Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa
File:                     3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          vNSubwtK60o9rYRpR0VaiUHReLizG/wZIwPIP1jnakA=
Subject key identifier:   90:19:9A:B4:8B:4E:BA:36:03:EF:4A:79:9A:B9:15:8C:37:33:D4:56
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       15C46758572A8113807C5D7A921870189035FAA4
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa
Signing time:             Mon 24 Feb 2025 14:56:47 +0000
ROA not before:           Mon 24 Feb 2025 14:51:47 +0000
ROA not after:            Mon 23 Feb 2026 14:56:47 +0000
asID:                     263661
IP address blocks:        168.205.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c4:67:58:57:2a:81:13:80:7c:5d:7a:92:18:70:18:90:35:fa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Feb 24 14:51:47 2025 GMT
            Not After : Feb 23 14:56:47 2026 GMT
        Subject: CN=90199AB48B4EBA3603EF4A799AB9158C3733D456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:2e:75:b7:2f:11:73:3e:52:cf:98:39:a1:
                    05:37:e4:4f:fd:4a:cf:c2:71:37:01:9d:57:f2:17:
                    37:59:c1:e4:69:c2:54:44:d2:89:ef:0f:9c:5a:44:
                    c9:1a:99:ad:94:a7:57:bf:75:87:3a:58:5e:bc:4d:
                    1e:6e:00:98:4d:57:85:d0:95:a6:13:db:9a:d3:00:
                    92:42:ea:4a:5d:75:1e:94:d1:5f:1d:4f:05:24:54:
                    12:6a:a6:07:a5:3e:bd:9f:0c:f7:3c:91:f4:94:41:
                    9a:ea:4b:6d:38:17:a0:62:cb:fa:0f:70:a6:b5:f7:
                    76:36:e6:71:62:6a:b4:81:30:a1:b8:3d:18:e7:09:
                    ce:dd:2e:df:0b:fc:c8:2b:b3:91:7e:c0:20:31:fe:
                    a5:2a:a6:33:9d:d9:38:df:9c:c3:3c:1c:ac:91:b1:
                    83:10:41:11:f8:46:4b:a0:cc:cc:91:10:dd:01:b4:
                    ed:dd:f7:71:63:9e:52:e7:31:15:89:5f:e4:ca:fa:
                    70:11:3c:53:c7:3f:05:38:bb:09:d1:ad:8f:2a:73:
                    03:03:29:d1:78:b4:46:80:f9:7b:b9:1a:10:a2:cb:
                    ce:1c:22:0c:66:af:c0:c5:32:93:4c:b4:73:7a:99:
                    af:bd:d1:72:5c:54:6a:11:9b:28:a2:f4:8b:9a:b3:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:19:9A:B4:8B:4E:BA:36:03:EF:4A:79:9A:B9:15:8C:37:33:D4:56
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:1c:ad:63:84:0f:08:84:11:be:45:77:ab:a7:59:b1:92:
         48:e1:80:61:b2:72:fd:1d:6d:14:6e:36:d2:1a:60:48:04:77:
         44:14:53:8a:6d:8d:f0:79:cc:a5:4c:9e:13:81:85:21:97:be:
         65:7e:43:35:8f:13:68:40:c3:16:02:0c:24:08:8d:97:3b:a3:
         9b:02:55:12:91:77:fd:6a:5b:f6:39:0c:a0:08:71:cb:97:e0:
         45:a8:c6:2b:d1:86:94:63:e2:1a:0c:b6:dd:70:ec:24:43:3e:
         6e:c2:10:64:14:78:08:a7:fc:21:c0:6f:a3:ea:5a:e4:4d:54:
         c7:3b:3d:81:6f:ad:b3:ff:f8:44:7d:c4:86:d7:9d:b4:67:17:
         c6:6b:22:2d:aa:2f:17:6f:fe:41:c9:39:be:95:7a:61:2b:09:
         37:8e:21:16:c3:2a:6b:74:da:55:4c:98:14:62:53:f7:40:64:
         1d:52:00:b1:16:1a:d5:19:72:87:6c:62:d1:e7:0f:e6:58:bd:
         94:56:7c:b3:13:f1:8f:4d:83:1a:87:7b:8d:3f:ae:11:ea:38:
         da:dd:a3:77:ea:4b:3b:8f:fa:de:d4:99:dd:ad:84:29:af:32:
         bb:4d:6f:7b:bc:45:63:93:f2:27:81:06:10:fc:b4:da:57:74:
         78:d2:38:c4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFcRnWFcqgROAfF16khhwGJA1+qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4MjJCREE2N0I3MjA3MDlDM0ZEQzBBQTFDRTBCOUM1
MzdGMkE2NTAeFw0yNTAyMjQxNDUxNDdaFw0yNjAyMjMxNDU2NDdaMDMxMTAvBgNV
BAMTKDkwMTk5QUI0OEI0RUJBMzYwM0VGNEE3OTlBQjkxNThDMzczM0Q0NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJy51ty8Rcz5Sz5g5oQU35E/9
Ss/CcTcBnVfyFzdZweRpwlRE0onvD5xaRMkama2Up1e/dYc6WF68TR5uAJhNV4XQ
laYT25rTAJJC6kpddR6U0V8dTwUkVBJqpgelPr2fDPc8kfSUQZrqS204F6Biy/oP
cKa193Y25nFiarSBMKG4PRjnCc7dLt8L/Mgrs5F+wCAx/qUqpjOd2TjfnMM8HKyR
sYMQQRH4RkugzMyREN0BtO3d93FjnlLnMRWJX+TK+nARPFPHPwU4uwnRrY8qcwMD
KdF4tEaA+Xu5GhCiy84cIgxmr8DFMpNMtHN6ma+90XJcVGoRmyii9Iuas0RhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkBmatItOujYD70p5mrkVjDcz1FYwHwYDVR0j
BBgwFoAUjoIr2me3IHCcP9wKoc4LnFN/KmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMi84RTgyMkJEQTY3QjcyMDcwOUMzRkRDMEFBMUNFMEI5QzUzN0YyQTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODIyQkRBNjdCNzIwNzA5
QzNGREMwQUExQ0UwQjlDNTM3RjJBNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzIv
MzEzNjM4MmUzMjMwMzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNfDANBgkqhkiG9w0BAQsFAAOCAQEAT1Qc
rWOEDwiEEb5Fd6unWbGSSOGAYbJy/R1tFG420hpgSAR3RBRTim2N8HnMpUyeE4GF
IZe+ZX5DNY8TaEDDFgIMJAiNlzujmwJVEpF3/Wpb9jkMoAhxy5fgRajGK9GGlGPi
Ggy23XDsJEM+bsIQZBR4CKf8IcBvo+pa5E1Uxzs9gW+ts//4RH3EhtedtGcXxmsi
LaovF2/+Qck5vpV6YSsJN44hFsMqa3TaVUyYFGJT90BkHVIAsRYa1Rlyh2xi0ecP
5li9lFZ8sxPxj02DGod7jT+uEeo42t2jd+pLO4/63tSZ3a2EKa8yu01ve7xFY5Py
J4EGEPy02ld0eNI4xA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:27:50 2025 by rpki-client