Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          RdDwsdBvNKluelWpC7pF8+gecnMrRRvjxmrE5+cgduw=
Subject key identifier:   F2:8A:DE:13:28:61:3C:8D:51:29:71:11:46:AC:A4:FD:5A:4C:63:47
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       78F40CA23DBD90A1223666BBACE867FD8616ADEF
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa
Signing time:             Fri 16 Dec 2022 19:56:28 +0000
ROA not before:           Fri 16 Dec 2022 19:51:28 +0000
ROA not after:            Fri 15 Dec 2023 19:56:28 +0000
asID:                     271724
IP address blocks:        187.108.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f4:0c:a2:3d:bd:90:a1:22:36:66:bb:ac:e8:67:fd:86:16:ad:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Dec 16 19:51:28 2022 GMT
            Not After : Dec 15 19:56:28 2023 GMT
        Subject: CN=F28ADE1328613C8D5129711146ACA4FD5A4C6347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:e8:70:b4:52:c4:fe:0e:85:e5:77:e1:b3:
                    46:d3:1b:e9:b8:54:45:70:f8:b4:b0:b4:a0:d6:03:
                    ab:5d:63:cf:08:39:ee:63:0d:2c:2e:72:31:a2:f4:
                    20:bc:3f:39:c0:d9:28:dc:6e:92:5f:a4:cf:eb:01:
                    f4:8c:95:da:27:9f:87:d7:43:b3:87:d7:9a:36:6d:
                    9d:19:14:c5:8c:91:7f:39:5a:bd:e3:9d:04:de:43:
                    73:0b:8c:b1:9c:c4:0f:d8:49:71:43:82:15:81:50:
                    4c:3e:9e:e1:18:20:6b:7d:fe:cc:9a:6e:40:32:41:
                    7b:db:4b:8c:e8:da:36:2d:9d:04:c6:3a:89:4b:35:
                    ed:d8:0b:66:62:ec:14:2f:c9:4a:e1:7a:9f:aa:88:
                    a1:6d:52:e4:b7:4e:f9:5e:55:6c:ee:14:41:8c:ae:
                    af:22:61:c2:8b:95:00:81:b3:22:d1:72:1e:32:95:
                    0f:2f:d7:c4:17:ca:7c:40:f9:d6:ea:76:10:bf:0a:
                    3b:4b:fe:6c:b1:0c:54:42:34:8e:0a:9a:e2:1e:2f:
                    b8:d0:4a:60:e9:6a:a8:55:98:c4:b8:23:e8:e4:74:
                    e6:5b:f2:f3:11:9d:78:c7:00:c1:df:bd:f8:13:36:
                    bf:14:03:d3:c5:be:f7:54:11:5c:81:72:4e:65:14:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:DE:13:28:61:3C:8D:51:29:71:11:46:AC:A4:FD:5A:4C:63:47
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:8c:6c:90:f0:ec:4e:df:e2:a8:59:5c:8d:52:24:5d:d6:
         10:81:d3:8d:c1:bf:24:ea:72:f9:b2:4a:2b:10:1b:89:15:43:
         57:fd:3d:bf:69:83:c9:a6:00:86:5e:97:fc:ff:14:ea:8a:b8:
         ad:28:e0:44:f0:57:5e:31:ba:b1:2a:8d:4a:bc:0e:e6:1d:af:
         86:bc:ea:37:b5:a7:a5:5f:14:4e:c0:e3:82:29:0c:27:cb:d9:
         6d:8d:f1:45:45:5d:c6:8a:9c:e0:e2:d5:b3:b6:73:15:04:6d:
         5c:56:8c:d8:d5:23:07:b1:64:54:82:fe:28:35:1f:5d:5e:e6:
         60:41:34:d9:d3:5f:54:83:8a:d6:fc:cf:7b:d4:1c:d0:68:bc:
         e3:d6:90:56:4a:c1:7c:0d:ba:ff:60:30:ef:9b:db:c6:40:d3:
         01:31:b4:28:68:c5:d0:91:3d:e6:fd:87:42:0c:c1:46:28:ed:
         40:67:1d:f4:5b:ec:1f:c9:65:c3:05:21:54:36:66:48:4a:36:
         03:5b:4d:a5:40:f2:60:f2:5b:39:c3:9e:87:6f:76:08:0e:ba:
         4d:16:0f:3f:6e:a0:17:84:64:45:dc:0f:cd:c5:26:c5:52:b7:
         01:b1:71:5e:79:23:5d:2f:f0:33:7b:ba:08:e7:d6:23:d3:d3:
         51:4c:04:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:20 2025 by rpki-client