Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234322e302f32342d3234203d3e203631353739.roa
File:                     3136382e39302e3234322e302f32342d3234203d3e203631353739.roa (raw, json)
Hash identifier:          I3+J/OL0hO6lykkZU74ZYrHgnveG7QCfZ2um2gcLk3U=
Subject key identifier:   9E:C6:2D:0C:7A:B8:76:35:FC:DF:71:BA:08:B9:46:74:0C:94:DA:96
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       6CED3DEDA18B4DBA284941149B94355E874BC478
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234322e302f32342d3234203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:38 +0000
ROA not before:           Tue 06 Feb 2024 11:56:38 +0000
ROA not after:            Tue 04 Feb 2025 12:01:38 +0000
asID:                     61579
IP address blocks:        168.90.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:3d:ed:a1:8b:4d:ba:28:49:41:14:9b:94:35:5e:87:4b:c4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:38 2024 GMT
            Not After : Feb  4 12:01:38 2025 GMT
        Subject: CN=9EC62D0C7AB87635FCDF71BA08B946740C94DA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:30:3b:f6:9b:a4:c0:e4:b0:e3:4d:1b:97:
                    13:39:51:dc:b3:a2:c3:ac:eb:e6:0f:cb:45:65:7f:
                    f7:fa:d9:35:b8:bb:cc:9d:b0:51:a1:94:62:ff:d9:
                    2d:87:34:22:bf:48:1b:48:4b:c1:09:ca:7e:b8:2f:
                    2e:4f:c4:37:5f:67:3e:a2:11:2b:db:2f:1c:a7:f5:
                    c9:16:c1:f3:24:b1:39:cd:de:50:e0:87:92:43:09:
                    46:41:8c:52:a0:07:7b:fe:fc:86:91:94:f3:cf:13:
                    21:6d:13:5b:19:a0:54:bd:6d:cd:05:4d:05:29:41:
                    5e:d1:30:a9:79:97:cc:d0:a5:5d:fa:b2:74:f6:d8:
                    f7:a5:08:a5:cf:e7:7c:3e:f9:ca:2a:1d:0c:62:2a:
                    d1:e1:cb:40:d3:76:6e:93:28:72:6b:7e:de:71:d3:
                    f3:34:a4:94:3f:cb:99:67:11:5e:32:78:ed:44:82:
                    55:cb:9d:01:8f:ae:8e:a5:2b:c1:1a:18:d7:fe:69:
                    22:34:64:98:14:c7:82:ee:20:11:c0:6e:14:bd:bc:
                    43:e8:53:a5:fa:69:85:64:00:4c:8c:bf:8b:9b:22:
                    c8:a2:1b:61:c9:78:07:f0:03:c3:ea:69:89:1f:01:
                    68:c0:a1:7b:64:ac:e9:e7:88:38:ce:07:5e:d2:2d:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C6:2D:0C:7A:B8:76:35:FC:DF:71:BA:08:B9:46:74:0C:94:DA:96
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234322e302f32342d3234203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:9c:07:be:ff:2a:d3:66:00:c3:e2:0f:d9:4f:2c:c0:46:d9:
         fd:3f:ed:55:9c:c6:7b:5b:54:cd:a0:e5:36:4d:e3:92:b9:93:
         8b:ca:83:66:94:77:2a:aa:07:3b:6f:9d:9c:d0:9c:77:9d:43:
         36:3b:90:ce:f6:5e:15:51:0f:65:71:05:e5:df:39:20:2a:bc:
         d5:e8:32:f3:e8:79:7f:96:c5:0e:b9:08:2f:bb:0e:95:a9:d9:
         be:df:d7:30:df:98:27:a5:4d:76:b0:97:31:15:61:3e:1b:f4:
         e0:73:bc:f8:45:a4:a5:1d:ca:f9:3c:b9:b7:eb:c2:49:d3:38:
         12:38:ab:1a:86:ab:4a:74:ff:85:e9:78:5b:8e:4d:2d:be:9b:
         59:a6:73:f7:10:eb:ff:39:59:60:2d:27:32:84:18:24:69:02:
         31:82:fd:a9:f2:6d:a2:97:ec:37:c1:a9:c4:a5:27:59:ba:b4:
         32:d9:61:ea:18:2b:cb:a3:59:37:c8:7c:60:7f:cc:2f:8a:a2:
         7c:db:17:e1:8d:99:ae:f3:d8:15:50:54:54:1a:b2:85:7e:79:
         92:9e:31:10:05:bb:4f:76:b3:42:8e:f1:0b:52:1d:3e:5c:94:
         75:8a:09:46:ed:b7:90:fb:ca:6f:ec:d7:45:e8:55:ff:63:06:
         a6:e7:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:48 2025 by rpki-client