Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa
File:                     3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa (raw, json)
Hash identifier:          K71ajwJCQ/Y0lUJ9rXVqP3M90Z+AEZNw/RY1aCqUwRc=
Subject key identifier:   4F:F8:A5:AB:A5:D2:FA:36:24:87:2E:5F:D6:AE:EF:99:02:C4:44:7B
Certificate issuer:       /CN=5AB108CE67597A8E28D0CB37116A189B3C9CBF2E
Certificate serial:       2DBBFCC4F68F9F430776EA691B0CEF10350481EE
Authority key identifier: 5A:B1:08:CE:67:59:7A:8E:28:D0:CB:37:11:6A:18:9B:3C:9C:BF:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa
Signing time:             Thu 10 Nov 2022 12:02:06 +0000
ROA not before:           Thu 10 Nov 2022 11:57:06 +0000
ROA not after:            Thu 09 Nov 2023 12:02:06 +0000
asID:                     270781
IP address blocks:        201.148.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:fc:c4:f6:8f:9f:43:07:76:ea:69:1b:0c:ef:10:35:04:81:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB108CE67597A8E28D0CB37116A189B3C9CBF2E
        Validity
            Not Before: Nov 10 11:57:06 2022 GMT
            Not After : Nov  9 12:02:06 2023 GMT
        Subject: CN=4FF8A5ABA5D2FA3624872E5FD6AEEF9902C4447B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:12:26:a2:1f:bc:3e:15:27:49:e3:87:3f:
                    84:2f:02:91:f2:89:a9:ce:a6:03:11:74:c9:c5:c6:
                    ff:f8:86:26:9b:6b:d4:69:0e:01:4d:8d:98:ac:3a:
                    8b:b7:cc:ad:fb:8a:e1:14:13:f2:ea:20:eb:40:49:
                    d8:fc:ea:be:5f:6b:a0:4a:ac:80:3c:31:f2:97:1d:
                    47:0c:58:45:06:27:a8:29:6b:56:ad:ba:05:7f:c6:
                    56:9b:30:fe:21:8c:b7:ac:77:0c:34:00:9d:bc:c2:
                    e8:11:c7:0a:cb:e9:5a:60:fe:c6:5e:5e:d9:1e:44:
                    ff:61:0a:15:bd:77:c3:07:9f:8a:31:3d:98:c4:e3:
                    b3:0d:51:1c:fd:a6:a9:df:c8:c2:5a:bf:1c:01:c0:
                    fc:5a:4b:6f:7a:ee:89:21:61:32:13:0e:2e:ce:4c:
                    d5:c3:a0:13:f9:cd:d7:a3:41:e5:a5:ef:80:2f:a5:
                    c0:0d:e3:c7:13:09:6f:69:af:07:23:38:60:5c:2b:
                    03:dc:35:a3:8e:26:16:a9:77:b9:f9:f7:12:63:72:
                    e8:e9:34:ea:dd:3d:28:af:3e:53:8b:91:18:b5:43:
                    a4:ac:99:3b:91:c6:02:4b:4d:cf:2e:a3:75:fc:75:
                    99:22:4f:6d:8a:12:a5:5d:a2:28:ec:5e:f9:cf:03:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F8:A5:AB:A5:D2:FA:36:24:87:2E:5F:D6:AE:EF:99:02:C4:44:7B
            X509v3 Authority Key Identifier:
                keyid:5A:B1:08:CE:67:59:7A:8E:28:D0:CB:37:11:6A:18:9B:3C:9C:BF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AB108CE67597A8E28D0CB37116A189B3C9CBF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8M2efAyFSy9pDQoSSQDHBVTponrvwERgtnx8J7uJTpJv/0/3230312e3134382e3131322e302f32322d3234203d3e20323730373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:40:a8:46:88:78:19:a6:75:43:de:63:df:fd:87:a9:f8:
         5c:06:33:16:99:d9:76:b0:73:a6:cb:fe:74:51:eb:f4:02:c4:
         f7:b8:17:ca:6a:f3:ec:19:46:d3:f0:0e:34:05:11:26:7a:07:
         91:16:85:3b:d3:e2:d4:28:0b:b5:f9:76:af:37:06:30:4b:42:
         c3:54:8e:b3:0b:cb:72:d0:b9:b5:08:7f:2f:a5:04:d3:f7:88:
         be:14:cf:67:f0:e4:01:01:d7:a6:b0:17:f6:d5:9e:8a:73:63:
         06:46:a1:07:68:da:2b:4f:65:6a:e2:03:1c:4c:9b:54:7f:f6:
         0f:df:b7:62:7c:69:09:bc:b4:38:4c:6d:69:13:2e:89:01:82:
         cc:b7:c7:5d:bb:6e:ca:6a:0b:33:33:ad:48:a6:df:6b:c7:cf:
         0e:69:5e:fe:f2:0a:06:1e:ea:14:8e:92:9e:19:eb:fa:96:3e:
         91:01:18:95:9f:a7:52:b9:75:b4:bb:92:bc:45:4f:35:b4:d3:
         82:5e:4f:76:ff:90:05:f6:f1:f4:f6:c3:5a:3e:8c:f5:64:fd:
         1c:83:2d:b0:4f:8b:0e:9d:ba:f9:ad:17:0d:af:68:5f:1d:56:
         27:a8:55:c4:09:43:2d:00:d3:10:eb:11:38:97:c4:2f:7b:52:
         a1:f6:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:07 2025 by rpki-client