Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133312e3232312e36382e302f32322d3232203d3e203238323230.roa
File:                     3133312e3232312e36382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          th9mjeenKtRCEso5ElUQWlPUHwNPRa1jxLdnOdA1gBo=
Subject key identifier:   FF:A8:D2:67:1E:D1:5A:4B:5C:61:06:F6:99:BC:34:FA:61:60:F3:09
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       0466B52259C2E3A755567221AB610F47503C0212
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133312e3232312e36382e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:55:49 +0000
ROA not before:           Thu 06 Oct 2022 17:50:49 +0000
ROA not after:            Thu 05 Oct 2023 17:55:49 +0000
asID:                     28220
IP address blocks:        131.221.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:66:b5:22:59:c2:e3:a7:55:56:72:21:ab:61:0f:47:50:3c:02:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:50:49 2022 GMT
            Not After : Oct  5 17:55:49 2023 GMT
        Subject: CN=FFA8D2671ED15A4B5C6106F699BC34FA6160F309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:c0:f5:79:d6:58:b0:d6:a3:10:05:3c:b1:
                    b6:05:3e:ce:73:c4:05:25:03:0d:37:72:d2:96:7c:
                    3e:92:3c:e0:e7:0b:f0:66:45:cc:4c:09:bb:07:b4:
                    1b:71:f0:a2:0d:81:30:bb:05:4a:6f:86:5e:5f:32:
                    c7:b7:e6:29:56:5f:58:16:8d:66:10:4a:c1:06:a9:
                    96:13:6d:03:9c:2f:45:da:fd:d8:cd:ad:ab:f5:db:
                    a7:8b:42:ff:de:43:2f:b5:15:f7:cf:f2:2e:46:27:
                    19:62:ad:8d:6b:3a:6f:53:91:3b:89:13:ae:86:dd:
                    51:d5:09:4b:22:d3:9e:3d:03:84:8c:79:92:12:38:
                    6c:26:72:9c:f4:ec:a5:ea:02:60:79:0d:46:8b:50:
                    c4:c2:aa:f1:bb:b5:42:55:b9:7a:c4:3c:7b:9f:ec:
                    13:de:02:f5:56:24:b6:cb:27:19:df:6a:5a:98:6b:
                    87:14:2e:a3:d2:4b:79:76:09:96:54:8c:5d:26:de:
                    91:3e:43:08:f7:dc:42:d9:84:7c:23:79:04:09:86:
                    f8:2f:43:3c:38:5b:06:14:cb:a6:88:82:79:b8:af:
                    ae:34:c1:66:b2:20:ea:3d:a8:b2:81:65:42:d2:50:
                    30:9f:76:89:dd:b2:3f:4c:49:20:4a:66:04:e8:49:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:D2:67:1E:D1:5A:4B:5C:61:06:F6:99:BC:34:FA:61:60:F3:09
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133312e3232312e36382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:58:99:fa:e4:67:0e:c2:82:fe:9d:af:ae:d7:97:92:b5:
         43:31:f4:5b:07:27:ff:87:9f:bd:c2:4b:c3:a4:b7:f3:1e:4d:
         92:7b:82:e5:98:6e:0a:45:e9:c4:dd:d9:ee:c3:dd:bf:1c:d4:
         df:c0:d4:74:df:bf:99:bf:3f:f8:1b:ea:56:72:84:7f:24:3f:
         36:fd:80:cc:9e:18:1b:08:df:e5:c5:58:15:4e:9e:2b:4e:c5:
         ad:98:9a:b6:7f:b7:5f:b1:25:f6:13:4f:38:ec:be:58:4e:7a:
         c1:b5:ae:91:51:49:03:05:ad:d2:61:ee:bf:7c:a6:e9:8c:62:
         76:a5:53:4c:08:c1:5c:8c:e8:ac:b2:49:80:ba:a2:05:41:4b:
         7c:3b:57:0d:e1:67:75:e7:56:1f:d3:61:f8:90:69:f8:96:28:
         5b:a8:65:39:55:a3:b1:0c:1e:03:14:d6:5e:d0:f1:1b:f6:b5:
         23:7e:98:30:08:1c:9a:05:92:53:0f:34:7a:3c:84:b9:72:dc:
         20:b7:a6:b5:cd:ff:9e:1f:cf:2a:b9:b3:4d:86:ce:82:85:b2:
         bd:a9:0b:ac:57:f6:60:8b:5e:f7:cb:ee:f9:0c:84:25:c4:37:
         ba:8e:3f:ca:4c:db:87:6a:48:64:c1:25:d8:82:b1:bf:ff:ba:
         d4:e2:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:56 2025 by rpki-client