Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa
File:                     3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          4mvNt7a5SNkgbDjXGP1xdg+R9cxvhS+d/Vm1xNVFdJo=
Subject key identifier:   56:19:19:9F:4B:D5:EB:76:14:1E:B5:36:61:A7:1B:B8:2C:B2:9A:36
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       35F868ED380F88D6881E342809F50CFC1EA1C952
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa
Signing time:             Wed 23 Nov 2022 12:31:30 +0000
ROA not before:           Wed 23 Nov 2022 12:26:30 +0000
ROA not after:            Wed 22 Nov 2023 12:31:30 +0000
asID:                     262992
IP address blocks:        138.122.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f8:68:ed:38:0f:88:d6:88:1e:34:28:09:f5:0c:fc:1e:a1:c9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Nov 23 12:26:30 2022 GMT
            Not After : Nov 22 12:31:30 2023 GMT
        Subject: CN=5619199F4BD5EB76141EB53661A71BB82CB29A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:cd:1d:7e:63:e7:41:43:f5:a9:be:68:fa:
                    0a:e7:40:8f:0d:39:0b:f4:f4:72:8f:68:81:c1:f0:
                    a3:1f:35:eb:3a:0a:07:92:eb:64:b3:46:ac:b9:7b:
                    96:87:11:5e:ec:97:ef:9a:9d:65:c8:34:1f:df:20:
                    a7:d6:00:6e:44:13:1e:3a:8b:21:c7:01:3f:9a:cd:
                    ae:06:62:e8:37:04:88:ad:d3:b1:41:b3:9d:11:d7:
                    89:d8:61:45:c4:3d:cd:b0:bf:fc:36:6e:0f:e0:84:
                    25:e4:96:96:54:09:03:33:a4:8b:e2:f3:b7:a6:c7:
                    71:31:f8:37:18:b8:e8:e8:76:59:e3:5d:56:81:b5:
                    db:09:e9:44:e2:f9:11:05:2f:3a:38:31:01:b3:c7:
                    80:94:8c:0e:66:ca:60:13:30:a3:32:04:5b:83:6c:
                    e3:89:64:61:21:f7:3a:57:31:9d:1d:59:45:af:e9:
                    f6:c4:47:52:a5:6d:1d:74:1b:3b:71:ec:c4:88:bc:
                    38:2b:67:90:d1:1d:a3:e1:38:61:4a:5b:99:52:41:
                    52:f5:59:23:74:e6:e3:a5:82:43:b3:3c:c9:45:16:
                    b6:b6:87:a4:83:04:80:bd:80:c2:d4:a9:be:24:46:
                    d2:3a:c5:03:12:06:a3:21:47:17:ac:29:cf:30:9f:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:19:9F:4B:D5:EB:76:14:1E:B5:36:61:A7:1B:B8:2C:B2:9A:36
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:f2:94:6d:1f:3a:9a:f1:74:70:54:0b:1a:88:3a:ff:c4:7e:
         9e:27:fd:fa:5b:e0:76:11:d7:d1:89:6c:31:55:c5:d8:7c:67:
         c3:d2:02:88:d2:b3:7c:cd:92:2b:16:e3:55:cd:2c:04:38:35:
         9a:2e:b2:49:cc:52:66:2a:63:4e:b5:81:db:56:ff:14:d4:aa:
         73:7d:17:49:97:e5:59:b2:68:0b:8c:f3:11:46:d8:52:59:45:
         b9:2e:20:56:e3:36:38:12:fd:a9:67:1a:57:8e:91:cb:a9:45:
         56:6f:b8:bd:45:57:5f:22:67:f5:c2:f1:f1:c5:ef:a8:d9:0d:
         96:8f:c9:34:65:ca:68:49:7e:97:a7:f6:27:78:a0:99:e4:87:
         58:df:59:ed:e2:3c:36:cd:1b:f7:a7:7e:ee:41:0f:4e:7e:cf:
         fc:d6:e1:2c:32:66:01:d6:e2:85:44:4f:68:3e:81:2e:97:f3:
         af:f2:67:aa:05:88:5c:a4:80:a2:16:be:a4:8e:21:14:b7:a0:
         9e:3c:84:bf:5e:98:fc:9e:0b:33:14:41:84:80:92:6d:d2:4f:
         25:65:a9:10:74:8f:ff:4f:90:ed:f0:57:d9:6b:82:ea:01:ea:
         29:0e:f2:a4:0d:9e:a9:b5:e7:ec:d3:eb:45:0e:d9:7e:7a:2b:
         19:8c:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:04:18 2025 by rpki-client