Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32332d3332203d3e20323633343530.roa
File:                     3136382e3233322e3135382e302f32332d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          Qd2sn4kF5Hh9hjzJ0WIbozmMUeJQmLrZhqvc6XEqxd0=
Subject key identifier:   A8:AD:72:DE:E8:76:D1:3B:79:10:F2:D0:3D:F1:4E:AD:A4:FC:4E:DC
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       545D1B25B16B6D6778FDF1852C45C3EF6488F4
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32332d3332203d3e20323633343530.roa
Signing time:             Wed 05 Feb 2025 13:10:55 +0000
ROA not before:           Wed 05 Feb 2025 13:05:55 +0000
ROA not after:            Wed 04 Feb 2026 13:10:55 +0000
asID:                     263450
IP address blocks:        168.232.158.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5d:1b:25:b1:6b:6d:67:78:fd:f1:85:2c:45:c3:ef:64:88:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Feb  5 13:05:55 2025 GMT
            Not After : Feb  4 13:10:55 2026 GMT
        Subject: CN=A8AD72DEE876D13B7910F2D03DF14EADA4FC4EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:57:03:c0:5f:e0:6b:cd:9f:dd:71:05:f2:
                    b7:2f:d9:6b:9d:89:3b:4a:4a:69:33:d2:85:f0:4a:
                    35:dd:cd:f6:55:a4:d3:2b:20:07:4b:47:af:0e:00:
                    cd:c7:45:b0:54:ea:f6:a8:a6:d3:87:b7:d6:09:f3:
                    1c:5a:3f:fb:59:7b:a7:cd:23:c2:73:47:4f:4e:6f:
                    c6:62:ef:f4:83:9f:8e:a4:4e:39:0b:ab:d0:53:cc:
                    f4:09:91:2d:1e:2b:da:fa:e1:d7:3b:7c:3b:a3:48:
                    91:11:61:5e:64:fd:9b:fb:9a:1f:41:be:64:49:77:
                    6a:48:25:d0:4c:68:72:45:a5:df:2a:3c:2b:5f:6d:
                    28:a1:c2:96:b8:86:c4:5f:de:6f:6f:75:d6:85:8c:
                    da:ee:e2:99:3d:3a:6a:7e:73:83:96:53:f0:16:da:
                    d2:84:b7:72:d2:9e:37:3a:67:35:c7:b2:61:4e:e5:
                    66:1b:2e:9a:78:6c:51:1a:e1:e6:e6:c0:3e:9d:2a:
                    ad:86:42:3d:74:f3:c8:79:a3:25:20:a4:99:be:7e:
                    80:e3:48:f0:88:7f:f9:3a:7e:c8:e4:b2:bb:ef:b2:
                    7b:e4:17:06:1c:bb:62:9c:c3:c6:dc:36:2c:39:46:
                    78:94:07:e4:14:91:67:60:b4:9f:c9:68:09:34:3c:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:72:DE:E8:76:D1:3B:79:10:F2:D0:3D:F1:4E:AD:A4:FC:4E:DC
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32332d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:87:59:d4:f8:5f:c2:4b:86:7d:d2:fb:7c:f0:a1:7e:8e:6d:
         6f:f9:6e:f8:e0:25:1f:b3:fc:e6:04:f8:18:54:32:77:2e:d1:
         45:d8:13:26:ab:3a:d8:3e:44:54:09:4d:36:91:a9:ba:e5:62:
         77:f6:75:50:7f:60:c9:57:3b:01:7a:c4:fa:5e:35:77:41:8b:
         8c:9a:6c:bc:c9:27:ba:12:83:1f:75:25:12:f1:26:41:00:31:
         1f:c4:4e:21:8c:6f:f7:3c:24:ec:46:ad:d1:3e:ff:13:20:0c:
         e7:15:0b:f8:75:6f:b0:08:18:37:6f:c5:23:a3:da:90:80:15:
         79:6d:80:ce:93:6f:cb:ed:33:dc:20:1c:8b:6e:6a:83:3f:03:
         b4:a6:64:f0:f9:8e:c4:14:15:7a:a7:e0:9c:1c:0b:b3:4c:8e:
         69:41:f3:77:cb:c4:c7:cb:29:66:6b:b3:71:4f:0a:7f:92:44:
         94:40:bb:f4:84:11:f3:c1:f9:7d:30:7e:5f:b7:87:20:81:95:
         da:b8:4b:2f:af:7a:73:11:04:66:2a:2f:ba:4b:4f:14:c4:22:
         e1:d4:94:cd:22:7f:40:a3:27:bf:73:31:e6:ab:52:f5:17:0d:
         76:e5:b2:e1:3f:6a:6a:75:19:69:1d:63:f8:f6:8b:d1:12:7d:
         74:b1:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:15 2025 by rpki-client