Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          wtObZIzHF1OlaId0IN8XmpR9YYSjLaxvNTe7BvZGw4Q=
Subject key identifier:   E1:A0:CF:6D:29:C2:32:58:9F:BD:61:0D:F4:57:D1:BE:72:A1:7D:1F
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       6A0A9EE5A57111827847A89A85B250B6A7AB0D84
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:57:15 +0000
ROA not before:           Thu 06 Oct 2022 17:52:15 +0000
ROA not after:            Thu 05 Oct 2023 17:57:15 +0000
asID:                     28220
IP address blocks:        187.110.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0a:9e:e5:a5:71:11:82:78:47:a8:9a:85:b2:50:b6:a7:ab:0d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:52:15 2022 GMT
            Not After : Oct  5 17:57:15 2023 GMT
        Subject: CN=E1A0CF6D29C232589FBD610DF457D1BE72A17D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:ae:54:9f:3f:53:9e:0f:0c:90:9d:ef:f7:
                    09:ec:04:99:21:dd:20:f6:cd:c8:a5:90:d9:82:3f:
                    87:db:53:67:64:9c:72:90:41:c5:e4:0c:40:49:a5:
                    8d:91:b3:62:8c:1b:17:c9:df:44:22:95:de:ec:80:
                    2f:1c:ff:b2:d2:57:86:af:f5:68:f2:2d:b3:a9:ee:
                    69:8b:7f:77:7b:5a:91:f3:17:02:cd:20:df:1c:d5:
                    3d:d1:c3:21:c8:fd:01:d1:f7:c4:41:11:86:a6:38:
                    8b:c8:4f:82:57:64:1b:33:b1:b4:b2:5c:63:10:a4:
                    08:86:25:30:66:93:18:e9:ed:55:0f:e6:af:29:9d:
                    ed:98:86:c3:5c:68:d7:00:55:59:1e:e3:cb:89:58:
                    d9:fa:34:06:2d:07:2a:e8:1a:a5:9b:72:d5:d5:18:
                    f3:23:61:83:34:35:03:dd:0e:2c:15:07:a3:ed:92:
                    ce:ac:83:4e:c5:6f:a3:aa:aa:39:9f:37:54:c6:a4:
                    8f:c6:6d:e1:a1:75:81:06:0b:1f:80:43:49:3c:4d:
                    b0:3f:e6:82:da:5b:a7:2b:a7:70:90:b2:b0:01:6b:
                    ee:36:49:b1:7b:ef:b1:98:e3:41:77:47:5a:40:67:
                    3f:84:4c:93:ae:3b:cb:07:be:2a:db:46:a5:84:2a:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A0:CF:6D:29:C2:32:58:9F:BD:61:0D:F4:57:D1:BE:72:A1:7D:1F
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:44:dd:4e:17:6f:40:00:d6:aa:d4:2e:6b:dc:42:9f:4c:
         77:56:fc:0d:58:d3:9b:ea:ef:0e:26:d9:ca:49:3e:cc:37:aa:
         52:a3:f8:1f:d0:bf:a6:52:62:40:a0:d6:fa:7b:6c:4a:79:ea:
         e5:77:12:3a:3d:39:28:d0:b4:50:3f:ce:a5:9f:a5:7e:e3:fe:
         6b:29:89:b1:4a:26:59:14:92:39:23:0d:bf:7a:c6:5d:ce:27:
         22:6d:26:bd:8d:45:92:41:3d:fe:83:09:05:29:ae:e1:59:80:
         47:e8:da:02:55:f8:51:6b:f4:b2:45:0d:eb:74:44:75:3a:25:
         0a:e5:38:8a:5c:73:fe:aa:15:0d:63:1a:24:2b:79:95:11:f1:
         ea:1d:4a:ac:05:90:f5:7a:5d:be:a6:8e:d1:cc:42:28:7c:17:
         fc:a9:be:1d:02:37:dc:d1:34:46:88:5c:de:db:57:37:ff:a1:
         47:77:1d:1d:51:1d:1a:7e:13:a1:44:60:45:89:a0:4e:ee:ea:
         06:c6:4f:cf:d9:79:46:7d:9c:af:19:27:ec:db:c5:50:18:72:
         a4:aa:3f:4c:9a:68:f2:23:57:bc:e2:c7:06:7e:e8:00:2a:ba:
         55:40:4e:1a:26:e4:ed:e9:ed:fd:bb:c0:85:c4:b2:86:ce:97:
         44:f4:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:24 2025 by rpki-client