Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          NNZ9/qiJvWZxs4yItw9KXsucmnbJLUf2jnckVjLueMo=
Subject key identifier:   C0:8D:5C:5A:57:55:DE:6F:59:B2:D5:D5:0E:2D:CE:ED:02:EC:BB:A0
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       27B17EC5AF74E91E91F7BD0BECA7E601A542FDD7
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:26 +0000
ROA not before:           Fri 28 Jul 2023 17:37:26 +0000
ROA not after:            Fri 26 Jul 2024 17:42:26 +0000
asID:                     265364
IP address blocks:        168.205.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b1:7e:c5:af:74:e9:1e:91:f7:bd:0b:ec:a7:e6:01:a5:42:fd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:26 2023 GMT
            Not After : Jul 26 17:42:26 2024 GMT
        Subject: CN=C08D5C5A5755DE6F59B2D5D50E2DCEED02ECBBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:c7:60:d4:75:a0:49:8b:3e:77:59:63:21:
                    b6:c7:30:13:56:b7:50:a3:fa:c6:2e:6d:0a:d6:44:
                    9a:dc:aa:de:a7:28:d8:ee:40:3f:3f:88:64:5e:c1:
                    60:08:88:9a:14:35:29:92:c6:68:47:06:93:e6:31:
                    fc:0d:58:ca:25:b3:ee:f7:42:82:a6:22:ae:2c:8e:
                    37:f3:cd:e3:bf:09:08:e8:89:5e:70:46:f7:51:52:
                    41:1b:90:02:56:b1:09:e6:9a:53:bf:84:26:2c:34:
                    de:8d:84:28:8a:b8:77:cb:7c:cc:df:fe:1a:c4:58:
                    4a:cc:f1:8b:61:a5:e1:7e:2a:7d:2e:e6:1d:f9:4e:
                    82:f3:e3:f3:99:13:ca:e9:36:32:4e:3c:37:a9:7a:
                    2e:ae:b9:92:53:9e:44:f8:14:2c:f2:a4:6f:ec:9e:
                    15:29:a0:7c:b8:9f:78:54:04:71:b5:ef:43:19:2b:
                    4d:c0:ab:13:f8:40:a0:d4:11:35:f0:38:fc:ec:5a:
                    e7:51:cc:22:3c:25:18:df:0b:e2:80:02:67:4b:d7:
                    71:00:43:40:d5:75:29:6f:11:53:eb:18:1c:82:78:
                    fc:e4:45:52:cf:08:39:07:f9:57:1a:eb:9f:0c:bd:
                    e3:77:45:98:f9:77:5f:30:65:3e:ed:02:e2:36:a9:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:5C:5A:57:55:DE:6F:59:B2:D5:D5:0E:2D:CE:ED:02:EC:BB:A0
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:3c:f7:56:38:50:05:5a:26:7c:f1:13:53:ed:0d:da:6a:
         7b:ea:fd:69:ad:7a:4a:78:6e:2d:e9:1f:52:e1:aa:7c:40:4b:
         fa:79:6b:4d:0e:01:a9:70:8c:09:6b:23:b9:d8:62:de:b4:b4:
         1f:6d:16:c6:8b:02:36:0a:1e:9c:ef:6a:bd:64:2d:a4:1e:5e:
         d5:eb:36:6d:d0:56:de:74:e0:83:01:60:09:02:22:21:0b:3d:
         5b:04:51:78:dd:7e:18:81:19:80:1d:17:51:2a:cf:65:32:d1:
         94:f4:e7:fc:3c:46:65:4c:65:94:07:be:a4:6d:86:5b:c1:0e:
         0a:c4:d1:b0:cf:06:6d:c0:93:3e:db:09:26:78:bc:e4:68:a2:
         5d:15:ba:99:0f:2e:7a:32:69:20:be:9b:d9:8f:3d:78:52:bb:
         00:f9:af:3d:25:55:0b:ff:55:be:cf:6e:07:89:2b:bd:88:e6:
         b1:1e:ec:2c:fa:3d:3c:8b:1d:d8:41:51:dc:7a:4a:dd:85:09:
         09:a5:28:47:e2:c3:89:9a:08:07:71:61:f9:9c:03:ab:05:f0:
         fb:2a:a6:8e:98:e0:70:03:8a:ae:ff:98:7d:8f:ef:c8:6a:98:
         5d:d3:34:07:b4:35:8f:5c:97:1d:73:49:44:16:be:99:22:f7:
         1a:db:5f:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ7F+xa906R6R970L7KfmAaVC/dcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyQTg1QkZDMEU2OTFDQjdDRTEwNzQyQjUyNjA2MDJC
OUE4QTBCQTAeFw0yMzA3MjgxNzM3MjZaFw0yNDA3MjYxNzQyMjZaMDMxMTAvBgNV
BAMTKEMwOEQ1QzVBNTc1NURFNkY1OUIyRDVENTBFMkRDRUVEMDJFQ0JCQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0cdg1HWgSYs+d1ljIbbHMBNW
t1Cj+sYubQrWRJrcqt6nKNjuQD8/iGRewWAIiJoUNSmSxmhHBpPmMfwNWMols+73
QoKmIq4sjjfzzeO/CQjoiV5wRvdRUkEbkAJWsQnmmlO/hCYsNN6NhCiKuHfLfMzf
/hrEWErM8YthpeF+Kn0u5h35ToLz4/OZE8rpNjJOPDepei6uuZJTnkT4FCzypG/s
nhUpoHy4n3hUBHG170MZK03AqxP4QKDUETXwOPzsWudRzCI8JRjfC+KAAmdL13EA
Q0DVdSlvEVPrGByCePzkRVLPCDkH+Vca658MveN3RZj5d18wZT7tAuI2qWNZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwI1cWldV3m9ZstXVDi3O7QLsu6AwHwYDVR0j
BBgwFoAUlSqFv8Dmkct84QdCtSYGArmooLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1lu
SmIvMC85NTJBODVCRkMwRTY5MUNCN0NFMTA3NDJCNTI2MDYwMkI5QThBMEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MkE4NUJGQzBFNjkxQ0I3
Q0UxMDc0MkI1MjYwNjAyQjlBOEEwQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlodUUyakQ2SnY0dm5BU0JHYnVNOXBmZ0ZCVFo3c2lLa0JYOGJhcDdZbkpiLzAv
MzEzNjM4MmUzMjMwMzUyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACozVgwDQYJKoZIhvcNAQELBQADggEBAEsGPPdW
OFAFWiZ88RNT7Q3aanvq/Wmtekp4bi3pH1LhqnxAS/p5a00OAalwjAlrI7nYYt60
tB9tFsaLAjYKHpzvar1kLaQeXtXrNm3QVt504IMBYAkCIiELPVsEUXjdfhiBGYAd
F1Eqz2Uy0ZT05/w8RmVMZZQHvqRthlvBDgrE0bDPBm3Akz7bCSZ4vORool0VupkP
LnoyaSC+m9mPPXhSuwD5rz0lVQv/Vb7PbgeJK72I5rEe7Cz6PTyLHdhBUdx6St2F
CQmlKEfiw4maCAdxYfmcA6sF8Psqpo6Y4HADiq7/mH2P78hqmF3TNAe0NY9clx1z
SUQWvpki9xrbX4g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:01 2025 by rpki-client