Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32332d3233203d3e20323634383934.roa
File:                     3136382e3232382e302e302f32332d3233203d3e20323634383934.roa (raw, json)
Hash identifier:          rE9ZLo6gTsWAKi8Jm/obr3EA+VwRBx2ZoDELzPA93Is=
Subject key identifier:   DA:45:03:6C:A8:0F:49:02:B1:44:6E:B8:E1:F0:97:3A:07:38:32:F1
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       6E58C3EA3C86B8DFA684DA42577EFA9239CC0A72
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32332d3233203d3e20323634383934.roa
Signing time:             Fri 07 Mar 2025 02:00:32 +0000
ROA not before:           Fri 07 Mar 2025 01:55:32 +0000
ROA not after:            Fri 06 Mar 2026 02:00:32 +0000
asID:                     264894
IP address blocks:        168.228.0.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:58:c3:ea:3c:86:b8:df:a6:84:da:42:57:7e:fa:92:39:cc:0a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Mar  7 01:55:32 2025 GMT
            Not After : Mar  6 02:00:32 2026 GMT
        Subject: CN=DA45036CA80F4902B1446EB8E1F0973A073832F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:4e:14:ff:81:b4:08:b3:72:bd:ac:4e:cc:
                    2f:f4:d6:3d:c3:e8:a4:be:4c:d7:83:0a:40:3b:c6:
                    9e:60:ca:fe:e5:87:7f:e3:31:03:60:0d:cd:4e:7b:
                    2c:84:99:be:2e:81:dd:14:ef:9a:c9:af:6b:01:3a:
                    b1:98:4e:1a:df:79:0d:3c:af:01:c8:c4:b7:b8:9b:
                    2c:85:bd:15:5d:ec:58:bd:61:b4:1c:50:c7:4b:69:
                    20:c2:f3:d8:8d:63:91:2f:41:73:ca:90:e0:03:58:
                    3c:84:97:78:00:07:a2:19:09:ca:1f:86:fe:f5:c6:
                    c1:7a:81:ed:16:ca:dc:fe:f6:4c:6a:89:92:4c:53:
                    21:11:6c:f9:a8:e0:43:e2:0c:f7:63:2d:c2:13:a5:
                    2a:3b:96:03:8f:89:3b:88:01:1b:e6:08:04:5d:8d:
                    5f:fe:a2:ae:9d:21:c7:72:09:20:2a:8d:65:b3:da:
                    51:c9:76:a9:f1:9c:f2:34:d2:c8:38:9c:a8:fe:33:
                    29:9e:0f:81:ff:5c:aa:f4:47:fa:8d:35:22:2d:05:
                    6b:65:74:0a:dd:c5:7f:93:4e:3c:b5:bb:19:8f:3d:
                    23:36:c9:05:6d:37:d9:ce:ed:a6:03:4e:c4:fa:53:
                    ef:73:39:d6:3f:9c:85:7c:91:89:7b:e8:66:20:76:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:03:6C:A8:0F:49:02:B1:44:6E:B8:E1:F0:97:3A:07:38:32:F1
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e302e302f32332d3233203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:38:73:de:da:49:b5:62:90:a7:53:e3:c1:09:aa:16:65:
         d0:7c:b3:b6:d9:ca:35:0d:41:f9:57:0d:8e:61:19:ef:48:b0:
         db:db:25:4e:42:f3:d8:8e:2d:ac:17:58:1e:98:84:51:04:fe:
         8e:b8:98:1c:9d:f0:7a:4c:a3:4a:2e:d4:83:2c:d5:38:80:d3:
         64:26:82:f6:59:d2:b3:cf:6f:f0:c8:c2:e6:9d:e4:08:9e:a4:
         65:67:a0:91:17:a3:c3:fd:f9:29:55:52:2c:f4:fb:97:22:5a:
         f7:28:b6:12:d2:d8:5d:37:b1:42:2a:94:47:f3:27:bb:fa:57:
         1d:ce:c0:ce:ca:b4:94:43:4c:d8:dd:e1:e2:7e:47:90:99:e2:
         c2:17:c9:19:11:e7:c6:93:64:e8:af:b1:99:b3:7f:7a:f0:6e:
         07:9d:01:2e:f2:6e:09:50:26:4b:c2:df:4b:27:cd:05:81:9d:
         a0:62:03:c5:8b:58:2e:c7:eb:fe:b8:1d:57:34:4e:db:10:c6:
         96:07:08:25:23:4b:bf:c3:38:a1:cc:08:c2:9c:05:68:59:51:
         1c:8d:b0:a2:9a:8e:9a:64:80:a0:80:af:8f:a6:30:9f:76:6e:
         da:d8:ac:3c:60:ff:aa:bf:fb:a4:59:b6:5f:d6:ed:69:b3:16:
         aa:31:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:11 2025 by rpki-client