Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e372e302f32342d3234203d3e20323731333330.roa
File:                     3230372e3234382e372e302f32342d3234203d3e20323731333330.roa (raw, json)
Hash identifier:          61PCUV/xSBkAMd8DqCKscIVqZdc/mMXAkesB4fl2qy8=
Subject key identifier:   7D:3B:04:12:22:09:40:64:F1:59:B6:8A:B9:4E:6F:98:A2:3F:F5:8B
Certificate issuer:       /CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
Certificate serial:       5A7F635D75872F9E862D6F0D8A345347AF663D14
Authority key identifier: 8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e372e302f32342d3234203d3e20323731333330.roa
Signing time:             Tue 11 Oct 2022 12:58:30 +0000
ROA not before:           Tue 11 Oct 2022 12:53:30 +0000
ROA not after:            Tue 10 Oct 2023 12:58:30 +0000
asID:                     271330
IP address blocks:        207.248.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7f:63:5d:75:87:2f:9e:86:2d:6f:0d:8a:34:53:47:af:66:3d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
        Validity
            Not Before: Oct 11 12:53:30 2022 GMT
            Not After : Oct 10 12:58:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:4b:8e:0e:61:2e:ed:41:b7:a9:8a:42:c2:
                    6b:04:29:f4:6f:35:40:6f:47:90:9d:fe:02:60:7c:
                    f6:38:c3:56:a7:c7:d4:ca:95:e5:09:1c:7b:dc:00:
                    8b:ac:98:45:a5:08:ba:a9:82:68:09:d3:39:6c:61:
                    fe:67:26:ef:83:d9:c5:e9:a2:a1:d4:f5:8f:17:a6:
                    42:dc:70:37:a4:c2:66:f0:a6:fe:27:58:63:ea:43:
                    6d:c5:41:28:6d:84:00:3d:c7:69:1c:1e:88:1f:fa:
                    4e:a2:6d:51:d0:24:4a:ed:71:26:01:22:e9:ab:8e:
                    b8:20:00:f8:85:c3:24:a5:69:28:6e:42:f6:cd:09:
                    18:80:15:4b:01:80:3b:d8:ee:ea:72:a3:87:b9:68:
                    0b:75:86:27:bf:b3:94:8a:e3:b7:91:2d:c5:29:ba:
                    45:ae:22:80:73:d1:4d:aa:97:14:a8:5b:5c:82:04:
                    54:f4:fc:e3:a0:29:5a:3a:26:75:cb:d8:c7:76:07:
                    1d:a0:7e:93:10:d0:f8:e7:56:8b:4a:cf:57:aa:53:
                    8b:35:b0:fe:84:4f:3b:07:47:ff:a8:20:48:70:34:
                    b6:dd:a4:35:94:22:5e:5e:1c:78:38:45:6a:43:de:
                    19:07:4d:b7:64:8d:57:3e:83:70:23:26:45:e4:47:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:04:12:22:09:40:64:F1:59:B6:8A:B9:4E:6F:98:A2:3F:F5:8B
            X509v3 Authority Key Identifier:
                keyid:8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e372e302f32342d3234203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7b:23:40:ed:fb:c8:fd:f9:54:94:2b:86:7d:00:41:65:76:
         c2:09:50:58:bd:dd:f8:72:b0:41:4f:36:1e:c8:dc:62:fe:b2:
         33:d3:34:4b:0e:8c:2f:16:c1:f1:1f:51:9d:65:f3:3d:dc:ae:
         a0:e9:e6:16:f4:58:44:a4:c1:20:fe:c0:37:1e:ff:91:f0:99:
         a7:64:99:b8:f6:de:f5:5d:41:69:0d:39:dc:ef:f8:06:e4:15:
         30:aa:99:8b:1a:6e:55:2d:5c:69:a5:db:48:4c:eb:d2:1f:20:
         93:47:a0:1f:be:1e:dc:e6:6c:78:50:c4:bf:6e:7f:72:0b:ee:
         6e:b1:1a:d0:9b:78:c9:de:e1:1a:50:76:1a:03:1f:43:b8:5e:
         44:e7:42:bd:f7:5c:d3:e1:39:9a:e0:23:ba:53:5b:26:ae:01:
         4f:4a:d8:87:12:3d:05:30:a5:7f:0a:ea:7f:e9:fd:5c:92:bf:
         9b:04:8c:e4:ee:50:a8:eb:c8:b6:77:37:28:f2:c7:af:08:8f:
         43:ed:92:a7:9e:9c:4b:88:8e:60:43:07:dc:a0:8c:35:b2:55:
         6e:aa:14:26:6c:0e:cf:ac:54:b7:33:a9:78:6a:e8:04:14:75:
         b6:92:95:82:dc:50:2f:d4:ba:63:af:28:df:d1:51:d2:9c:e2:
         16:45:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:39 2025 by rpki-client