Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa
File:                     3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa (raw, json)
Hash identifier:          QKtpq4aR+AIpnV7WN2+VpmKRexm0HRVaXEhoAXDJmbI=
Subject key identifier:   06:55:4D:FC:A1:A6:C7:C8:B2:B3:5E:A7:9C:43:F7:D7:FA:D5:4E:61
Certificate issuer:       /CN=CE32140C85BB797C14AAC2F0A2F5DB00637C9C36
Certificate serial:       5B16C8B7CE121EE9BBB0C10E11806031B49A82C6
Authority key identifier: CE:32:14:0C:85:BB:79:7C:14:AA:C2:F0:A2:F5:DB:00:63:7C:9C:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa
Signing time:             Sat 04 Jan 2025 13:55:54 +0000
ROA not before:           Sat 04 Jan 2025 13:50:54 +0000
ROA not after:            Sat 03 Jan 2026 13:55:54 +0000
asID:                     264897
IP address blocks:        168.227.224.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:16:c8:b7:ce:12:1e:e9:bb:b0:c1:0e:11:80:60:31:b4:9a:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE32140C85BB797C14AAC2F0A2F5DB00637C9C36
        Validity
            Not Before: Jan  4 13:50:54 2025 GMT
            Not After : Jan  3 13:55:54 2026 GMT
        Subject: CN=06554DFCA1A6C7C8B2B35EA79C43F7D7FAD54E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:26:a2:3f:e1:2b:a0:bb:d9:d1:98:9b:02:
                    33:98:c5:3b:a3:1f:41:45:34:89:25:10:20:01:7a:
                    b6:ca:9a:a6:5d:44:39:73:71:ef:3d:37:72:bd:40:
                    49:a7:74:c9:89:98:e8:bc:05:cd:c5:62:1d:02:ac:
                    43:93:aa:85:d7:03:42:08:06:c6:d5:8a:e9:4a:89:
                    33:e9:72:90:0a:b7:00:24:cd:6a:7d:39:3f:3e:46:
                    90:a8:c9:a9:0b:f3:95:4e:91:a8:49:0e:d5:38:86:
                    79:6b:f9:67:ce:c3:61:a5:9f:52:63:24:b9:ad:c9:
                    b3:f1:ca:86:93:d5:03:25:b6:64:c8:56:8c:62:d6:
                    9e:f4:be:de:8b:21:60:6b:e8:66:18:2f:c3:82:82:
                    d3:1c:e1:b7:b6:1c:eb:3b:d8:1d:64:93:41:73:64:
                    88:a7:0a:d4:8e:e2:ab:56:a9:01:c1:5f:14:d0:a8:
                    32:d3:3b:dc:88:89:ae:d1:31:bd:d6:6f:a7:64:cd:
                    ae:c9:35:21:e8:3f:0b:f8:e0:8e:e0:5c:4d:58:ad:
                    1b:91:6b:a8:37:66:b5:68:4d:49:93:27:16:6d:a3:
                    89:6a:1f:b0:de:d2:29:ef:73:a3:88:04:54:93:b7:
                    27:94:03:de:45:f3:38:e1:33:6a:c3:e8:58:6e:07:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:4D:FC:A1:A6:C7:C8:B2:B3:5E:A7:9C:43:F7:D7:FA:D5:4E:61
            X509v3 Authority Key Identifier:
                keyid:CE:32:14:0C:85:BB:79:7C:14:AA:C2:F0:A2:F5:DB:00:63:7C:9C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:08:40:7b:68:cc:c4:89:a5:a9:66:8f:3f:6d:31:24:c3:
         fb:77:46:b7:d1:e0:40:4b:aa:59:ef:b7:bc:37:bc:6b:ef:09:
         f6:d3:0d:8d:6b:32:26:9e:62:40:72:60:18:68:86:98:f4:a4:
         0d:30:a0:2d:13:56:4b:3c:18:80:83:87:9b:e0:2a:64:a8:cf:
         7b:d5:a8:3d:b2:93:ac:79:d8:86:3e:aa:b6:20:c3:f9:2b:b7:
         9c:a5:a6:c9:81:75:2f:25:bf:b1:f0:a2:ec:a4:8d:fb:cf:88:
         fc:dd:4d:23:d6:d3:80:1b:71:a1:47:e2:d5:b3:b2:5b:8f:5b:
         47:d3:66:2b:3a:96:d7:6c:35:11:bb:6c:42:a3:2e:e2:08:47:
         1e:9a:ef:96:62:47:81:73:0c:b2:25:12:3f:1b:83:92:82:52:
         4f:20:96:64:ef:d4:ad:fa:86:68:73:66:56:26:2d:12:13:33:
         aa:21:ba:1b:49:30:31:90:c4:65:1f:8c:df:e9:c2:2e:0f:c3:
         d5:df:6f:9d:7c:5a:f8:0b:01:54:e2:e7:31:1a:75:83:11:a6:
         57:5e:36:3b:59:4f:80:4a:67:60:3e:f5:68:4f:1a:32:a1:32:
         76:b5:f6:2e:f4:6a:61:3c:8f:b8:18:f3:2e:72:98:ca:2d:2c:
         d8:3b:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:18 2025 by rpki-client