Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
File:                     3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier:          VVOaYN7t4Q5Ed6FQ4XEvcK9AqXtCfaAr0VUlOuoYEuI=
Subject key identifier:   92:BF:E2:B2:D0:9D:C2:79:D7:AB:20:1F:DE:12:79:8C:C7:84:36:2E
Certificate issuer:       /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial:       151576FF65F3831DFA0DB6FDD0CAF54C8EFE4158
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
Signing time:             Tue 13 Feb 2024 15:54:21 +0000
ROA not before:           Tue 13 Feb 2024 15:49:21 +0000
ROA not after:            Tue 11 Feb 2025 15:54:21 +0000
asID:                     264915
IP address blocks:        168.228.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:15:76:ff:65:f3:83:1d:fa:0d:b6:fd:d0:ca:f5:4c:8e:fe:41:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
        Validity
            Not Before: Feb 13 15:49:21 2024 GMT
            Not After : Feb 11 15:54:21 2025 GMT
        Subject: CN=92BFE2B2D09DC279D7AB201FDE12798CC784362E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:4f:11:2d:9f:a0:4f:ec:26:c0:8c:ad:43:
                    bf:cf:60:0e:5b:56:6a:4d:e9:07:11:83:49:b5:0c:
                    ee:f5:6d:9a:c2:30:2c:e0:1f:3a:07:62:d8:be:5b:
                    40:2d:cb:76:87:b3:bd:e5:8c:3b:8b:39:88:7c:d8:
                    cb:07:4c:9d:8b:a4:1d:03:e8:3d:fa:04:dd:d5:e0:
                    6c:c7:a3:91:ff:63:f8:95:70:eb:a6:09:53:97:6e:
                    1b:85:22:ab:08:ac:5a:1f:9d:0f:ed:e6:f3:ab:40:
                    93:c5:ae:53:cb:79:32:8f:8b:06:99:82:0c:6e:9f:
                    a4:ec:03:1c:ee:6e:56:b3:66:c0:59:19:0f:28:e2:
                    55:39:6b:ff:25:45:f5:be:f5:b9:e6:f3:61:54:0a:
                    82:21:1f:f3:54:71:83:70:1e:51:cf:0f:ac:27:01:
                    2f:32:db:f8:2a:db:75:a3:5b:6e:4a:e7:1b:2b:14:
                    4c:e5:5e:13:56:14:64:25:7b:d0:bf:9e:0d:df:b0:
                    8f:31:6b:f4:e7:13:85:e8:a9:c3:e4:d3:0e:a4:ee:
                    e4:30:d7:b8:a9:c2:24:5f:25:6f:e3:1b:73:65:5e:
                    05:5f:7b:93:52:85:08:d9:0f:48:de:c5:15:14:d0:
                    de:57:76:cd:ae:6f:73:90:a6:4a:70:61:1a:00:25:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BF:E2:B2:D0:9D:C2:79:D7:AB:20:1F:DE:12:79:8C:C7:84:36:2E
            X509v3 Authority Key Identifier:
                keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5d:49:c1:ed:ce:1c:c1:a1:b2:4e:bb:ba:d3:c2:6c:24:1d:
         4e:5d:1c:63:4b:af:4a:7c:dc:1e:3e:c9:bc:be:1d:f3:8d:1b:
         48:c7:fa:6a:f7:b6:b2:f9:e1:fc:7c:45:6a:f1:84:bf:12:28:
         37:37:c1:db:39:1e:6d:c8:b6:ec:6a:2b:9f:01:d0:5c:0e:6c:
         98:67:61:7a:67:74:58:85:36:6b:29:8a:46:c2:c0:4c:40:6b:
         d3:aa:e8:b9:a9:b6:c3:8c:3d:80:e0:c3:d2:66:8f:e6:84:26:
         07:54:62:4b:ca:93:98:a8:85:48:7e:c5:05:25:b2:5d:10:4c:
         0c:ce:6d:24:25:25:d2:4a:bb:57:86:f8:68:50:f4:d9:82:21:
         ab:f7:53:8d:db:94:ac:44:00:46:16:3c:cd:0b:0a:d1:d9:df:
         d8:c0:c8:00:50:57:7e:b9:ed:ef:c6:ac:8f:0a:e3:5a:f5:55:
         47:52:5d:b0:3e:43:d0:af:cf:aa:9f:f6:d8:72:fb:9f:31:b7:
         91:0f:b2:bd:82:70:fd:fc:39:96:9a:35:1c:cf:b1:36:be:3b:
         4e:8a:6a:93:39:47:2a:02:dc:25:51:30:5a:09:9f:cf:03:88:
         d0:4b:0a:1a:77:e7:33:f0:ff:82:22:81:f8:70:9c:69:b1:d4:
         04:5b:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:37 2025 by rpki-client