Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
File:                     3136382e39302e33322e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier:          zOEQUMh654RU/mJHF/eq9gbDXDLP8akPM6Sg2jCdSjo=
Subject key identifier:   5F:E5:78:68:27:2D:59:30:6D:84:AB:69:0A:65:4B:38:5A:4C:A7:53
Certificate issuer:       /CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
Certificate serial:       5AEC4ECB47CC79C5AFB2760D84B1DE1AD5F7174E
Authority key identifier: C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
Signing time:             Sat 23 Nov 2024 14:57:27 +0000
ROA not before:           Sat 23 Nov 2024 14:52:27 +0000
ROA not after:            Sat 22 Nov 2025 14:57:27 +0000
asID:                     265263
IP address blocks:        168.90.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ec:4e:cb:47:cc:79:c5:af:b2:76:0d:84:b1:de:1a:d5:f7:17:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
        Validity
            Not Before: Nov 23 14:52:27 2024 GMT
            Not After : Nov 22 14:57:27 2025 GMT
        Subject: CN=5FE57868272D59306D84AB690A654B385A4CA753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:36:10:f8:00:e6:18:2a:e7:69:57:11:ad:
                    e8:1e:a2:87:3a:05:37:a8:67:4a:1f:80:7e:42:0a:
                    59:ba:1d:02:92:b4:9a:47:19:61:9b:3c:fc:16:b4:
                    52:d1:0f:9b:d1:61:0f:b3:13:7b:cd:8d:5d:4c:ee:
                    0b:80:35:0b:49:de:c1:a5:26:59:ad:e0:02:62:d4:
                    cb:b0:ad:35:a6:ee:24:00:8a:75:e7:57:92:65:95:
                    59:63:4e:13:01:26:b1:66:c1:79:a1:07:2a:07:92:
                    6d:2e:50:6e:72:dd:df:5e:65:eb:cc:32:a8:90:9f:
                    bc:7c:6d:60:26:0e:58:cb:25:dc:b8:59:8d:ce:a9:
                    9b:b1:21:ad:26:ef:c9:0f:b8:c5:9f:cc:8b:e1:6a:
                    4b:0a:fc:70:ce:49:05:d0:d3:45:d4:4c:08:f8:13:
                    2e:fb:d2:9f:7f:78:94:36:d7:44:5f:4d:c0:6f:ee:
                    72:19:88:b0:54:a0:e6:f9:3e:1f:3d:18:d7:90:51:
                    b9:95:30:01:22:cd:fb:2b:80:0e:b4:00:d3:4b:b7:
                    a6:66:ef:50:87:b0:8d:7d:c2:23:0d:36:f0:63:1b:
                    eb:73:ee:eb:ef:a6:73:c1:7d:11:e9:fb:f5:42:66:
                    05:6d:1e:e5:fd:c0:83:b7:84:73:9b:c4:c8:b0:84:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:78:68:27:2D:59:30:6D:84:AB:69:0A:65:4B:38:5A:4C:A7:53
            X509v3 Authority Key Identifier:
                keyid:C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:c9:49:78:21:b1:9e:2e:08:cb:72:7a:22:60:4f:db:79:
         56:93:f0:1f:23:c1:ee:6c:2c:7b:a4:6e:7f:14:ac:08:e1:90:
         36:f2:a2:e0:f7:66:31:ba:58:ed:6e:57:3c:0a:9d:59:03:d7:
         c7:76:5d:72:ba:25:40:03:72:8e:4b:25:85:e5:29:63:bb:81:
         71:0a:a1:5e:dc:89:52:5d:4a:c5:6f:d2:70:9d:dd:7d:3f:e7:
         94:0e:be:85:a2:95:ea:36:0e:3e:6d:c1:30:1d:bd:76:b2:c8:
         15:ac:a3:65:da:8b:37:74:24:36:9f:b6:34:c4:cd:3d:e9:48:
         51:4c:91:94:50:e5:cb:0f:d7:ad:e0:8b:91:13:d5:4d:e3:86:
         68:bc:2f:24:7e:9f:2d:80:50:97:e8:11:b2:e6:ae:01:24:40:
         cd:8b:45:0f:13:b6:b1:02:01:d4:11:49:62:3e:b0:8a:d9:0f:
         5f:5f:75:ad:1b:7d:e8:33:f7:10:33:6f:69:d7:68:c1:80:d1:
         39:74:4d:1c:eb:1e:26:5d:cc:63:c3:7d:1a:50:f5:98:d6:79:
         a5:9c:6f:ef:2d:31:19:a2:c5:7c:4d:35:27:78:68:51:6d:05:
         de:88:df:fe:9a:6a:4d:4e:7e:cf:32:0b:9d:33:cb:0b:36:33:
         33:5a:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:24 2025 by rpki-client