Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa
File:                     3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          wEj6JpYK1jleb5tgIL7dd8fW4ij/B5OXBXAbGoqYAFc=
Subject key identifier:   3F:27:3E:B6:82:B6:85:4D:E2:83:97:27:04:86:76:2C:AF:E7:12:15
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       48CF94CC87A41218ECE1BBEF63E6E21A19EA0346
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:56:10 +0000
ROA not before:           Thu 06 Oct 2022 17:51:10 +0000
ROA not after:            Thu 05 Oct 2023 17:56:10 +0000
asID:                     28220
IP address blocks:        143.255.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:94:cc:87:a4:12:18:ec:e1:bb:ef:63:e6:e2:1a:19:ea:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:51:10 2022 GMT
            Not After : Oct  5 17:56:10 2023 GMT
        Subject: CN=3F273EB682B6854DE28397270486762CAFE71215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:56:ce:ab:17:1c:51:f1:d3:32:b7:5b:c3:
                    e9:bc:7f:f9:87:e6:1c:f5:84:9f:ae:05:21:ec:7a:
                    c2:5b:b7:d6:33:10:5d:0c:79:c4:86:e9:e7:c4:38:
                    e7:22:d7:94:cc:9a:61:d5:be:75:c7:96:5b:8c:f5:
                    65:76:ae:aa:2c:5a:27:bd:fa:be:fd:e5:4a:18:f5:
                    69:45:90:e7:73:6b:b5:e8:18:7f:1a:d3:16:3e:da:
                    c6:c2:fb:86:54:28:64:79:78:74:b5:fb:a7:24:b1:
                    96:ab:80:18:ac:29:fe:81:f3:ad:fa:cb:de:2a:ac:
                    30:25:f4:50:2c:27:90:0a:07:8b:43:30:2c:90:49:
                    9e:4c:78:81:17:c4:46:dc:49:9c:72:e9:45:25:f8:
                    b4:b4:10:a8:a1:da:8c:d2:44:0b:1a:3b:66:ae:94:
                    40:1c:6d:ab:8d:bc:94:ea:b0:8c:ba:aa:1f:71:af:
                    98:2e:4d:dc:5a:63:8d:af:a3:d3:47:c8:a2:f3:8a:
                    2f:f4:41:34:6d:57:b4:d2:d1:0b:2f:b0:9c:c3:f8:
                    e6:3d:68:51:07:5a:75:0d:f6:14:11:29:4c:72:c9:
                    cf:0f:42:43:2f:a3:b8:5c:d6:59:ed:65:c4:62:09:
                    1c:a3:57:13:7c:5c:84:e2:92:9e:9b:69:12:be:e8:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:3E:B6:82:B6:85:4D:E2:83:97:27:04:86:76:2C:AF:E7:12:15
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:05:78:45:67:e5:37:f8:f6:93:38:16:fd:7d:6b:95:7b:fa:
         8a:6b:fc:b3:a7:8d:c7:5a:0e:ba:a7:ad:68:b6:9f:01:b0:d3:
         15:14:5b:f8:43:ca:ed:17:78:37:a1:a9:0d:51:22:da:50:6d:
         ff:e8:2c:5c:11:05:29:a6:ad:46:22:92:1e:75:32:62:a7:7d:
         37:b5:17:06:4e:05:f1:e4:1c:1b:1b:f8:60:e1:a6:61:37:29:
         91:e8:62:5c:db:3c:39:35:81:b9:8a:55:0e:b1:bd:f4:ba:53:
         8f:5d:94:60:ef:6a:21:11:2a:4c:6d:00:91:d3:fe:b2:5d:bd:
         c1:f0:f2:ad:d7:48:6e:57:a7:39:12:67:c4:ee:d8:6e:30:1a:
         9b:37:5a:0e:d2:b6:43:bb:45:79:88:94:21:cd:40:96:98:61:
         d5:33:c8:7b:d9:14:ec:6f:d2:fc:70:92:b6:21:ec:c8:8a:98:
         c0:5e:25:20:17:a9:62:89:fa:87:1e:11:c2:a5:84:04:05:67:
         d8:87:c7:a4:53:fc:61:93:39:24:93:d2:23:3b:26:6b:33:0e:
         f8:c2:14:14:e9:c2:63:c4:77:ce:46:92:a7:c9:4f:9a:f5:24:
         ba:97:25:80:fd:e8:5f:0b:1b:c1:62:05:e6:43:99:03:cf:63:
         c2:27:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:10 2025 by rpki-client