Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS262780.roa
File:                     AS262780.roa (raw, json)
Hash identifier:          qyvjvAw75kmotwsR+yLI5EK/yBDEr0cFKkj1Cfy2enU=
Subject key identifier:   22:6C:62:04:E1:55:C1:B2:5F:16:5A:6E:BB:40:C4:92:D4:C5:0D:A8
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       16DA4E36CDEE8DEB3BB8F92E9AC810794896C770
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS262780.roa
Signing time:             Thu 06 Oct 2022 17:47:46 +0000
ROA not before:           Thu 06 Oct 2022 17:42:46 +0000
ROA not after:            Thu 05 Oct 2023 17:47:46 +0000
asID:                     262780
IP address blocks:        179.96.192.0/21 maxlen: 21
                          179.96.192.0/22 maxlen: 22
                          179.96.192.0/23 maxlen: 23
                          179.96.194.0/23 maxlen: 23
                          179.96.196.0/22 maxlen: 22
                          179.96.196.0/23 maxlen: 23
                          179.96.198.0/23 maxlen: 23
                          186.235.0.0/20 maxlen: 20
                          186.235.0.0/21 maxlen: 21
                          186.235.0.0/22 maxlen: 22
                          186.235.0.0/23 maxlen: 23
                          186.235.2.0/23 maxlen: 23
                          186.235.4.0/22 maxlen: 22
                          186.235.4.0/23 maxlen: 23
                          186.235.6.0/23 maxlen: 23
                          186.235.8.0/21 maxlen: 21
                          186.235.8.0/22 maxlen: 22
                          186.235.8.0/23 maxlen: 23
                          186.235.10.0/23 maxlen: 23
                          186.235.12.0/22 maxlen: 22
                          186.235.12.0/23 maxlen: 23
                          186.235.14.0/23 maxlen: 23
                          201.148.188.0/22 maxlen: 22
                          201.148.188.0/23 maxlen: 23
                          201.148.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:da:4e:36:cd:ee:8d:eb:3b:b8:f9:2e:9a:c8:10:79:48:96:c7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Oct  6 17:42:46 2022 GMT
            Not After : Oct  5 17:47:46 2023 GMT
        Subject: CN=226C6204E155C1B25F165A6EBB40C492D4C50DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:2e:0d:8c:7c:8c:41:5b:e3:05:57:c5:fe:
                    0b:4b:ba:34:37:5e:44:81:d5:c9:39:71:99:38:ee:
                    0b:35:9c:07:45:f9:bc:2f:f7:cb:a3:2b:c6:14:f5:
                    2b:b9:ba:cc:db:0d:77:ad:ba:3b:86:c6:50:0b:04:
                    cc:55:39:6a:cc:38:4c:93:39:d6:16:24:a7:04:3d:
                    f6:8f:55:b2:e4:f6:87:4e:88:59:d5:e7:79:c5:bf:
                    a9:23:06:c4:f2:7e:75:1a:07:52:fe:cf:22:4b:cb:
                    20:a5:e1:c4:af:cd:74:36:4c:1b:51:8f:c7:6a:2b:
                    93:c9:84:26:6d:c2:85:4c:0c:ce:58:37:cf:9b:c9:
                    18:eb:7e:58:ed:a8:2f:19:76:2a:f6:21:89:f2:66:
                    86:b5:b2:9d:f0:19:ad:bd:89:ff:96:1a:c8:8d:1d:
                    92:92:f3:aa:d7:d5:24:e3:d7:6a:c6:bd:b8:15:91:
                    fd:1f:d9:c8:00:76:2d:61:ff:00:d2:17:5f:3a:d6:
                    97:7e:f8:ea:04:9a:11:5b:1a:7f:46:6a:a0:7e:12:
                    66:99:44:34:86:85:d0:85:dc:f8:d4:4b:4c:80:2d:
                    94:c1:03:77:94:b4:37:da:0f:eb:90:ba:1d:f7:8c:
                    aa:f7:12:c2:18:0e:a5:fa:af:74:05:d8:77:28:d2:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6C:62:04:E1:55:C1:B2:5F:16:5A:6E:BB:40:C4:92:D4:C5:0D:A8
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS262780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.192.0/21
                  186.235.0.0/20
                  201.148.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:55:68:65:a6:0b:ab:8d:e4:6d:63:42:d0:26:80:08:d2:
         3b:20:a0:6b:e1:3e:f9:16:75:8b:8b:e5:2f:c7:4a:46:0f:6e:
         dc:42:4e:9f:f1:5c:02:5f:85:b8:b8:62:47:2c:6f:e4:d5:75:
         1a:da:36:dc:55:b5:35:8c:f1:b0:7a:f6:16:45:f3:95:65:2c:
         5c:9c:79:94:72:54:a7:0b:ca:2f:00:d0:71:89:ea:ba:60:c1:
         42:8d:2d:dc:01:a0:8f:47:c2:99:ba:6b:13:b5:45:67:7b:4b:
         a3:cc:dc:1c:ba:e5:8e:5c:80:97:d1:0e:8c:b4:07:67:f6:49:
         f4:60:d7:3e:cd:07:ef:59:52:dd:65:96:7d:cf:de:1e:f6:2f:
         a2:73:14:49:9f:e0:d3:b0:24:67:39:c1:ad:a7:fc:77:dd:93:
         2b:5e:85:c7:06:72:5d:6d:d4:97:fe:49:af:9c:a5:06:e3:4c:
         6d:43:40:50:f8:0b:2c:df:b4:31:f7:19:99:c3:3f:3f:f2:c7:
         18:15:8a:81:88:bd:67:d7:8c:1a:c2:18:a0:de:9e:85:88:d9:
         db:c6:fe:4e:f9:6d:71:98:9b:9f:cb:33:79:9a:a0:a9:07:c1:
         0a:17:3f:ba:4a:96:b2:5b:27:a5:28:1c:b1:20:2a:50:75:7c:
         d3:85:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:48:21 2025 by rpki-client