Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/3139302e3131352e36382e302f32332d3233203d3e20323730353438.roa
File:                     3139302e3131352e36382e302f32332d3233203d3e20323730353438.roa (raw, json)
Hash identifier:          XPA8w1Zi2Iq/FfiGGup+QXBDOgQ2aJ7pejEJPAuU4w4=
Subject key identifier:   FA:0D:85:FF:9C:1E:99:CB:E3:21:2C:1C:55:76:5A:EE:3A:8C:AD:FC
Certificate issuer:       /CN=41708E304CF7ABF013B9D61D9AC203815B961D44
Certificate serial:       18E7BB80A3C85A7083100F2A11B7B5B05CD6AFAD
Authority key identifier: 41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/3139302e3131352e36382e302f32332d3233203d3e20323730353438.roa
Signing time:             Wed 17 Aug 2022 16:43:54 +0000
ROA not before:           Wed 17 Aug 2022 16:38:54 +0000
ROA not after:            Wed 16 Aug 2023 16:43:54 +0000
asID:                     270548
IP address blocks:        190.115.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e7:bb:80:a3:c8:5a:70:83:10:0f:2a:11:b7:b5:b0:5c:d6:af:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41708E304CF7ABF013B9D61D9AC203815B961D44
        Validity
            Not Before: Aug 17 16:38:54 2022 GMT
            Not After : Aug 16 16:43:54 2023 GMT
        Subject: CN=FA0D85FF9C1E99CBE3212C1C55765AEE3A8CADFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:ee:dc:23:0b:14:cb:3b:ae:0e:08:78:93:
                    6f:3a:21:92:33:8c:ee:a8:8a:49:e6:b1:b0:bd:f7:
                    ee:c3:ee:9f:ca:ec:1d:66:2f:0f:1c:8d:98:35:4a:
                    5f:9d:b6:85:6b:7a:20:98:c9:d7:0a:8a:5d:db:b3:
                    31:15:c6:e5:d0:c4:e0:cd:0a:52:a0:4b:c7:80:fa:
                    c0:f7:95:41:44:45:39:da:2e:6d:cc:38:79:b9:39:
                    06:a4:e3:b8:33:48:96:0c:e4:98:aa:82:71:c0:61:
                    89:d6:11:15:16:3a:63:2a:52:99:b1:2f:f9:78:bf:
                    94:1d:41:3c:68:24:6b:e7:81:a5:59:6f:31:ac:25:
                    4c:31:cb:74:86:70:16:8d:c4:5f:38:b6:e0:2d:f9:
                    6a:eb:d8:46:2f:5c:9c:01:f8:42:31:cb:c8:5b:b7:
                    cb:8c:2c:50:dd:2c:54:8b:94:3f:02:7f:e1:24:07:
                    04:fe:4c:6f:30:a3:87:8e:51:78:d8:5c:b9:57:52:
                    f1:1e:e3:25:47:e6:b3:4e:b1:d9:48:ac:97:b1:62:
                    3e:9c:f0:3f:ca:f4:6b:35:dd:e5:d6:11:39:2b:e2:
                    c7:71:95:fc:1f:77:a1:e6:d3:f9:30:d1:15:2d:b1:
                    58:3f:17:a2:04:00:c7:e1:88:18:9c:78:20:1d:11:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:85:FF:9C:1E:99:CB:E3:21:2C:1C:55:76:5A:EE:3A:8C:AD:FC
            X509v3 Authority Key Identifier:
                keyid:41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/3139302e3131352e36382e302f32332d3233203d3e20323730353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:73:8a:d3:01:ba:5d:52:73:db:eb:8c:5b:6e:c1:ac:a8:20:
         55:32:e6:05:28:de:ed:7a:60:39:fb:c8:7d:d8:df:21:a2:37:
         e2:ef:2a:78:66:b1:e9:4f:e1:59:30:6b:bf:4c:24:63:54:ab:
         49:78:4c:b7:0b:af:31:dc:a7:47:4a:58:e6:c6:81:fa:9a:ae:
         b4:b8:df:93:66:e5:81:ac:cc:fe:48:96:28:50:f1:d5:1b:fa:
         4c:6c:70:db:ca:84:87:e5:d4:f1:d5:6f:a5:b8:f8:15:3d:c0:
         c4:e8:8f:37:aa:87:6e:37:0d:f3:d5:f5:2b:c3:dd:92:49:d8:
         c6:37:a6:f3:b0:a8:2b:8a:46:6b:17:a4:9c:2a:bd:aa:2a:87:
         e6:69:bd:db:89:f8:9c:5f:3c:e7:df:7c:ec:be:76:68:c2:66:
         94:d2:ac:51:5f:a9:34:84:49:18:5a:36:e9:99:7a:65:2e:4c:
         6d:bb:8e:82:3c:b9:fc:9e:59:c4:34:6a:42:87:63:18:fb:cf:
         25:3f:b6:ae:c5:aa:f4:ca:10:3d:38:55:bf:e4:ea:2a:56:1e:
         7e:68:cb:67:d6:20:46:3b:3a:81:3a:3a:d1:2e:4c:66:56:ee:
         9b:cb:61:a5:b3:97:9a:67:95:1d:5b:20:33:31:f9:a7:a7:b3:
         63:f2:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:48 2025 by rpki-client