Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3230302e39342e3234302e302f32322d3232203d3e20323632343839.roa
File:                     3230302e39342e3234302e302f32322d3232203d3e20323632343839.roa (raw, json)
Hash identifier:          DUtW4+Uv+byp159Bpzk3Q+7kxVqNw9xr4YhwyWq0/pE=
Subject key identifier:   72:A3:2A:4A:E1:A7:3C:0B:42:D0:08:6B:CD:2C:5B:29:3C:3D:51:C3
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       3D2F3D766838E8227EFEC7FC02F11FFC84C64F2E
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3230302e39342e3234302e302f32322d3232203d3e20323632343839.roa
Signing time:             Thu 06 Oct 2022 17:40:02 +0000
ROA not before:           Thu 06 Oct 2022 17:35:02 +0000
ROA not after:            Thu 05 Oct 2023 17:40:02 +0000
asID:                     262489
IP address blocks:        200.94.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2f:3d:76:68:38:e8:22:7e:fe:c7:fc:02:f1:1f:fc:84:c6:4f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:02 2022 GMT
            Not After : Oct  5 17:40:02 2023 GMT
        Subject: CN=72A32A4AE1A73C0B42D0086BCD2C5B293C3D51C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:20:6a:41:07:9d:06:8b:28:52:49:c5:73:
                    23:8b:9a:b6:a0:13:a6:af:1a:67:6d:81:78:75:dd:
                    4d:bc:58:e8:4b:95:45:1c:b6:f0:57:64:5d:0c:8e:
                    fd:17:e7:89:29:8e:b8:67:27:5a:5e:8f:ec:2e:eb:
                    1d:84:a7:ca:71:20:56:45:bf:0a:1b:f1:42:89:3b:
                    89:dd:f5:99:03:7c:92:d1:63:49:85:2b:61:f8:58:
                    92:e0:43:e0:2b:88:78:8d:9c:37:9b:40:e3:9e:da:
                    da:10:c3:7d:47:a4:33:d4:4a:d9:27:0b:c8:15:c3:
                    0b:6e:e6:e4:b5:72:c8:c7:ac:93:2b:b5:30:dd:b7:
                    62:ec:71:ab:9a:e3:bb:3d:c1:87:94:68:59:fe:dc:
                    22:98:99:4d:e2:0c:93:95:22:53:a1:4b:2e:91:35:
                    11:58:80:43:df:51:85:51:c6:b4:80:e8:9a:56:b9:
                    50:14:07:c7:2c:36:74:1c:bb:77:2a:a3:6b:b3:78:
                    6a:aa:e6:3a:0d:93:a7:0e:51:82:29:1f:f9:7c:2b:
                    66:db:ff:07:73:13:ab:ea:5d:44:b1:ec:f2:3b:50:
                    12:30:29:31:9c:17:87:30:4c:1e:02:55:60:49:cc:
                    ac:c6:49:93:50:14:cf:74:ed:c6:3e:df:0c:89:f6:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A3:2A:4A:E1:A7:3C:0B:42:D0:08:6B:CD:2C:5B:29:3C:3D:51:C3
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3230302e39342e3234302e302f32322d3232203d3e20323632343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:76:64:d2:ec:68:08:3b:53:36:7b:e4:69:d1:25:7a:5f:ce:
         4f:30:fb:d6:b7:81:34:37:20:e7:d9:b4:5a:a8:8e:04:a4:9a:
         e8:f3:f6:97:c4:ec:2f:a5:b1:2f:33:94:12:a4:92:18:50:e4:
         a1:73:28:01:38:2d:54:25:ae:e8:c8:9e:d6:e5:cc:2e:75:e5:
         88:88:32:d3:bc:7c:35:13:ac:99:2c:54:c8:c6:0a:fe:c8:c9:
         bf:d7:40:f3:0d:2b:a0:07:28:75:d4:7c:79:f3:aa:3a:0b:87:
         8f:24:31:c5:e3:a1:d2:e3:63:77:d1:c6:fc:6a:7b:71:15:8b:
         0f:b6:05:92:66:75:c6:f9:ab:12:ae:ed:92:4b:b0:10:ef:40:
         5d:e8:d5:1e:59:3a:ee:8c:44:57:aa:c3:d6:c1:de:13:04:1d:
         d6:9c:ae:13:01:76:ed:35:20:c2:a0:af:06:6c:a6:52:22:70:
         26:f5:70:d2:9c:39:d5:b6:bf:4e:ba:4c:7b:46:71:99:1c:b0:
         1f:99:cb:8c:89:40:78:9e:a8:0f:4c:90:1c:2f:62:82:17:d6:
         59:23:50:52:f2:59:93:85:24:c5:c7:e0:30:d9:e7:ae:30:a8:
         6b:d4:bb:f3:3e:ca:33:16:88:0a:bd:e4:f6:3b:e9:77:a4:b0:
         56:c0:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:14 2025 by rpki-client