Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3136382e39302e35362e302f32322d3332203d3e20323635323738.roa
File:                     3136382e39302e35362e302f32322d3332203d3e20323635323738.roa (raw, json)
Hash identifier:          PQIqoT+StSMO2wUYfHgUhCq1IiGJJWgkv6JT4LN3Qqc=
Subject key identifier:   42:82:A6:A8:3A:C7:85:DA:DC:7A:4F:E0:CE:B9:C9:46:F3:7A:E0:25
Certificate issuer:       /CN=60E9E1814AC20560AE7B9A36F212037445A23C52
Certificate serial:       76D49BB075BFE5757C846DD3ED077B36E7A6B3BC
Authority key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3136382e39302e35362e302f32322d3332203d3e20323635323738.roa
Signing time:             Thu 19 Dec 2024 23:00:33 +0000
ROA not before:           Thu 19 Dec 2024 22:55:33 +0000
ROA not after:            Thu 18 Dec 2025 23:00:33 +0000
asID:                     265278
IP address blocks:        168.90.56.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d4:9b:b0:75:bf:e5:75:7c:84:6d:d3:ed:07:7b:36:e7:a6:b3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E9E1814AC20560AE7B9A36F212037445A23C52
        Validity
            Not Before: Dec 19 22:55:33 2024 GMT
            Not After : Dec 18 23:00:33 2025 GMT
        Subject: CN=4282A6A83AC785DADC7A4FE0CEB9C946F37AE025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:2b:b6:c9:fa:a8:1e:b9:18:00:7c:ad:01:
                    ce:96:62:ff:95:33:ee:e3:e0:1f:d0:41:30:df:38:
                    61:0f:6b:18:ae:7d:f0:48:33:67:56:f8:c3:75:3f:
                    01:0e:df:f7:62:eb:d5:9d:ed:9f:21:bb:dc:ed:48:
                    d7:61:4f:db:02:0f:66:6b:e3:29:be:57:3d:f9:59:
                    2f:58:c1:ff:b1:7c:63:be:20:d9:01:2a:96:06:67:
                    e2:8e:9b:9c:98:52:37:db:32:e0:21:c7:de:07:7b:
                    36:1b:76:f4:96:3c:c1:ce:fb:22:23:65:e7:b6:e0:
                    d4:e9:32:fa:2f:56:5d:5b:2d:41:9a:9c:9c:7d:ef:
                    b9:52:23:f8:32:95:55:09:d2:7f:2a:b9:c4:4a:f2:
                    85:d4:60:10:41:ef:46:b1:01:f7:32:2a:e8:9a:86:
                    03:fb:0e:b0:49:69:23:cf:a0:2d:eb:ba:32:35:02:
                    57:77:39:7f:55:13:6c:01:b1:05:5c:05:c5:db:39:
                    90:9a:86:98:83:59:4c:a8:25:f0:76:5b:54:b5:6e:
                    84:01:8c:bb:a8:a6:86:fc:c0:08:ad:dd:ba:29:d8:
                    29:7c:ee:af:24:46:d9:b6:ae:b2:49:e1:4a:c0:0d:
                    8a:c4:67:93:2c:26:4a:d7:ca:07:24:2a:22:97:ef:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:82:A6:A8:3A:C7:85:DA:DC:7A:4F:E0:CE:B9:C9:46:F3:7A:E0:25
            X509v3 Authority Key Identifier:
                keyid:60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/3136382e39302e35362e302f32322d3332203d3e20323635323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:f9:db:92:55:4f:6f:34:6b:be:a0:a5:48:a7:4c:0e:8b:
         67:67:4d:7a:3f:f9:b9:98:09:41:b3:b3:ba:04:b1:e8:6e:d5:
         a6:01:11:d3:22:aa:f3:ab:0c:af:19:be:fd:da:8c:97:db:5a:
         06:d4:c2:b9:33:47:b0:1f:65:ad:f2:6c:e8:d7:57:7a:c7:7f:
         c8:df:04:f3:f2:f5:25:48:c5:25:29:41:7a:aa:95:17:14:56:
         b4:40:fb:80:ba:dc:c5:fa:fd:1b:be:6c:4a:e2:31:62:c8:83:
         73:7f:66:25:e7:e7:4a:4b:9a:f4:10:27:c4:44:66:11:c1:91:
         4c:9f:bc:b2:c1:c9:7f:ed:dc:fc:c7:7c:13:9f:6d:72:4a:23:
         a3:fd:59:47:e0:35:40:b7:ab:ee:ed:31:aa:77:f5:eb:a0:71:
         15:1d:5f:65:be:a6:0b:5f:4a:4f:80:e5:ae:25:c6:85:79:e4:
         ac:bd:fe:c6:bf:b9:b4:d3:5f:fc:ca:31:c7:4a:69:24:0b:d2:
         17:53:e4:5c:1a:12:94:8b:19:04:84:ed:d2:05:c1:c6:8d:ff:
         1c:61:f8:00:95:b5:04:f9:c9:31:6b:96:f9:6d:86:84:bd:b3:
         20:c0:62:7c:85:2d:45:83:93:9b:90:56:cc:19:70:dd:85:8b:
         63:3a:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:37 2025 by rpki-client