Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232342e302f32332d3233203d3e20323633323736.roa
File:                     3136382e39302e3232342e302f32332d3233203d3e20323633323736.roa (raw, json)
Hash identifier:          6Rg5dPl+4GJ6qrtIr9dj1RhEk+V3STBROI6HsrZ0W0s=
Subject key identifier:   2A:D1:EC:EE:CD:16:30:31:FD:FA:65:C6:00:6C:E9:78:79:BB:B5:65
Certificate issuer:       /CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
Certificate serial:       42A7BA1A90B1D40580D783E2E00BFF0294835F51
Authority key identifier: 18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232342e302f32332d3233203d3e20323633323736.roa
Signing time:             Wed 25 Oct 2023 16:09:30 +0000
ROA not before:           Wed 25 Oct 2023 16:04:30 +0000
ROA not after:            Wed 23 Oct 2024 16:09:30 +0000
asID:                     263276
IP address blocks:        168.90.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a7:ba:1a:90:b1:d4:05:80:d7:83:e2:e0:0b:ff:02:94:83:5f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Validity
            Not Before: Oct 25 16:04:30 2023 GMT
            Not After : Oct 23 16:09:30 2024 GMT
        Subject: CN=2AD1ECEECD163031FDFA65C6006CE97879BBB565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:67:5e:59:58:e9:6f:0c:9c:5c:18:25:db:
                    f1:d8:92:99:b0:07:0a:89:0a:73:4b:f5:b6:35:2d:
                    8b:1a:bc:bb:cd:08:b1:48:9e:47:5e:f3:43:71:26:
                    20:a2:ae:e0:26:4e:21:13:e4:91:03:92:a3:92:5e:
                    78:58:58:d2:cf:ea:ee:6e:59:f7:d4:5b:f4:a5:da:
                    7c:7f:6a:32:a1:a8:c1:39:8c:bf:a3:0c:49:c2:fc:
                    eb:c8:8d:dc:75:c3:47:e7:8c:ef:d7:d3:df:2f:9d:
                    d5:a8:d4:44:d3:4e:57:a6:5f:47:8f:21:07:b0:cc:
                    66:db:6c:55:7b:81:94:eb:12:81:7d:ad:61:42:3f:
                    d1:37:46:82:6b:29:b2:97:12:92:ad:9c:af:07:45:
                    68:94:66:af:6f:85:8f:ca:d2:aa:49:eb:e5:64:5f:
                    51:33:15:5c:13:7e:6b:8e:d1:b5:d5:aa:c2:01:f6:
                    6b:f2:30:df:4f:e4:77:ff:a1:fa:de:00:0b:4b:8c:
                    b8:80:2b:a3:32:c1:c2:f2:fb:0c:84:42:a5:18:67:
                    9e:64:70:a4:69:f7:89:75:14:02:11:03:91:f5:c6:
                    74:f8:6f:84:5a:6a:48:e2:5b:1b:a6:52:fa:5e:3a:
                    c4:17:86:3a:e1:36:ec:5e:cb:97:d0:12:dc:73:07:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:EC:EE:CD:16:30:31:FD:FA:65:C6:00:6C:E9:78:79:BB:B5:65
            X509v3 Authority Key Identifier:
                keyid:18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232342e302f32332d3233203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:e4:74:a5:e5:72:ef:30:cf:f9:6e:d4:fa:fc:aa:10:fb:
         90:72:3e:18:71:da:d2:13:c7:03:48:91:3f:c4:98:ac:f9:bc:
         60:b8:33:9a:bc:59:bb:32:40:df:ed:47:51:ca:a3:37:93:e9:
         0b:32:59:a6:2e:c9:47:bf:5b:a9:1b:44:c3:80:ac:0f:3f:6c:
         62:48:60:a4:94:28:31:94:ad:32:e4:d6:da:47:f5:34:1f:93:
         83:7c:76:aa:b9:07:10:92:08:0e:42:ca:5a:1b:d3:5e:10:34:
         66:41:d0:3b:f9:65:84:c9:d8:77:fa:b6:db:96:13:2f:c3:17:
         28:a9:38:6c:08:1c:73:48:52:97:4b:7a:52:56:18:e2:22:ac:
         b5:46:b9:fa:48:a9:1f:84:77:e4:b5:d0:79:e5:ea:18:ef:c2:
         9b:19:34:87:e3:f8:52:df:82:cb:3b:4a:08:e7:71:78:cf:4b:
         22:e3:24:ff:fa:4f:16:7a:43:b1:d7:29:32:f9:9a:b9:2f:8b:
         f2:d0:26:1c:9e:bf:dc:01:33:3c:3c:c5:e7:0d:ce:ea:8f:82:
         47:e9:58:46:8e:f3:be:57:6e:25:d7:e0:ab:e8:c8:65:58:6e:
         5c:a6:3f:50:25:d4:5d:2d:29:e7:f8:2c:00:57:5b:41:dc:f4:
         cb:b9:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:07:17 2025 by rpki-client