Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa
File:                     3136382e3232382e332e302f32342d3234203d3e20323634383934.roa (raw, json)
Hash identifier:          lQZXL2Bu2lNX02OnKyz+E868ZuHxqCThKUHmcreQEvY=
Subject key identifier:   88:55:F3:29:86:9E:CE:F4:00:6B:E9:FE:55:51:F1:EB:BA:A2:CD:62
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       16DC88E82DF4AA39F6063AB7669E5CB8FEBF6665
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa
Signing time:             Fri 07 Mar 2025 02:00:32 +0000
ROA not before:           Fri 07 Mar 2025 01:55:32 +0000
ROA not after:            Fri 06 Mar 2026 02:00:32 +0000
asID:                     264894
IP address blocks:        168.228.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:dc:88:e8:2d:f4:aa:39:f6:06:3a:b7:66:9e:5c:b8:fe:bf:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Mar  7 01:55:32 2025 GMT
            Not After : Mar  6 02:00:32 2026 GMT
        Subject: CN=8855F329869ECEF4006BE9FE5551F1EBBAA2CD62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:db:06:d0:88:02:2a:1a:7b:94:ec:df:5f:
                    82:4a:33:98:62:89:e1:39:be:8c:cf:ee:b0:70:b4:
                    fa:59:b2:46:76:bc:44:9b:34:f9:94:19:b3:b8:71:
                    85:df:7a:99:dd:db:8b:61:0d:68:03:f5:31:ce:ab:
                    48:07:8e:6c:36:b4:91:98:58:b5:d0:d0:6b:47:01:
                    00:46:86:4b:d8:27:1f:9f:16:c8:0a:b8:1d:f9:6d:
                    9f:8a:b9:c4:c5:9d:2f:2f:ca:fc:3f:35:82:50:cb:
                    70:31:bb:cd:48:ec:02:c7:af:c1:f9:50:e2:84:62:
                    18:8d:8d:e6:a9:42:39:2d:aa:a3:5d:1e:7b:f0:d7:
                    c8:e0:70:62:6f:bc:77:eb:32:7f:71:7c:70:20:67:
                    5e:20:f3:80:0e:6f:f5:3f:93:f0:eb:93:8b:58:6a:
                    1c:62:0e:16:45:c2:1d:49:a8:b7:52:3f:c0:ec:f0:
                    29:60:19:23:ca:c0:0e:95:cb:06:e9:11:00:36:76:
                    5a:13:13:1f:de:77:55:f8:95:3c:72:e5:7c:3f:4f:
                    33:6a:4b:cc:0f:f4:48:5d:55:3f:fb:09:bb:96:d8:
                    12:af:0e:44:09:d5:4d:ff:24:b4:2d:0b:ab:d8:8e:
                    cc:73:c6:40:94:6a:92:d2:d3:e8:8a:59:48:7b:38:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:F3:29:86:9E:CE:F4:00:6B:E9:FE:55:51:F1:EB:BA:A2:CD:62
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/3136382e3232382e332e302f32342d3234203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:d2:31:59:87:a4:03:fa:06:7c:83:64:9a:c4:63:0d:8e:
         34:95:4c:9f:bd:5a:7e:7c:30:e5:5c:98:87:5e:d8:ba:80:0a:
         7f:32:47:7d:c6:38:48:61:57:5d:65:69:c0:f5:52:f9:09:f6:
         32:61:7e:c6:18:f6:99:10:e8:0e:e0:eb:3a:36:4b:41:0b:8d:
         3d:06:d5:59:10:9d:30:0d:24:c1:4d:1e:55:d1:08:11:23:b8:
         78:7b:2b:b6:02:de:9d:69:4c:3d:e9:ca:2d:85:8d:68:47:c5:
         d7:1d:d8:2f:40:17:18:35:a2:22:da:bc:bb:81:aa:ff:70:fc:
         72:0e:47:24:a4:7c:3a:c9:da:41:f8:5d:61:c1:55:a5:fc:d7:
         f4:48:1c:e9:60:62:ec:c8:c9:1a:4f:02:ca:fa:3f:2b:5f:88:
         25:23:d6:5c:7a:94:ad:ec:0e:c2:3d:b1:03:57:5e:3f:5d:45:
         4c:34:ab:20:55:40:a3:ed:7e:cf:d7:a0:05:62:64:f6:ce:a8:
         22:09:55:fd:17:8e:56:e5:4a:42:0f:b6:b4:63:80:6f:02:36:
         11:68:79:4c:07:d7:6c:5a:5b:26:8c:52:1e:1b:a5:80:b5:1a:
         53:4a:9f:e9:ae:90:40:6b:b5:32:37:09:bb:c8:ae:76:c2:cf:
         9c:c0:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:06 2025 by rpki-client