Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa
File:                     3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          Vn8H0jreiMjCdpVbijf65i4FBEWGfhidvlGqTDBOg7I=
Subject key identifier:   BC:A5:E9:81:90:FC:F4:7D:CB:07:9D:A7:1C:53:A7:B1:07:B5:3A:C3
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       04C76C83CCABC7DBC2A98E735E707E3049FEFBE1
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 06 Mar 2025 11:39:00 +0000
ROA not before:           Thu 06 Mar 2025 11:34:00 +0000
ROA not after:            Thu 05 Mar 2026 11:39:00 +0000
asID:                     262868
IP address blocks:        168.227.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:6c:83:cc:ab:c7:db:c2:a9:8e:73:5e:70:7e:30:49:fe:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Mar  6 11:34:00 2025 GMT
            Not After : Mar  5 11:39:00 2026 GMT
        Subject: CN=BCA5E98190FCF47DCB079DA71C53A7B107B53AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:92:9d:1c:7d:4c:44:7b:cb:65:af:61:c4:
                    1a:66:e2:7b:16:ff:de:d5:28:be:c6:1f:79:ae:f8:
                    bc:6b:0f:ae:4f:cc:77:03:17:63:c0:7c:85:48:6e:
                    54:e9:9e:39:3e:e3:38:aa:3f:3b:ad:a8:6e:99:26:
                    23:99:22:42:de:8a:1c:51:10:d6:ee:0c:96:06:29:
                    60:1b:2c:d9:83:1a:b2:54:a5:4c:66:ca:f0:38:f9:
                    5c:d9:c3:80:dd:ed:f8:e7:c6:1c:f5:a9:04:b7:18:
                    d3:73:80:f5:fe:e1:11:2f:59:e9:69:9e:43:53:c4:
                    17:83:91:db:2d:5d:eb:81:c1:c5:25:00:cc:54:41:
                    b4:55:7f:bf:af:c4:62:a2:97:52:06:7f:bd:53:2c:
                    e8:36:c8:cc:5f:55:46:b0:c6:c5:62:2c:36:dd:14:
                    0d:e7:f9:f1:31:0a:b1:08:0d:be:45:1d:7c:9a:b9:
                    6a:6a:00:bd:81:76:b0:1c:1b:64:2d:46:38:45:8e:
                    8e:00:8c:5d:3e:84:ba:ed:57:c7:d1:15:02:0c:a9:
                    b8:f8:8b:75:77:17:05:c6:63:92:0b:eb:ed:64:f4:
                    70:08:34:cd:77:ee:4e:65:12:5d:d9:a0:80:e8:fb:
                    a6:72:e4:6f:2f:87:6c:11:a4:a3:db:3d:48:62:98:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:E9:81:90:FC:F4:7D:CB:07:9D:A7:1C:53:A7:B1:07:B5:3A:C3
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37322e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:44:4f:29:82:0b:86:c0:16:3e:7c:ab:d7:21:eb:42:91:75:
         44:2b:76:8f:7a:14:16:91:58:e9:be:f9:c9:aa:b2:b3:0e:21:
         b6:59:9d:98:9b:87:2a:2f:c8:6e:5a:46:d2:7b:04:e4:5d:2f:
         84:8d:ac:4e:4e:e9:23:06:06:a2:86:c2:42:64:41:8b:23:60:
         bb:8e:68:3a:f9:aa:29:5c:3b:bd:f4:76:c4:37:f8:0a:70:6a:
         c9:f9:e1:b9:97:86:ae:9f:4e:fc:8b:e6:31:d1:89:91:e2:76:
         7f:a0:52:04:9d:8a:90:20:c9:a3:54:56:06:a4:e6:d5:c6:d4:
         42:9a:11:de:8b:be:a4:ec:0d:e7:a1:65:8f:3a:81:17:4e:73:
         ac:f3:58:0b:41:e2:46:b8:57:a7:2c:21:9e:c9:af:34:1f:5f:
         32:46:e9:c5:c8:b0:70:d7:b3:50:0e:1b:cb:3b:d6:bc:7b:2c:
         46:35:cb:09:5c:9c:a2:5f:df:a3:74:69:94:99:b0:5a:b7:ba:
         85:c3:2a:20:10:ea:5b:52:29:26:9e:5f:5e:4a:02:82:35:f4:
         aa:55:0f:2a:b7:84:fc:84:46:c9:ca:34:1a:93:f7:58:70:e0:
         97:a4:f2:ee:53:b4:e6:b1:44:a2:c5:3d:00:b6:a0:54:60:c2:
         c0:d3:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:59 2025 by rpki-client