Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3231302e302f32342d3234203d3e20323635323832.roa
File:                     3136382e39302e3231302e302f32342d3234203d3e20323635323832.roa (raw, json)
Hash identifier:          GhUIuOXVEm2lzS+N7Aqkiw6mmMzShnjMeD4lahesRvU=
Subject key identifier:   64:AF:74:E0:80:72:00:31:67:81:C1:05:7D:EE:09:79:6E:2E:27:E9
Certificate issuer:       /CN=15CE72F864B9D222722D29CFB14428A88692222C
Certificate serial:       093577EDD4D09FB0F12E658CC57FFFC14F3C6333
Authority key identifier: 15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3231302e302f32342d3234203d3e20323635323832.roa
Signing time:             Wed 27 Apr 2022 20:21:21 +0000
ROA not before:           Wed 27 Apr 2022 20:16:21 +0000
ROA not after:            Wed 26 Apr 2023 20:21:21 +0000
asID:                     265282
IP address blocks:        168.90.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:77:ed:d4:d0:9f:b0:f1:2e:65:8c:c5:7f:ff:c1:4f:3c:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15CE72F864B9D222722D29CFB14428A88692222C
        Validity
            Not Before: Apr 27 20:16:21 2022 GMT
            Not After : Apr 26 20:21:21 2023 GMT
        Subject: CN=64AF74E0807200316781C1057DEE09796E2E27E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:84:28:6a:d3:11:b1:f9:2b:86:2d:b4:09:
                    b3:6a:f8:04:a2:b0:3a:86:f8:4e:1e:fb:07:0b:cd:
                    82:5b:53:85:56:dd:13:d9:56:a2:4d:bf:52:00:92:
                    2c:c6:f1:e9:e2:8f:46:63:24:72:d5:e9:f7:93:3c:
                    8f:08:3b:d4:ff:54:a5:1d:12:9c:13:b0:b4:56:43:
                    93:9e:a5:39:eb:62:29:0b:ec:90:bb:f6:1f:36:57:
                    ad:29:e9:b8:c9:88:ba:3f:a7:4a:e0:f8:c3:eb:f5:
                    70:30:a5:eb:d8:ad:6c:33:95:3e:aa:b5:97:c1:7f:
                    b8:9f:62:c9:2b:fa:45:2f:f9:e8:46:af:9d:20:5d:
                    ef:a1:26:1c:69:3e:91:33:ab:b1:c7:33:97:70:b5:
                    f3:55:c4:79:bc:bd:dc:ef:0a:09:b9:d7:30:aa:32:
                    a7:73:ab:f3:2d:01:9c:00:ae:1a:5a:f0:22:f4:d1:
                    87:aa:8b:5a:eb:e4:7d:3d:ce:ae:ac:f1:ce:65:cd:
                    59:d4:d3:1f:a6:f6:ed:a0:be:41:1c:b7:0a:e6:0a:
                    65:1f:74:2f:5f:f0:34:b2:63:51:5b:7c:87:9e:54:
                    14:4f:fb:0c:f5:10:cb:74:ec:b8:ab:c6:a5:58:65:
                    cb:bd:55:cc:7f:eb:9f:5a:f0:44:0c:22:a7:34:ce:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AF:74:E0:80:72:00:31:67:81:C1:05:7D:EE:09:79:6E:2E:27:E9
            X509v3 Authority Key Identifier:
                keyid:15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3231302e302f32342d3234203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:59:ca:60:d4:82:13:f9:a8:53:b9:3a:d3:c1:88:2b:8a:
         57:8b:1e:0d:92:cd:47:d3:6b:50:82:4b:b3:3c:ab:63:1b:86:
         5b:0f:9d:c9:bf:9d:fb:42:e2:ca:1f:40:f2:92:1f:69:4d:9a:
         35:48:de:2d:e5:43:58:56:99:c7:12:3d:5c:79:73:04:21:b4:
         99:3e:2a:46:47:c5:c1:81:55:f0:bd:0b:c4:80:5b:77:23:3c:
         5f:7d:42:09:5a:00:28:51:74:7a:c3:0e:a3:4d:7e:32:52:8e:
         fe:bc:bc:f0:47:92:21:0b:d2:77:20:f9:0b:4a:cc:e6:61:b4:
         61:5b:82:5b:d0:56:5c:e9:54:90:52:95:75:8a:f7:a6:b8:86:
         88:d1:84:09:23:1b:d0:7f:56:ec:04:30:38:8c:d6:94:f4:d1:
         df:fc:98:1d:e1:c9:4a:29:54:fb:ff:cc:6f:b2:82:37:07:5f:
         84:34:60:b9:1a:ea:37:0b:6f:4f:b6:0f:34:a1:49:49:a6:e2:
         57:1c:48:4d:45:19:72:72:b9:49:75:96:a3:a1:31:e8:88:d8:
         da:7f:25:18:69:4f:bc:3f:02:a4:8b:88:bd:22:bb:48:0d:c8:
         2e:d6:e7:79:8e:5a:c2:ab:87:5f:85:de:af:cd:50:cd:e4:6c:
         66:2d:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:45 2025 by rpki-client