Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138392e302f32342d3234203d3e20323731363331.roa
File:                     3230312e3231382e3138392e302f32342d3234203d3e20323731363331.roa (raw, json)
Hash identifier:          Dt7uQ0T8uqDTvEbK5Bt36tS8R3Xou9aFPnbX6Eqppkk=
Subject key identifier:   B9:BE:AA:CE:CA:CB:74:67:BF:F6:6C:86:6F:57:1B:C6:7D:D1:55:74
Certificate issuer:       /CN=F9812497387122D013BAE2F313DEE77F1E107839
Certificate serial:       15E89DB87F995E9D795029A90869BBA09C618A63
Authority key identifier: F9:81:24:97:38:71:22:D0:13:BA:E2:F3:13:DE:E7:7F:1E:10:78:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9812497387122D013BAE2F313DEE77F1E107839.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138392e302f32342d3234203d3e20323731363331.roa
Signing time:             Wed 11 May 2022 20:57:57 +0000
ROA not before:           Wed 11 May 2022 20:52:57 +0000
ROA not after:            Wed 10 May 2023 20:57:57 +0000
asID:                     271631
IP address blocks:        201.218.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:9d:b8:7f:99:5e:9d:79:50:29:a9:08:69:bb:a0:9c:61:8a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9812497387122D013BAE2F313DEE77F1E107839
        Validity
            Not Before: May 11 20:52:57 2022 GMT
            Not After : May 10 20:57:57 2023 GMT
        Subject: CN=B9BEAACECACB7467BFF66C866F571BC67DD15574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:06:64:39:19:4c:a8:95:02:6e:24:2d:68:
                    15:8c:6b:ef:9c:a3:b2:f3:f8:2d:b0:53:7b:db:3a:
                    c3:20:d1:4b:d8:87:9f:65:f5:48:3e:96:5b:be:c8:
                    7c:2c:7f:6c:a4:9f:21:11:6b:ae:9c:98:8b:ed:9e:
                    78:b8:b2:7f:3e:1b:80:fd:3f:29:57:ee:da:ed:a4:
                    33:68:b5:b4:64:49:d4:82:c7:65:c0:4b:e0:91:93:
                    ea:b1:31:91:17:76:39:92:5b:c6:72:1f:dd:ae:cb:
                    06:2b:6b:e5:89:db:dd:df:7f:8a:e5:68:b4:f1:57:
                    a6:f0:f2:01:91:3c:db:e8:ed:ac:03:2c:18:66:d7:
                    3c:0a:6a:68:d4:5b:5c:86:bb:44:25:8a:1c:78:b1:
                    1e:c9:2e:20:d4:be:f7:fe:7f:30:6a:0c:f9:0d:ad:
                    33:6d:ca:3e:2a:19:87:dd:f8:57:fc:80:33:bb:f2:
                    d8:53:c6:4f:a5:d4:6d:4c:7f:73:2c:f3:df:76:52:
                    c6:04:0e:63:34:4d:8a:e1:70:ea:dc:39:3c:5b:24:
                    52:72:4b:50:1e:16:be:80:b3:f3:04:8b:3f:d3:c5:
                    a2:9f:da:6a:d9:ed:bc:69:1f:64:fb:ae:03:6a:56:
                    47:19:e0:ba:93:01:13:34:a5:72:5d:cb:c1:40:23:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:AA:CE:CA:CB:74:67:BF:F6:6C:86:6F:57:1B:C6:7D:D1:55:74
            X509v3 Authority Key Identifier:
                keyid:F9:81:24:97:38:71:22:D0:13:BA:E2:F3:13:DE:E7:7F:1E:10:78:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/F9812497387122D013BAE2F313DEE77F1E107839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9812497387122D013BAE2F313DEE77F1E107839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138392e302f32342d3234203d3e20323731363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5a:ad:cc:40:9b:24:de:d8:95:b9:2f:d3:84:bf:06:22:50:
         ab:93:da:1c:64:c7:6d:fe:78:35:9a:51:17:2b:73:63:a0:65:
         4e:84:2e:a7:b7:ce:8d:6d:e8:77:14:6c:aa:f8:c9:da:55:b8:
         f2:7e:c4:29:d6:f9:2e:8d:68:8d:29:1c:7f:d0:4a:53:23:6c:
         0f:b1:dc:dd:ea:84:36:98:2f:da:8c:aa:4e:3b:71:7d:db:f4:
         02:3e:98:96:36:66:8d:91:9a:89:ec:09:4b:79:90:66:72:a1:
         16:0d:e7:f3:83:b3:d2:7a:ea:77:ff:b5:81:6a:a7:d9:f8:37:
         8e:b5:aa:c6:28:3a:32:b8:a3:3c:0d:6e:ce:6d:f5:d6:23:f7:
         20:ba:34:42:e8:d1:1a:d8:f2:d0:02:38:fe:18:89:ae:8c:79:
         7e:a9:6b:1d:f6:97:8b:b9:b1:97:7e:93:20:5b:74:bf:16:09:
         1f:be:80:09:df:bc:9a:7e:ec:53:b5:10:e6:97:f0:60:62:a4:
         87:db:a0:cf:17:8b:ce:c2:42:29:04:6e:a8:3d:ba:fb:a7:a5:
         9e:d4:25:f9:77:2c:63:83:78:dd:d9:c1:ed:3f:f7:3d:3d:b5:
         64:c3:bd:29:b7:f8:b4:81:06:83:49:5b:62:28:a9:4b:a8:58:
         87:ae:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:45:00 2025 by rpki-client