Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323635323633.roa
File:                     3136382e39302e33332e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier:          Srh6f9s04/7AJl8JDyxYAWVOkPiOLophrdkjmJEf9kE=
Subject key identifier:   CB:87:F6:C9:14:40:DF:D3:66:F8:93:B8:7E:D6:F5:80:90:F1:2E:F9
Certificate issuer:       /CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
Certificate serial:       4FDC5462A30601468291175C6FD474256B5D7590
Authority key identifier: C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323635323633.roa
Signing time:             Sat 23 Nov 2024 14:57:30 +0000
ROA not before:           Sat 23 Nov 2024 14:52:30 +0000
ROA not after:            Sat 22 Nov 2025 14:57:30 +0000
asID:                     265263
IP address blocks:        168.90.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dc:54:62:a3:06:01:46:82:91:17:5c:6f:d4:74:25:6b:5d:75:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
        Validity
            Not Before: Nov 23 14:52:30 2024 GMT
            Not After : Nov 22 14:57:30 2025 GMT
        Subject: CN=CB87F6C91440DFD366F893B87ED6F58090F12EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:9a:25:53:c4:34:8c:23:29:dd:53:2f:f5:
                    77:c6:a6:cf:7c:96:0a:54:54:4b:1d:ba:cf:89:1d:
                    09:f7:ac:a3:c8:62:d3:eb:49:57:4f:7f:ae:0d:c1:
                    bd:20:4e:03:49:93:f7:80:f3:3e:66:77:d8:a2:e6:
                    b6:37:14:ce:6a:0c:03:62:1a:cd:93:fd:c0:0b:81:
                    48:f8:ff:83:6d:a5:ba:1d:84:a2:06:18:07:ac:49:
                    c6:46:e7:46:bf:31:9c:1a:c2:c7:cd:21:9c:da:26:
                    13:92:b0:01:e6:db:6f:6b:6b:f2:fd:67:67:59:cb:
                    f0:6f:45:46:b3:4c:92:07:68:0a:fa:b9:d1:73:1a:
                    d9:da:04:8d:e0:df:57:f7:b2:e7:1e:8a:3f:60:6c:
                    b6:98:be:1a:9f:d5:15:ab:9d:8b:a9:c1:ad:e9:a9:
                    1a:61:2e:53:9f:21:3e:12:ab:c9:d8:90:21:73:d6:
                    e4:a2:37:05:32:6b:17:69:6b:8d:f8:d2:63:59:19:
                    c3:36:3e:86:bc:12:4c:d3:1b:5a:f0:ee:8f:64:a8:
                    ce:1d:8e:16:58:54:ba:cf:78:e2:e9:85:25:87:8a:
                    86:aa:40:1e:5b:d4:96:95:ef:3f:f7:58:bd:7b:e1:
                    34:33:b5:a7:dc:3b:12:14:15:f9:0f:3d:70:32:f3:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:87:F6:C9:14:40:DF:D3:66:F8:93:B8:7E:D6:F5:80:90:F1:2E:F9
            X509v3 Authority Key Identifier:
                keyid:C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323635323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:b2:9a:54:e3:ca:da:cd:53:37:ab:f6:12:0b:cb:d7:7c:
         77:bb:c3:b2:2c:4d:cf:14:b4:ad:39:3a:17:5d:b2:81:09:37:
         ca:53:21:e0:c9:95:2f:2c:d6:80:0d:bc:8c:91:8b:4d:de:50:
         9e:fe:49:03:1f:56:14:bc:16:49:b5:08:63:ac:56:54:7b:a6:
         cd:b1:21:a8:ba:35:d2:6f:d3:0c:b6:d9:b0:f4:c8:a5:a0:65:
         a0:5e:48:75:9d:72:83:03:68:44:25:0c:1d:71:7a:3d:03:a7:
         36:9a:a7:6b:7a:09:54:84:aa:bf:6b:d7:2c:d4:92:0a:e1:a2:
         88:b9:d2:c1:c9:ae:b9:27:a1:a1:82:95:65:7b:77:3e:06:87:
         5c:2c:4e:32:d6:6a:6e:69:3b:b5:8c:dd:91:2d:b7:02:2d:34:
         5b:0a:e8:c8:f6:4e:f9:07:6f:63:b4:85:0e:a5:df:e2:e0:31:
         25:fa:c9:86:86:0d:ab:24:8a:32:ba:14:ba:cf:f2:12:e3:f5:
         8a:93:59:41:10:3d:f7:65:52:31:ea:cb:c1:34:44:88:73:0c:
         0f:00:34:ee:49:68:7c:de:e3:30:bc:35:ed:33:c1:8f:f7:11:
         6a:4b:4f:d8:4d:8d:15:34:cd:42:b9:46:70:9f:bb:31:f5:32:
         08:70:8a:a3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUT9xUYqMGAUaCkRdcb9R0JWtddZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGOTYzQkFBMjZFQ0ZGOEY3NUNDMDBEMUJEOTlFOTYx
RDYzMTRGQTAeFw0yNDExMjMxNDUyMzBaFw0yNTExMjIxNDU3MzBaMDMxMTAvBgNV
BAMTKENCODdGNkM5MTQ0MERGRDM2NkY4OTNCODdFRDZGNTgwOTBGMTJFRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtuZolU8Q0jCMp3VMv9XfGps98
lgpUVEsdus+JHQn3rKPIYtPrSVdPf64Nwb0gTgNJk/eA8z5md9ii5rY3FM5qDANi
Gs2T/cALgUj4/4NtpbodhKIGGAesScZG50a/MZwawsfNIZzaJhOSsAHm229ra/L9
Z2dZy/BvRUazTJIHaAr6udFzGtnaBI3g31f3suceij9gbLaYvhqf1RWrnYupwa3p
qRphLlOfIT4Sq8nYkCFz1uSiNwUyaxdpa4340mNZGcM2Poa8EkzTG1rw7o9kqM4d
jhZYVLrPeOLphSWHioaqQB5b1JaV7z/3WL174TQztafcOxIUFfkPPXAy8w77AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUy4f2yRRA39Nm+JO4ftb1gJDxLvkwHwYDVR0j
BBgwFoAUxvljuqJuz/j3XMANG9melh1jFPowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YQWViVFphRW5XU1JVTmdNNGE0YVNUOEtvRThjbVZEcDM2UmVOdmlGcVRQ
LzAvQzZGOTYzQkFBMjZFQ0ZGOEY3NUNDMDBEMUJEOTlFOTYxRDYzMTRGQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNkY5NjNCQUEyNkVDRkY4Rjc1
Q0MwMEQxQkQ5OUU5NjFENjMxNEZBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
QWViVFphRW5XU1JVTmdNNGE0YVNUOEtvRThjbVZEcDM2UmVOdmlGcVRQLzAvMzEz
NjM4MmUzOTMwMmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzIz
NjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAqFohMA0GCSqGSIb3DQEBCwUAA4IBAQAhXLKaVOPK2s1T
N6v2EgvL13x3u8OyLE3PFLStOToXXbKBCTfKUyHgyZUvLNaADbyMkYtN3lCe/kkD
H1YUvBZJtQhjrFZUe6bNsSGoujXSb9MMttmw9MiloGWgXkh1nXKDA2hEJQwdcXo9
A6c2mqdreglUhKq/a9cs1JIK4aKIudLBya65J6GhgpVle3c+BodcLE4y1mpuaTu1
jN2RLbcCLTRbCujI9k75B29jtIUOpd/i4DEl+smGhg2rJIoyuhS6z/IS4/WKk1lB
ED33ZVIx6svBNESIcwwPADTuSWh83uMwvDXtM8GP9xFqS0/YTY0VNM1CuUZwn7sx
9TIIcIqj
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:30:15 2025 by rpki-client