:ea:ac:61:bd:3c:
                    3c:12:57:01:42:21:74:26:91:be:f2:2e:2f:d6:63:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6A:3C:7E:2A:A9:E6:78:20:82:68:4F:09:2B:F3:E4:69:54:B2:6F
            X509v3 Authority Key Identifier:
                keyid:1F:76:F8:12:00:90:A0:0C:13:9D:13:39:57:1B:6D:69:F3:DF:42:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/1F76F8120090A00C139D1339571B6D69F3DF42BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F76F8120090A00C139D1339571B6D69F3DF42BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/o9aA4LLf7bcDPJkXnzb9ynEetZg81UyRh4wwg4iWaCk/0/3136382e3138312e3234382e302f32342d3234203d3e20323635333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:59:cc:70:50:01:7d:22:69:8f:bb:b9:8f:6a:8c:4f:7e:31:
         45:cc:83:15:71:94:b5:02:e5:69:dc:f0:a8:dd:a1:bf:c0:f2:
         f1:27:ae:d5:a0:db:98:4d:fb:56:9d:67:52:08:d1:0d:9f:31:
         85:f4:3b:00:b1:00:7f:41:88:9e:20:d3:14:55:5c:48:a5:61:
         08:9f:7e:52:c1:dd:47:0a:7a:fd:50:8d:b0:9d:d1:30:58:b0:
         fc:a9:63:5d:20:ec:5a:4a:d7:2a:42:76:b8:a5:57:01:f5:bd:
         c4:8e:77:f5:c8:23:41:d3:ab:dd:eb:20:bd:9f:e0:64:f3:42:
         74:1c:14:4c:38:cf:47:9c:fb:6f:0b:e2:4c:7e:db:63:b6:27:
         05:cb:b3:8c:67:7f:fc:d5:1f:94:28:c6:0c:23:33:29:fb:f1:
         d9:ce:29:70:be:ab:f6:fb:01:45:3b:64:2a:85:f5:0c:00:55:
         bb:ba:1a:9d:54:7d:59:32:0b:d0:43:15:f2:0b:84:9c:61:ae:
         e8:a7:f2:1f:a1:c6:d5:96:c6:8e:ff:83:7b:47:aa:e7:de:3a:
         1b:6e:3f:f8:09:b2:11:c1:98:e6:57:0d:c0:5c:f4:1a:69:0e:
         6b:2d:fa:c9:3a:42:f8:03:00:29:b8:d7:19:2a:c4:6b:74:58:
         55:10:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:09 2025 by rpki-client