Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3134332e3230322e3130382e302f32322d3234203d3e20323632363035.roa
File:                     3134332e3230322e3130382e302f32322d3234203d3e20323632363035.roa (raw, json)
Hash identifier:          7o7JK7YeuFQXxkO3AkTUAxy6iY30qYJ7excQcOR3+Cg=
Subject key identifier:   FD:BC:BA:46:28:A0:A5:BA:77:1A:AF:D2:2D:6C:39:9F:E2:33:DC:D4
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       6B67810C3769E0874BFAF6F459FB7CB7E9A776AF
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3134332e3230322e3130382e302f32322d3234203d3e20323632363035.roa
Signing time:             Sat 03 Feb 2024 12:53:17 +0000
ROA not before:           Sat 03 Feb 2024 12:48:17 +0000
ROA not after:            Sat 01 Feb 2025 12:53:17 +0000
asID:                     262605
IP address blocks:        143.202.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:67:81:0c:37:69:e0:87:4b:fa:f6:f4:59:fb:7c:b7:e9:a7:76:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:17 2024 GMT
            Not After : Feb  1 12:53:17 2025 GMT
        Subject: CN=FDBCBA4628A0A5BA771AAFD22D6C399FE233DCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:e0:b3:54:64:a8:a6:8b:30:ed:f5:aa:53:
                    e4:ff:3d:2a:7c:89:6a:99:6f:4e:df:ee:d6:0a:92:
                    cc:2c:8a:43:0f:e3:e1:21:9b:0c:8d:94:9a:fa:c3:
                    41:c1:b4:3e:54:4f:ec:ea:ac:86:78:4c:2f:9e:33:
                    fb:8c:e5:bd:d6:6b:f3:84:ad:4f:36:e8:a9:5e:1f:
                    1a:c3:5c:15:84:8c:c6:bf:3e:2d:55:75:91:63:2f:
                    d6:8d:77:27:09:08:4e:6b:c6:67:98:97:4a:b0:bc:
                    b6:9e:b2:99:71:77:78:84:bf:87:07:1c:45:97:5a:
                    9d:01:fc:a4:d0:73:9a:33:3d:5a:5d:b9:ce:7d:18:
                    d1:80:00:83:2f:30:d5:2a:6d:25:97:92:94:db:5d:
                    83:fd:c2:ff:ef:5a:cf:18:ef:4a:b6:95:69:e7:84:
                    f1:aa:06:81:27:a5:7c:95:55:bf:88:e9:c0:57:7d:
                    11:78:46:d5:92:a3:62:87:d8:f7:cf:ab:cc:92:0d:
                    9e:38:ef:0a:cc:58:bf:07:05:30:49:9d:8e:17:23:
                    48:ee:05:33:19:1a:18:06:37:92:27:2c:d7:61:fa:
                    08:56:d4:d2:a7:a5:21:de:f1:8c:cd:2d:a2:5f:44:
                    a4:d6:1f:02:62:d7:3b:26:2d:ac:d3:31:01:c0:b1:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:BA:46:28:A0:A5:BA:77:1A:AF:D2:2D:6C:39:9F:E2:33:DC:D4
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3134332e3230322e3130382e302f32322d3234203d3e20323632363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:82:7d:7f:b6:6c:53:fa:be:ac:d5:bf:be:e3:06:98:e1:
         d4:cc:cc:14:1b:9d:de:f7:be:ab:1a:b9:03:10:1a:ac:79:b5:
         a0:7b:49:9b:e6:89:85:df:f5:be:fa:a4:c8:47:f2:3a:de:dd:
         c6:4f:3a:f0:0d:75:c3:9a:a4:e7:1d:c4:0d:65:d8:f8:a5:d1:
         2a:f1:09:04:6a:45:d6:74:c1:58:76:6f:55:01:ec:f8:35:ff:
         6f:7e:4f:66:30:9c:b2:5b:5b:88:c6:cd:3b:99:36:0c:4a:65:
         cd:2c:19:69:d5:36:bd:34:8d:5f:00:0f:34:de:0a:2a:04:71:
         1a:f0:46:58:cc:e7:bb:91:3c:a1:02:0e:ad:25:c1:77:fe:95:
         1c:b9:9f:a1:55:05:61:6b:0a:c9:82:c6:28:7e:81:94:2b:c6:
         ee:8c:88:46:bd:cc:78:7a:bc:28:9d:8f:da:64:11:88:b2:b3:
         0d:1b:d3:eb:88:30:b2:75:e7:e6:70:2e:84:f4:e9:c0:6e:9d:
         d6:9d:58:ec:b7:24:d4:54:53:90:e3:9a:8c:62:cc:47:95:a6:
         92:ca:30:64:f1:2e:81:bd:2b:15:70:df:04:48:d1:95:89:bd:
         95:5c:ab:7a:8f:48:6b:0f:7d:3f:31:0d:3d:02:3b:66:bf:08:
         dd:5d:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:50 2025 by rpki-client