Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f31392d3139203d3e203238323230.roa
File:                     3137392e3139312e3132382e302f31392d3139203d3e203238323230.roa (raw, json)
Hash identifier:          EqFYG8/Q1hROomY0n4mHXSGAzljj0yEgXN/SEbLY2VI=
Subject key identifier:   F5:ED:3B:D1:DC:8E:23:49:26:55:57:AB:EA:56:A6:8C:E3:B3:8B:B0
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       694901D592801B06EA0AAB4D456DC3F26FEB624E
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f31392d3139203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:56:58 +0000
ROA not before:           Thu 06 Oct 2022 17:51:58 +0000
ROA not after:            Thu 05 Oct 2023 17:56:58 +0000
asID:                     28220
IP address blocks:        179.191.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:49:01:d5:92:80:1b:06:ea:0a:ab:4d:45:6d:c3:f2:6f:eb:62:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:51:58 2022 GMT
            Not After : Oct  5 17:56:58 2023 GMT
        Subject: CN=F5ED3BD1DC8E2349265557ABEA56A68CE3B38BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:69:4d:45:7a:11:2a:12:09:be:59:62:46:
                    f1:b2:43:75:d3:1f:c2:e0:d8:f3:c8:dc:d7:29:36:
                    eb:86:2e:13:91:8b:55:1b:8f:d6:23:85:2c:1c:e7:
                    b7:7f:b8:9d:ee:38:4d:7e:f9:e7:b7:b8:0e:24:46:
                    d8:58:6a:31:6d:0e:5c:f9:9e:4a:9a:b1:2e:e5:2f:
                    8d:d9:7f:9b:7a:81:6a:96:b6:6c:e1:64:27:c8:c2:
                    47:00:4a:df:2b:2b:90:2a:57:b5:53:70:2b:a3:d2:
                    1c:be:65:e2:20:04:7d:d9:17:a9:ef:20:18:45:8d:
                    c9:bb:77:b6:96:f6:b0:91:e0:22:1d:f1:a3:1d:86:
                    34:75:9a:5a:b4:42:cb:e4:4e:63:16:53:e4:42:9e:
                    82:7e:4b:08:2c:2d:99:7b:cf:40:c1:fb:80:3c:57:
                    2d:c8:e3:db:6e:41:bf:03:77:a1:2b:f3:b8:d1:f9:
                    27:01:28:fd:27:f4:27:8a:5f:e6:4c:a7:ec:f2:21:
                    83:78:7a:28:52:a7:91:8d:90:fc:bd:69:15:34:71:
                    d8:78:0b:ee:d0:9f:6f:c1:76:6d:d9:97:2c:70:6a:
                    97:0a:92:70:07:e2:18:95:c7:ce:ce:39:42:8b:fb:
                    fd:89:59:95:60:67:f1:77:dd:d3:f4:4c:f4:f1:bf:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:3B:D1:DC:8E:23:49:26:55:57:AB:EA:56:A6:8C:E3:B3:8B:B0
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f31392d3139203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:26:44:28:3f:4c:34:97:20:1f:68:66:ee:70:24:11:5d:0e:
         65:17:7f:c3:c3:d2:5e:b8:b4:61:f5:2c:a4:16:bc:0e:ab:01:
         97:10:08:43:bd:c0:04:6d:0a:d6:96:93:62:cd:fa:63:fa:75:
         e7:a8:8b:36:ba:b4:90:bd:05:85:4f:3e:68:6b:c6:f4:99:4f:
         46:d1:5a:d2:a2:e9:98:b3:76:6e:f0:52:86:2c:68:10:e6:1a:
         6a:61:f2:c4:22:34:25:04:79:fe:6d:32:17:78:c7:79:45:cd:
         fb:04:60:14:d8:d1:90:9f:cc:31:6f:79:4f:e5:38:67:54:43:
         4b:44:66:db:39:b4:b9:b0:c7:00:79:3f:e9:e6:16:d9:62:4b:
         06:47:c7:0a:21:c5:24:85:2b:5c:43:93:c6:de:19:cb:a3:f3:
         77:db:66:de:c2:9f:a8:d9:27:f5:d0:19:2a:6c:6b:e8:ff:72:
         80:a5:2b:1f:22:ef:89:f0:d0:74:89:56:b6:c6:a0:2b:42:9c:
         c9:c5:33:a2:74:32:d7:89:33:59:ed:be:ab:06:97:7b:7a:ae:
         eb:b8:4f:a5:00:f3:c3:91:00:ec:d0:ef:2e:dd:d8:42:b6:f5:
         b9:f7:53:3a:30:20:95:a6:ef:4f:74:43:b0:b3:fe:18:d8:97:
         e0:88:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:20 2025 by rpki-client