Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa
File:                     3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          WI8nemkbabz/ZucrhcWqjrtd7PXFAEwmjLmBcJiZGkc=
Subject key identifier:   D5:E4:FA:79:B7:43:04:D3:0F:32:E1:6B:1D:9B:28:3C:30:88:BB:F5
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       1E06B001DB725FB91EBB160264C86C959D4E3E47
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 25 Nov 2024 16:52:19 +0000
ROA not before:           Mon 25 Nov 2024 16:47:19 +0000
ROA not after:            Mon 24 Nov 2025 16:52:19 +0000
asID:                     270814
IP address blocks:        168.90.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:06:b0:01:db:72:5f:b9:1e:bb:16:02:64:c8:6c:95:9d:4e:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Nov 25 16:47:19 2024 GMT
            Not After : Nov 24 16:52:19 2025 GMT
        Subject: CN=D5E4FA79B74304D30F32E16B1D9B283C3088BBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:83:0b:72:15:06:07:28:9f:c7:bb:9e:ab:
                    aa:85:12:07:2d:6e:ac:e3:c1:12:a0:50:17:da:de:
                    20:96:b0:99:8e:7b:5c:9d:1b:44:1e:93:c8:3a:d1:
                    d8:d7:76:a5:79:d2:d0:43:ee:79:73:f1:d4:e3:1f:
                    ae:7d:21:e4:c0:23:11:16:48:3b:72:b9:67:1b:30:
                    10:ed:b4:7d:51:72:b7:3b:fe:83:78:23:34:75:f2:
                    fe:a2:a5:3b:37:f9:ab:bc:77:31:0e:bf:16:25:5b:
                    57:88:22:ff:25:d5:30:94:37:a4:76:ad:2b:55:56:
                    98:75:c7:c8:6b:cc:c1:a3:79:90:ec:ca:16:ec:ef:
                    41:b8:a4:b8:9f:87:89:69:c4:1e:d3:b6:ce:d0:54:
                    10:30:ec:01:a2:36:ee:18:47:3e:11:ac:c9:38:3e:
                    ce:ec:6d:62:11:ff:72:ac:de:dc:b6:7e:78:e0:0f:
                    1f:2b:8d:81:af:1c:d5:6a:10:87:ed:cb:94:07:f9:
                    52:4d:7b:f6:a0:45:ac:fa:cb:0f:37:25:f4:22:98:
                    62:62:5c:9e:5b:b0:2b:5a:51:47:aa:aa:cc:c0:71:
                    62:a7:72:58:01:2a:6a:08:da:bf:10:a1:dc:03:03:
                    2e:46:ba:35:ff:2d:ae:d3:0e:3e:bd:f7:a5:f9:1f:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:FA:79:B7:43:04:D3:0F:32:E1:6B:1D:9B:28:3C:30:88:BB:F5
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:9c:9f:69:bc:30:ba:33:11:5f:32:c0:22:56:b7:5f:37:
         51:4a:db:0f:f1:fd:33:1a:22:ac:d6:b3:41:51:03:b5:fd:05:
         54:f0:86:ea:96:62:96:71:a7:54:52:9b:7c:35:0c:b2:18:f1:
         fb:74:0a:cb:13:50:9e:c9:0c:f8:fd:36:fa:90:bb:75:08:51:
         26:97:90:19:6c:72:31:51:f5:29:1e:31:eb:a4:bb:2b:f3:0b:
         e9:26:2d:3e:df:ce:0e:a9:d4:3f:6b:8a:3d:b0:4e:ea:6b:c6:
         3c:5b:f9:f3:ed:e3:57:cb:9a:c9:cb:aa:72:cb:29:3f:ed:9c:
         4d:bc:29:20:4e:77:5d:a8:a7:07:6d:cc:59:f2:50:60:ad:fa:
         6d:fb:2f:b5:e0:7f:cb:e2:ac:fb:ef:3d:be:86:c6:8a:4e:bf:
         1e:5a:e8:d2:1c:6c:99:7b:71:fc:33:b1:3a:30:f9:61:8e:31:
         40:9a:66:33:9e:e8:b3:5b:a2:d2:85:07:22:cc:bf:08:69:f5:
         19:ed:92:bd:5c:ce:2a:97:51:aa:d9:19:01:51:33:f5:d0:6a:
         4f:e5:e3:52:04:fb:8a:97:76:0f:d4:d1:79:fc:2a:64:60:a6:
         ed:9e:b9:e3:79:41:e5:a1:f9:6b:71:d0:6e:9f:26:79:c6:e6:
         e7:56:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:04:15 2025 by rpki-client