Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3135302e302f32332d3233203d3e20323635323835.roa
File:                     3136382e39302e3135302e302f32332d3233203d3e20323635323835.roa (raw, json)
Hash identifier:          EGOdorhPcdI/PFbsO7cJUa7T8FGGMbNKQ6C/kedGgbI=
Subject key identifier:   46:4B:1E:27:0D:3C:64:BB:BA:71:27:F2:A5:1D:C1:C4:3F:FC:9E:34
Certificate issuer:       /CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Certificate serial:       6B5C20A33075FFB56892C8C5FE0E72BB4430EDAD
Authority key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3135302e302f32332d3233203d3e20323635323835.roa
Signing time:             Thu 04 Jul 2024 13:20:32 +0000
ROA not before:           Thu 04 Jul 2024 13:15:32 +0000
ROA not after:            Thu 03 Jul 2025 13:20:32 +0000
asID:                     265285
IP address blocks:        168.90.150.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5c:20:a3:30:75:ff:b5:68:92:c8:c5:fe:0e:72:bb:44:30:ed:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
        Validity
            Not Before: Jul  4 13:15:32 2024 GMT
            Not After : Jul  3 13:20:32 2025 GMT
        Subject: CN=464B1E270D3C64BBBA7127F2A51DC1C43FFC9E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:2a:1c:93:d0:90:43:c7:b2:7c:a8:03:1d:
                    87:97:3e:be:62:6b:9f:2d:a2:e5:a2:29:98:17:21:
                    38:b8:b0:67:53:9c:28:39:3c:84:cb:7a:7c:00:74:
                    f5:45:51:45:6f:fc:ad:40:a6:c7:e9:aa:5a:d4:95:
                    26:ea:5d:ba:7b:c3:6f:70:15:29:a8:f1:67:e9:58:
                    cf:cb:66:44:f3:1d:7f:93:06:91:9a:84:4c:bb:ac:
                    9f:87:ef:0b:d6:29:1e:aa:9d:97:3b:21:b4:34:d2:
                    fe:1e:98:84:1c:87:2d:f4:4e:e2:b3:9b:bb:d2:cb:
                    c4:a0:ef:1e:22:89:a3:37:45:f1:17:86:f0:e8:aa:
                    0e:f3:46:04:90:bd:e4:dd:c2:2c:3b:40:f3:40:80:
                    5d:54:e9:7a:54:ef:c3:26:51:7f:7c:26:07:8c:c7:
                    9d:bf:35:3b:70:62:4c:77:ab:66:32:8e:7a:e9:29:
                    bd:f3:ff:73:b9:06:c4:53:87:19:82:50:fb:71:4c:
                    ab:39:32:7a:44:8d:9a:ba:3f:0d:48:e3:79:72:d3:
                    30:b8:04:59:b3:f5:c5:47:d8:3d:cf:d4:71:04:96:
                    28:94:46:13:37:8d:cc:e5:a4:29:d0:77:94:b3:a5:
                    8f:1e:33:f6:b5:fa:0b:93:d9:fe:92:4c:50:51:da:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4B:1E:27:0D:3C:64:BB:BA:71:27:F2:A5:1D:C1:C4:3F:FC:9E:34
            X509v3 Authority Key Identifier:
                keyid:3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3135302e302f32332d3233203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:1d:bf:df:c0:4f:53:86:7d:5f:34:5d:5f:7a:c9:b9:e2:
         45:35:11:b2:e5:81:f3:b4:e8:0c:bf:eb:db:d1:e7:a4:7d:ab:
         57:80:d9:df:51:e2:a0:5b:d4:1c:fa:2f:e1:35:a0:ed:d8:00:
         d8:b8:70:87:74:c3:89:9d:34:09:1f:5f:ce:92:11:f5:1f:5f:
         24:1c:66:dd:e7:1b:83:fc:a5:f3:fe:bc:9a:26:29:fd:70:66:
         ba:31:b4:3d:0a:89:c6:8a:dc:cb:18:5f:ad:55:57:84:2e:9f:
         8f:86:05:2f:c9:af:12:db:c3:5a:fb:6f:88:16:3b:c5:3f:4e:
         7c:52:6e:2f:fa:b4:aa:83:b0:48:42:63:62:f5:e0:de:e9:03:
         d2:8e:06:d9:2d:5f:ed:3e:5b:15:7e:5b:24:9b:d0:92:94:9b:
         7e:37:08:83:b0:69:cb:07:5e:2b:a5:df:90:1b:01:6d:b9:ca:
         53:ce:88:12:64:61:57:38:7d:a6:d5:3e:be:c2:c3:60:2f:fa:
         a1:2f:05:22:36:11:d6:d6:51:8e:a0:08:58:26:70:a5:a9:21:
         28:a8:e1:eb:e0:2e:45:52:dd:1a:f6:0f:86:74:d7:0e:8a:29:
         a4:47:25:d7:70:cf:36:11:a7:45:7e:12:78:bb:c8:94:65:cc:
         9c:02:c5:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa1wgozB1/7VoksjF/g5yu0Qw7a0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3
OENBODdBMTAeFw0yNDA3MDQxMzE1MzJaFw0yNTA3MDMxMzIwMzJaMDMxMTAvBgNV
BAMTKDQ2NEIxRTI3MEQzQzY0QkJCQTcxMjdGMkE1MURDMUM0M0ZGQzlFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDSock9CQQ8eyfKgDHYeXPr5i
a58touWiKZgXITi4sGdTnCg5PITLenwAdPVFUUVv/K1ApsfpqlrUlSbqXbp7w29w
FSmo8WfpWM/LZkTzHX+TBpGahEy7rJ+H7wvWKR6qnZc7IbQ00v4emIQchy30TuKz
m7vSy8Sg7x4iiaM3RfEXhvDoqg7zRgSQveTdwiw7QPNAgF1U6XpU78MmUX98JgeM
x52/NTtwYkx3q2YyjnrpKb3z/3O5BsRThxmCUPtxTKs5MnpEjZq6Pw1I43ly0zC4
BFmz9cVH2D3P1HEEliiURhM3jczlpCnQd5SzpY8eM/a1+guT2f6STFBR2ttvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURkseJw08ZLu6cSfypR3BxD/8njQwHwYDVR0j
BBgwFoAUPzGCFLG9LomBh5O25LmWcnjKh6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC8zRjMxODIxNEIxQkQyRTg5ODE4NzkzQjZFNEI5OTY3Mjc4Q0E4N0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMzE4MjE0QjFCRDJFODk4
MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzEzNjM4MmUzOTMwMmUzMTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoWpYwDQYJKoZIhvcNAQELBQADggEBAHLQHb/f
wE9Thn1fNF1fesm54kU1EbLlgfO06Ay/69vR56R9q1eA2d9R4qBb1Bz6L+E1oO3Y
ANi4cId0w4mdNAkfX86SEfUfXyQcZt3nG4P8pfP+vJomKf1wZroxtD0KicaK3MsY
X61VV4Qun4+GBS/JrxLbw1r7b4gWO8U/TnxSbi/6tKqDsEhCY2L14N7pA9KOBtkt
X+0+WxV+WySb0JKUm343CIOwacsHXiul35AbAW25ylPOiBJkYVc4fabVPr7Cw2Av
+qEvBSI2EdbWUY6gCFgmcKWpISio4evgLkVS3Rr2D4Z01w6KKaRHJddwzzYRp0V+
Eni7yJRlzJwCxVk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:41 2025 by rpki-client