Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa (raw, json)
Hash identifier:          OSg98EuXbIaTx1IwARzYDqk3YACs4SkipJM96r7lBrQ=
Subject key identifier:   1C:1A:19:DB:58:F5:38:A7:86:5E:D8:EC:0E:CE:05:5C:F5:55:3D:C5
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       048C7C2681B4563ACD38F5CBA47968FAF355F060
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
Signing time:             Thu 06 Mar 2025 11:56:46 +0000
ROA not before:           Thu 06 Mar 2025 11:51:46 +0000
ROA not after:            Thu 05 Mar 2026 11:56:46 +0000
asID:                     264879
IP address blocks:        168.227.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8c:7c:26:81:b4:56:3a:cd:38:f5:cb:a4:79:68:fa:f3:55:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Mar  6 11:51:46 2025 GMT
            Not After : Mar  5 11:56:46 2026 GMT
        Subject: CN=1C1A19DB58F538A7865ED8EC0ECE055CF5553DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:8c:77:4d:b6:a6:f0:53:5d:3b:6c:96:3c:
                    b6:ae:fe:fd:6a:99:b3:9d:1f:90:60:b4:f6:a6:68:
                    f6:bd:04:e4:bc:1b:f6:d9:08:09:75:18:d4:36:87:
                    66:95:e4:32:0a:84:7d:d5:59:c5:13:00:a4:ad:1d:
                    f3:d0:90:23:f5:67:18:e9:ee:3c:ae:fc:2b:08:e8:
                    b2:77:16:12:dd:05:55:e9:e7:bf:d4:69:3e:ad:d7:
                    60:a7:e6:cc:74:02:30:e8:21:7f:e0:6e:b9:89:04:
                    c7:74:14:c2:12:aa:55:f4:46:67:1c:2f:9f:b6:e9:
                    b2:57:02:6c:bb:1f:2d:70:09:fe:7a:8e:86:61:a4:
                    94:4d:8f:22:9e:2e:0d:ec:e8:90:a1:ff:cc:51:e9:
                    88:24:d9:66:f3:00:34:2e:34:86:18:8f:fb:ce:d8:
                    8d:b4:ed:1d:34:3b:0b:ef:8d:bd:8c:9f:a2:2a:35:
                    d8:80:ab:75:51:d2:8f:3b:52:0d:9c:10:1c:26:6a:
                    b1:32:94:f1:61:f1:b8:46:d7:47:3a:d1:0a:87:e7:
                    67:2d:c3:59:a0:8d:8e:c3:4d:e9:5d:81:6c:af:e2:
                    c5:5b:01:71:b7:91:bd:69:ce:c8:9b:0f:d9:6f:c9:
                    83:ea:2f:80:60:8b:8b:a7:e4:e5:e6:fc:34:95:59:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:19:DB:58:F5:38:A7:86:5E:D8:EC:0E:CE:05:5C:F5:55:3D:C5
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:48:e2:bd:bc:2c:db:59:d5:3b:be:4a:6d:1a:8b:e0:31:36:
         55:a0:0f:c8:59:15:80:cd:83:6c:be:51:d2:58:b2:a1:29:1a:
         70:0d:18:17:55:b5:c9:2a:b4:53:79:be:b0:4b:af:7c:67:da:
         c7:a8:57:53:2f:d8:65:78:85:48:41:c2:d5:5d:19:0e:a9:3c:
         42:a1:62:95:7b:69:df:9a:eb:97:e0:31:0b:36:f6:97:da:17:
         2a:7a:b6:ef:17:c8:6d:66:59:7f:1e:13:68:11:dd:45:3d:b5:
         e1:4a:00:d6:52:b4:87:15:d8:20:ae:e4:0a:99:6a:76:af:c0:
         3f:41:a1:1f:38:26:2e:45:1f:4b:20:c8:01:5f:81:8b:60:56:
         e5:83:d7:97:05:11:1f:e7:c5:8e:8f:a8:04:23:4b:9c:7d:ba:
         51:9c:00:19:1b:59:60:1c:a4:64:f9:44:66:f2:02:d4:ef:05:
         da:bc:20:ca:29:e0:e5:c2:ab:3f:cb:fd:57:28:14:41:e8:fa:
         42:b3:81:3a:78:ff:48:a5:d2:0b:ff:8d:b1:97:11:90:85:59:
         ef:2e:78:37:33:76:c4:67:fb:10:f9:9b:21:17:e4:57:ec:9b:
         50:35:9e:7e:4c:fb:be:4b:a5:1b:7a:dd:d5:31:46:e0:cd:00:
         b8:f9:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:20 2025 by rpki-client