Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32322d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          1mAFHPXZOr3pjKtOhw0bvb070KuLgA4OHS/vmTOwuLQ=
Subject key identifier:   8E:F3:C2:DC:3B:52:25:A8:98:64:49:D9:82:74:66:30:2C:5A:9F:1A
Certificate issuer:       /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial:       38BDD9F445D3E60225924AA1344955DE16F9EE9A
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3234203d3e20323635333933.roa
Signing time:             Tue 04 Feb 2025 13:57:34 +0000
ROA not before:           Tue 04 Feb 2025 13:52:34 +0000
ROA not after:            Tue 03 Feb 2026 13:57:34 +0000
asID:                     265393
IP address blocks:        168.194.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:d9:f4:45:d3:e6:02:25:92:4a:a1:34:49:55:de:16:f9:ee:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
        Validity
            Not Before: Feb  4 13:52:34 2025 GMT
            Not After : Feb  3 13:57:34 2026 GMT
        Subject: CN=8EF3C2DC3B5225A8986449D9827466302C5A9F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:62:4e:a8:d0:7a:e3:64:b2:c1:6a:bf:8d:
                    92:d6:f2:95:42:8d:f8:03:8e:0e:a2:db:f1:8c:ba:
                    83:2b:98:92:ee:d4:d8:33:ce:d7:bd:8d:7c:3c:b3:
                    36:26:9c:3c:77:ce:19:36:4c:cb:16:6e:9e:bf:ae:
                    48:32:f1:e9:ea:d6:38:73:d6:f4:be:60:38:e2:8b:
                    94:4f:23:7d:94:3c:2e:53:8b:c9:77:c6:12:01:90:
                    88:18:42:21:0e:07:5b:ec:78:98:95:74:e8:7d:ae:
                    8d:22:18:01:d3:d1:99:b1:32:fd:0b:0a:e5:39:1c:
                    be:8b:ad:7d:7b:17:da:fe:c0:ea:8f:73:ac:c8:fe:
                    db:ec:b7:6f:8f:ea:87:f4:1d:ac:f8:d2:65:70:b3:
                    73:b6:ca:17:9b:4a:c8:b7:ba:7c:fa:29:f4:95:bc:
                    c5:ce:c1:d5:ab:9f:10:c5:88:45:99:d8:2d:04:b3:
                    35:69:d1:17:30:b8:eb:d2:e8:65:a0:13:b3:3b:36:
                    fa:53:6c:14:06:47:e3:e5:98:20:56:39:93:74:02:
                    85:c0:7a:d6:c1:8c:e5:5f:64:6b:71:13:0d:68:ef:
                    4d:bc:25:f7:4b:1d:9c:0f:7d:b9:c4:e9:f8:9e:2c:
                    53:55:e8:d3:45:b9:6f:94:24:69:83:cf:63:90:f4:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F3:C2:DC:3B:52:25:A8:98:64:49:D9:82:74:66:30:2C:5A:9F:1A
            X509v3 Authority Key Identifier:
                keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:da:82:5f:c9:ab:7f:2d:cf:93:03:63:cd:03:1e:fc:c4:a4:
         32:99:32:8b:11:7b:bc:ed:02:64:38:27:51:6d:a3:51:80:40:
         73:52:c1:e2:d1:45:f4:15:54:1c:7d:b3:85:09:ac:c5:7c:c9:
         bc:c2:48:06:e3:5e:6c:81:e8:16:a4:ed:c1:3f:8b:e1:c2:36:
         65:99:c6:f6:2f:9e:32:e0:b4:66:67:17:f6:dc:dd:cb:98:71:
         7d:c7:b6:68:80:0e:63:d5:22:a4:f7:42:08:87:b3:ae:e3:24:
         5b:2d:da:3b:e8:a7:14:da:16:1a:9d:bf:e7:e8:3f:43:8f:88:
         e7:72:3e:5a:de:ea:c6:06:d5:df:53:fe:30:14:9c:c6:58:dc:
         4a:19:62:bc:b3:db:dd:d3:2c:e1:3d:30:6e:f1:d9:bd:f3:34:
         85:75:52:7b:36:cb:f8:f8:99:d7:0d:d7:92:55:e8:61:0a:11:
         19:1d:86:a8:78:e9:bc:65:08:b8:1b:83:29:60:0f:be:84:63:
         50:97:97:4d:b7:5b:af:25:ca:a1:32:cf:a7:7f:a5:97:a0:b4:
         1f:f1:34:6b:49:b0:15:63:08:da:92:02:a4:52:cf:f6:2d:e8:
         2c:41:93:9a:45:d4:5e:71:96:6e:99:67:78:8f:65:16:9b:4f:
         f6:a4:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net