Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
File:                     3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (raw, json)
Hash identifier:          Bag33vtmz9mySqc1b+InYTI2731A7YsozVPhSWL/KDo=
Subject key identifier:   AF:BD:54:EA:10:B5:C7:0F:38:16:CC:83:B6:BB:1E:5A:FF:1C:08:5C
Certificate issuer:       /CN=E46E993C4F612FBD69E525931CC4402187BA41CF
Certificate serial:       567FFE8BA022A0DE476D4ACD45AEDBA8DF3040D4
Authority key identifier: E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
Signing time:             Wed 12 Jun 2024 13:20:48 +0000
ROA not before:           Wed 12 Jun 2024 13:15:48 +0000
ROA not after:            Wed 11 Jun 2025 13:20:48 +0000
asID:                     265282
IP address blocks:        168.90.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7f:fe:8b:a0:22:a0:de:47:6d:4a:cd:45:ae:db:a8:df:30:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E46E993C4F612FBD69E525931CC4402187BA41CF
        Validity
            Not Before: Jun 12 13:15:48 2024 GMT
            Not After : Jun 11 13:20:48 2025 GMT
        Subject: CN=AFBD54EA10B5C70F3816CC83B6BB1E5AFF1C085C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:82:5c:e1:3e:1a:a6:50:5a:2a:26:8b:bd:
                    81:c0:83:bc:c3:2d:d2:9e:a0:4e:7b:70:2a:bb:b0:
                    6f:f5:9c:30:d7:ce:40:20:23:2e:b6:5a:2b:da:ed:
                    5f:ac:77:0e:a7:e3:5f:64:8d:a7:3d:47:4a:32:20:
                    19:3f:4a:d5:b4:38:31:74:5a:90:04:9c:ac:77:04:
                    e8:21:d3:f2:e9:12:99:c8:e4:58:e7:74:c8:17:79:
                    3a:7c:e3:68:5d:56:32:52:86:17:49:c4:68:56:15:
                    13:f1:5b:9e:32:fe:8e:c0:4a:eb:f6:24:dc:a3:b4:
                    d5:71:99:b6:22:f9:2c:8a:8c:07:43:ee:17:5f:17:
                    0a:e7:c8:5f:e2:37:5c:90:32:5e:90:bd:56:66:a0:
                    95:66:b3:16:ea:d8:0d:17:11:3d:f2:38:b7:bf:cc:
                    4f:d2:68:0b:b2:fd:05:40:7a:38:72:30:1d:89:b0:
                    9c:f0:51:8c:8d:99:57:29:4e:73:f5:dd:86:cb:67:
                    17:fb:3c:d3:a8:91:5b:e2:ff:17:c8:5c:1c:89:24:
                    f1:c3:de:af:72:eb:5b:39:29:a9:1f:e3:de:2e:c4:
                    f2:ad:c9:bc:b2:d1:df:7d:3b:99:10:77:b5:0b:71:
                    c8:b5:87:8b:7d:40:f0:fa:45:8b:82:57:76:a1:e5:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:54:EA:10:B5:C7:0F:38:16:CC:83:B6:BB:1E:5A:FF:1C:08:5C
            X509v3 Authority Key Identifier:
                keyid:E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/E46E993C4F612FBD69E525931CC4402187BA41CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:2a:f5:48:c8:5c:32:67:03:a8:76:81:c3:4c:f7:e6:c5:
         7f:90:12:52:30:19:e5:d9:d9:95:cb:44:d2:5e:90:ea:fb:b3:
         0e:6c:2a:64:6c:c6:ad:51:9c:44:7c:4f:e5:60:8e:1c:df:cf:
         cc:a1:2d:cd:3e:4d:ce:9c:1e:75:ee:82:2a:dd:b8:57:ee:bf:
         ce:11:a1:d3:69:c0:df:9e:05:29:37:aa:72:fc:91:71:5b:44:
         05:fa:20:26:58:2c:84:bf:33:53:ce:31:41:15:5d:e0:02:6d:
         b3:5d:92:0b:07:07:e9:c9:00:ab:3f:7f:b5:ce:43:46:ee:58:
         04:4c:58:7c:0a:f9:86:b7:1c:9a:40:7a:17:93:50:fc:b1:ba:
         1f:29:e5:c7:ca:ea:e8:ec:20:a9:09:72:15:33:4b:64:50:4d:
         f9:57:7a:78:4e:33:6f:73:c1:b7:1c:ae:76:76:5d:83:94:a1:
         cb:d4:4c:3a:63:a8:ce:54:bd:80:e4:63:08:16:2a:db:57:e2:
         d8:0d:47:9a:13:bd:d9:f7:39:8e:4e:c2:cf:d9:01:c8:37:53:
         f2:d6:c8:fd:be:63:9d:e2:3f:c0:34:66:22:1f:99:80:23:d9:
         f0:53:ae:a6:7d:78:1b:e1:47:b2:ac:01:87:00:f4:45:4e:45:
         4b:95:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:11 2025 by rpki-client