Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa
File:                     3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          KcMKlt6p2N4JUmTY7xa6e694x7H8yNLAHBYKN3xbofE=
Subject key identifier:   F5:D4:B5:F9:C6:22:A0:E8:46:33:AF:D0:5C:0B:43:FC:12:07:60:40
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       20A5454EEFC928F10364CAF3009F68DDB4F28708
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:37 +0000
ROA not before:           Wed 22 Jan 2025 21:39:37 +0000
ROA not after:            Wed 21 Jan 2026 21:44:37 +0000
asID:                     264927
IP address blocks:        201.159.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a5:45:4e:ef:c9:28:f1:03:64:ca:f3:00:9f:68:dd:b4:f2:87:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:37 2025 GMT
            Not After : Jan 21 21:44:37 2026 GMT
        Subject: CN=F5D4B5F9C622A0E84633AFD05C0B43FC12076040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:73:35:f9:4f:ed:c8:89:43:2f:90:36:b5:
                    a8:30:58:d9:48:60:0e:3c:96:4b:ab:5a:24:4e:e5:
                    ef:57:e7:2b:5c:28:cf:60:1b:a7:29:f9:7b:fc:05:
                    37:a9:26:e4:f4:47:45:eb:53:0b:15:23:4e:81:cf:
                    72:5c:41:c2:cc:ed:c6:66:aa:7b:89:41:72:e6:ed:
                    18:bc:27:62:33:1a:e0:80:96:31:1c:5e:39:7a:e8:
                    ea:88:a1:e4:0e:dd:91:0c:f5:f4:f5:d8:63:49:0d:
                    1d:46:13:c1:2e:7e:ef:2e:41:b0:83:18:0e:84:14:
                    ae:7c:ce:b1:90:56:89:77:18:ee:f1:aa:97:80:9e:
                    18:6f:b7:61:31:0b:b4:d3:2d:c6:3a:7f:0b:39:6c:
                    19:68:e1:79:03:e9:35:40:d7:c1:16:51:80:09:95:
                    ce:09:85:a5:c4:f8:59:48:bf:6e:c2:ba:5a:7e:7a:
                    51:81:15:a2:07:55:c3:b4:42:fa:c2:12:cb:2b:39:
                    8f:a6:56:37:0e:22:bf:2f:9c:09:12:55:80:3b:4a:
                    62:f0:ac:ad:c2:a3:28:21:97:13:eb:b7:58:3c:c0:
                    b7:12:ae:b8:ca:f8:a0:f0:a4:49:11:73:61:6c:d9:
                    6e:7f:7b:46:3a:12:da:cf:e4:88:e4:fb:a1:59:bb:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D4:B5:F9:C6:22:A0:E8:46:33:AF:D0:5C:0B:43:FC:12:07:60:40
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:46:a7:ff:9e:00:c1:ab:71:8c:5a:08:07:59:5a:fe:3c:
         a9:39:54:ff:5d:97:cf:35:f6:ba:9a:e6:dd:7f:97:20:16:db:
         0d:cc:12:2d:99:09:ec:a6:01:3d:ae:c7:4d:c3:93:78:43:18:
         b0:a6:bb:97:93:6b:6e:08:f6:83:f9:41:20:76:d4:c3:05:c9:
         5f:2c:e4:d8:03:b8:df:96:c8:a3:85:8a:4a:f0:a8:45:77:ec:
         5a:59:44:d0:c8:5f:16:e4:d2:7f:ee:41:e9:4c:e4:1d:41:c0:
         f9:c4:c6:99:8b:8b:62:23:2b:a8:53:3e:8d:a4:bd:6f:7b:d6:
         41:81:1f:b0:e5:f4:47:e7:5c:64:30:66:da:1b:24:75:e7:28:
         cc:6e:97:b5:ac:1e:c4:40:20:01:ab:42:bd:e3:79:cd:ae:4d:
         3b:98:8c:99:2c:8c:08:01:85:86:3a:1d:7f:d4:53:fb:29:66:
         65:54:0e:48:d6:15:37:dc:5d:53:a6:5a:7c:2b:d6:54:90:e8:
         71:93:a5:8d:11:c0:e8:97:34:21:72:11:fc:af:3b:cc:1d:8b:
         7b:48:1d:ae:60:ec:e6:e3:5b:52:83:6e:ee:0a:fc:88:ef:12:
         aa:42:a4:59:38:91:f1:66:5d:b7:8e:e6:90:20:36:29:68:d3:
         1a:65:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:58:29 2025 by rpki-client