Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38322e302f32332d3233203d3e20323632393838.roa
File:                     3136382e39302e38322e302f32332d3233203d3e20323632393838.roa (raw, json)
Hash identifier:          sm9ZkYvFrUJvkFphsX7AeFK5pWn/4gDmj1ZiehTUuzA=
Subject key identifier:   3B:2A:E9:91:C7:44:11:84:34:5E:11:D3:14:4A:11:C2:C3:5D:A9:CF
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       485B163F1CB51A4D46635CB781E9C4D6D5F4244B
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38322e302f32332d3233203d3e20323632393838.roa
Signing time:             Wed 17 Jul 2024 15:19:28 +0000
ROA not before:           Wed 17 Jul 2024 15:14:28 +0000
ROA not after:            Wed 16 Jul 2025 15:19:28 +0000
asID:                     262988
IP address blocks:        168.90.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5b:16:3f:1c:b5:1a:4d:46:63:5c:b7:81:e9:c4:d6:d5:f4:24:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 17 15:14:28 2024 GMT
            Not After : Jul 16 15:19:28 2025 GMT
        Subject: CN=3B2AE991C7441184345E11D3144A11C2C35DA9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:4f:c9:8d:65:e4:ab:c2:5e:bd:1d:67:b5:
                    18:4f:bb:81:6c:29:2b:15:3d:8e:6f:90:03:8f:4d:
                    e4:1b:62:7a:ce:2f:09:06:37:a4:0a:7a:87:aa:11:
                    d6:5e:a0:1a:58:87:03:ab:d3:9d:38:9e:eb:d5:2d:
                    dd:2d:1a:90:30:05:2f:05:36:94:d7:20:0b:b9:7d:
                    c2:48:d9:e0:1c:a1:2e:3a:3c:69:c8:e3:10:87:3c:
                    6b:d6:36:da:68:fe:6a:40:d0:29:5f:c3:18:b5:db:
                    07:06:5c:3e:0d:73:66:4c:c8:80:52:c5:bb:e2:bb:
                    91:06:1a:89:13:48:4d:33:ab:83:ca:ae:20:9f:29:
                    67:de:c9:11:5d:a1:c7:9e:ed:36:cb:ce:a2:6b:3a:
                    68:65:5a:78:9a:03:11:7c:e5:a6:e2:35:ab:ba:d5:
                    16:7d:07:8e:ef:eb:36:ae:05:10:10:f9:de:f2:32:
                    89:c5:f8:3c:a9:0e:9a:76:53:fb:6c:75:b3:32:52:
                    81:10:59:12:ac:ae:e4:b2:47:ac:40:36:bd:1b:11:
                    51:2e:08:17:f8:7d:4b:60:54:9f:08:18:c7:a3:4e:
                    2f:dd:45:1c:94:7f:14:a6:6b:80:9d:53:65:10:bf:
                    c4:0d:a3:00:79:19:e8:11:70:42:dc:c6:7e:cf:74:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:E9:91:C7:44:11:84:34:5E:11:D3:14:4A:11:C2:C3:5D:A9:CF
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38322e302f32332d3233203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:a2:97:8c:65:44:41:59:83:05:8b:60:41:bf:d9:c3:be:
         47:7e:32:96:c9:0e:b4:82:93:b5:90:15:1c:a5:3a:9d:08:37:
         dd:6f:15:8f:a7:3c:fc:e1:2f:34:39:f9:b9:f1:64:6f:d3:2b:
         1f:7e:45:65:09:57:dc:c1:47:6c:26:1f:a2:21:64:0b:9e:2f:
         fb:f6:a6:88:6d:9d:b3:a1:ff:da:b6:cf:4b:11:dd:68:b7:1b:
         86:45:02:b0:16:b3:4d:9a:70:de:c1:b0:bb:f0:37:45:37:31:
         6f:5f:3a:71:f6:20:37:51:6e:d8:4c:91:96:f0:0e:72:ff:92:
         8e:f9:e2:b1:be:5f:5e:45:a8:2b:fd:a5:51:c5:5c:8b:d5:19:
         9c:96:f1:31:31:c1:8b:b3:74:c1:83:72:ec:ec:9f:3c:82:49:
         33:64:cc:a6:12:c0:d6:0d:9c:f8:a4:42:53:e9:43:4a:42:ca:
         af:3b:9e:e9:de:30:f6:75:02:0b:81:40:48:ad:d5:32:a1:d6:
         d4:13:b2:5f:f0:d6:39:0d:28:c3:e7:e1:d5:64:55:c9:33:26:
         99:e9:da:4b:1c:87:76:71:49:4e:88:e9:2d:68:1d:75:3c:e5:
         d8:c1:13:af:34:5d:5c:a4:6b:94:d9:a5:75:6b:84:ed:38:1c:
         e8:8f:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:49 2025 by rpki-client