Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3230203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32302d3230203d3e203238333630.roa (raw, json)
Hash identifier:          fF3dqWe5DD8+obbq0D9/vQtswLjNX0Re6F0HOMrMyCY=
Subject key identifier:   7E:B7:84:25:4C:F9:F5:92:F6:E0:61:15:D2:FE:BA:30:29:09:6F:24
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       6666813BB87302C01A464949ABAA7F94CF8F82F6
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3230203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:33 +0000
ROA not before:           Thu 17 Nov 2022 17:58:33 +0000
ROA not after:            Thu 16 Nov 2023 18:03:33 +0000
asID:                     28360
IP address blocks:        189.76.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:81:3b:b8:73:02:c0:1a:46:49:49:ab:aa:7f:94:cf:8f:82:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:33 2022 GMT
            Not After : Nov 16 18:03:33 2023 GMT
        Subject: CN=7EB784254CF9F592F6E06115D2FEBA3029096F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:99:27:8a:54:eb:ce:fc:fb:9e:a7:d0:8c:
                    61:ef:95:df:fa:da:8f:56:56:4a:0b:56:b3:dc:fc:
                    4e:e2:d9:50:34:96:2d:20:b1:1e:8e:44:55:c4:38:
                    f0:dd:aa:90:e5:77:f4:b2:e5:8b:f6:6f:2b:e5:6e:
                    ff:68:0e:a4:b4:13:10:55:81:69:ff:fd:91:4f:09:
                    80:d3:07:6d:46:af:f7:b0:78:4c:c5:5c:a5:99:13:
                    81:5b:89:53:b9:8d:39:be:95:98:aa:9e:dc:86:10:
                    da:e6:74:88:31:ba:c4:95:0b:8c:21:8d:2b:5d:c3:
                    fa:6a:79:63:4f:c0:e9:a2:8c:cd:a4:76:f8:c3:92:
                    02:8a:f6:0a:55:01:e7:b5:e5:36:54:24:57:79:41:
                    10:4a:57:f0:e4:57:79:e5:08:7c:ab:48:24:08:93:
                    ad:74:35:ba:ad:2c:5c:ff:e6:9b:41:90:12:45:8b:
                    5a:15:83:5d:4f:43:8e:fa:ea:2f:17:04:c1:6f:49:
                    b4:91:73:4a:36:7a:dd:4b:5e:e5:61:5d:b6:a6:d9:
                    86:36:44:cf:b2:cf:13:df:7d:4b:88:8a:55:2c:36:
                    7c:28:6c:e1:cc:e6:4d:38:89:df:70:ac:b1:36:6c:
                    f5:cf:b4:e1:6c:c0:10:c5:9e:5a:84:23:14:94:57:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:84:25:4C:F9:F5:92:F6:E0:61:15:D2:FE:BA:30:29:09:6F:24
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3230203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:58:fb:73:32:27:3d:ae:90:fe:a7:c0:ed:25:02:db:91:be:
         0b:34:76:f7:ab:55:21:33:11:cf:eb:e6:54:c7:73:f9:f6:fa:
         d6:21:1b:d7:31:52:b6:b2:40:25:79:94:1b:c9:e6:29:67:2c:
         02:c2:86:05:38:3c:36:ae:a1:6f:5d:db:47:04:62:be:0f:3e:
         e4:2f:ce:cd:fa:fa:d1:cb:9d:f3:12:48:d2:c9:20:ec:10:c0:
         ef:15:ee:39:54:7a:c5:a3:1a:8d:5e:b1:3a:cc:a6:50:33:88:
         7f:40:2f:19:19:eb:aa:de:88:b3:cf:2c:18:5b:22:49:d8:1e:
         74:e8:a2:62:7e:29:a3:cc:ae:3f:98:d2:4d:20:a1:ed:65:a8:
         e6:d7:2c:8c:6c:ec:11:69:82:1c:06:3c:a1:4a:79:58:c7:2d:
         d2:b8:40:17:96:9a:76:40:2b:f2:29:79:3e:ee:ba:82:a0:02:
         48:a8:41:d8:d3:8d:82:e8:4f:f5:29:31:22:2b:ba:32:b0:5f:
         0f:34:02:f2:79:68:06:38:b1:9a:2f:41:28:78:f9:8b:fe:44:
         a4:f7:50:8f:6d:90:e1:bd:9f:c9:24:27:a2:93:37:34:35:af:
         a5:93:f3:fa:ac:1a:36:0a:38:b7:b1:c4:df:6d:7d:a9:c1:9c:
         04:bf:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:51 2025 by rpki-client