Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3231312e302f32342d3234203d3e20323635323832.roa
File:                     3136382e39302e3231312e302f32342d3234203d3e20323635323832.roa (raw, json)
Hash identifier:          Zy4XC5pm8fAl7//d+jA+wT07GMwmtMmta1pv35vNuI8=
Subject key identifier:   A1:A0:63:C4:14:00:E0:BA:45:25:0F:40:EE:9B:61:D5:1B:3A:D9:F1
Certificate issuer:       /CN=15CE72F864B9D222722D29CFB14428A88692222C
Certificate serial:       1F33F8D83B182C6D1279EDE5290632C59605BFF5
Authority key identifier: 15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3231312e302f32342d3234203d3e20323635323832.roa
Signing time:             Wed 27 Apr 2022 20:21:24 +0000
ROA not before:           Wed 27 Apr 2022 20:16:24 +0000
ROA not after:            Wed 26 Apr 2023 20:21:24 +0000
asID:                     265282
IP address blocks:        168.90.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:33:f8:d8:3b:18:2c:6d:12:79:ed:e5:29:06:32:c5:96:05:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15CE72F864B9D222722D29CFB14428A88692222C
        Validity
            Not Before: Apr 27 20:16:24 2022 GMT
            Not After : Apr 26 20:21:24 2023 GMT
        Subject: CN=A1A063C41400E0BA45250F40EE9B61D51B3AD9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:00:36:75:5a:26:e8:15:37:ac:26:7d:3e:
                    71:ce:d6:6b:a9:1e:56:d6:e2:e1:67:ef:f8:a9:3d:
                    94:aa:ee:a7:e6:57:c2:0d:06:4f:c7:ac:21:46:c5:
                    8a:05:55:8b:d3:84:f9:e5:34:49:90:30:c0:ce:9d:
                    bd:b3:c7:02:de:b4:4e:0c:fe:9a:25:1e:f9:03:d9:
                    cb:46:4e:5d:cc:fe:67:f8:fd:57:0a:fc:4f:e6:42:
                    8d:eb:99:7e:b1:e2:9b:03:c7:91:21:13:a9:ce:50:
                    b4:5d:18:f0:1b:81:10:da:e5:92:70:55:36:3e:8e:
                    08:66:26:81:f4:ec:1b:83:b6:0d:e5:58:91:00:53:
                    33:fe:9b:07:93:db:c8:a0:58:87:05:d9:82:e5:fa:
                    2d:bc:15:e5:0b:9a:a7:a5:2f:95:4d:43:77:95:7d:
                    53:3c:bc:c0:c7:50:e9:f5:91:17:72:48:1a:fc:9c:
                    3d:f2:00:ad:8b:e5:a9:45:9b:84:83:f1:b4:12:0d:
                    1c:19:4c:17:c4:69:5d:2f:04:8a:92:cb:ef:de:b7:
                    9a:a2:59:f6:c4:4b:ee:bc:8e:67:fc:a2:0c:d7:3b:
                    68:9e:20:79:a0:87:3b:b9:8f:ae:5b:07:13:6f:70:
                    3b:83:1c:12:64:4a:76:94:a6:12:1d:17:0b:21:f3:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:63:C4:14:00:E0:BA:45:25:0F:40:EE:9B:61:D5:1B:3A:D9:F1
            X509v3 Authority Key Identifier:
                keyid:15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3231312e302f32342d3234203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:e4:d7:41:04:af:f3:4e:a7:16:96:51:a6:57:67:0b:a3:
         c2:78:18:9f:8d:5e:ec:a3:27:be:32:e1:8a:64:31:e7:c1:a6:
         c0:a6:50:93:2a:07:92:3f:f7:78:b8:82:3f:bc:6b:53:41:57:
         29:e4:6b:aa:70:f2:7f:ab:bc:ed:93:9f:cc:83:39:2d:a6:54:
         f1:8d:ca:73:85:eb:cd:31:12:ac:63:2b:d2:c7:ee:ca:79:81:
         61:20:1d:33:ba:5a:bf:9f:95:f6:cf:17:4e:81:df:83:0b:25:
         aa:d0:db:d2:3d:70:3f:82:1f:47:38:df:f0:b4:99:25:28:a2:
         33:5a:7d:0a:e5:48:65:c1:25:4b:a4:58:8a:7d:7a:f3:86:90:
         35:5a:83:7d:1c:56:19:5c:15:8e:00:dc:b1:45:99:27:c6:77:
         35:7c:b9:f9:24:94:b9:df:aa:35:73:25:74:fe:a7:55:0a:23:
         a4:6b:50:2e:8b:e8:5d:64:50:3b:41:e2:cc:10:0e:23:93:80:
         c0:38:78:2f:e4:c1:ba:54:40:f7:0b:a1:b3:36:79:3f:8f:26:
         47:c1:cd:3a:1e:c3:ee:56:c4:24:86:9a:4a:da:72:08:45:85:
         ef:d7:5d:ee:0b:40:6a:19:b7:63:5b:12:d5:65:76:c5:9e:42:
         d6:c7:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:21:27 2025 by rpki-client