Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/3136382e3138312e32382e302f32322d3232203d3e20323635333239.roa
File:                     3136382e3138312e32382e302f32322d3232203d3e20323635333239.roa (raw, json)
Hash identifier:          AL1JgJ74Fvd+QmsKHEPxKeM2QnlDhCfe0BAVRJbTiu4=
Subject key identifier:   91:C6:86:87:78:46:0A:A8:AC:08:86:5F:49:6C:87:8A:F7:0A:D3:A8
Certificate issuer:       /CN=4481A27D53C172F7D6C4614493892E9919009470
Certificate serial:       55139915DB27504CEB56C643A52EEF30559AAB79
Authority key identifier: 44:81:A2:7D:53:C1:72:F7:D6:C4:61:44:93:89:2E:99:19:00:94:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4481A27D53C172F7D6C4614493892E9919009470.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/3136382e3138312e32382e302f32322d3232203d3e20323635333239.roa
Signing time:             Wed 30 Mar 2022 17:45:24 +0000
ROA not before:           Wed 30 Mar 2022 17:40:24 +0000
ROA not after:            Wed 29 Mar 2023 17:45:24 +0000
asID:                     265329
IP address blocks:        168.181.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:13:99:15:db:27:50:4c:eb:56:c6:43:a5:2e:ef:30:55:9a:ab:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4481A27D53C172F7D6C4614493892E9919009470
        Validity
            Not Before: Mar 30 17:40:24 2022 GMT
            Not After : Mar 29 17:45:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:d6:13:cd:6d:de:6b:e1:95:74:44:de:f3:
                    cf:31:e5:64:eb:de:46:ff:ba:a4:65:17:0e:02:d5:
                    24:dc:33:2f:95:58:ff:a9:02:a2:c3:87:5c:88:b4:
                    6e:58:7a:ac:71:61:dd:62:a6:72:9c:b5:32:23:a1:
                    71:2a:db:d0:c2:3b:af:de:76:94:c4:9b:f2:71:08:
                    c5:3b:65:14:24:80:3f:67:a5:62:7f:56:27:16:11:
                    29:cc:d5:13:94:23:0f:29:c9:ab:b6:ad:2f:85:58:
                    d3:c9:29:02:8e:b0:e0:47:f3:23:82:63:21:fc:85:
                    ce:28:6a:dd:f4:76:70:3a:19:d3:60:e1:de:47:ec:
                    64:1b:a3:24:56:03:49:93:d8:77:b4:d3:5c:80:5b:
                    7e:78:3d:24:26:bb:f5:5c:4f:fd:c6:6f:7e:33:be:
                    ba:b9:1c:5a:00:63:96:5b:88:40:6f:71:de:89:51:
                    32:f9:fd:18:38:8e:fc:3a:dc:d1:0f:b6:18:0a:7e:
                    36:a4:9e:7a:07:28:be:e3:89:72:f3:09:81:49:2a:
                    48:a4:1c:f7:a1:3d:06:f5:9f:ee:87:a3:d8:62:a6:
                    12:e9:9c:2d:f1:dc:2c:6c:bb:e9:9a:cc:56:6c:3b:
                    50:4e:2a:bf:b7:aa:02:bc:13:e4:69:7e:04:8b:e2:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:86:87:78:46:0A:A8:AC:08:86:5F:49:6C:87:8A:F7:0A:D3:A8
            X509v3 Authority Key Identifier:
                keyid:44:81:A2:7D:53:C1:72:F7:D6:C4:61:44:93:89:2E:99:19:00:94:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/4481A27D53C172F7D6C4614493892E9919009470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4481A27D53C172F7D6C4614493892E9919009470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/3136382e3138312e32382e302f32322d3232203d3e20323635333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:a7:a8:98:9b:d1:d2:1d:e2:d8:bd:a4:4e:79:06:29:45:
         98:70:37:72:de:d2:7a:31:a7:ea:e1:9e:0f:a5:8d:59:32:66:
         5e:ff:d4:e8:b2:30:0d:b2:7c:cd:a5:ae:d3:20:3a:ae:5c:d7:
         2c:6d:3f:67:00:bc:19:24:db:98:34:7d:62:f2:0a:60:cf:5f:
         64:3b:a4:f9:ab:66:05:ac:f9:ea:c3:70:e2:61:91:84:15:f6:
         84:f0:5d:b2:f0:c4:25:0d:e5:71:60:08:e8:59:05:5e:73:4d:
         81:b7:e0:4b:6b:cd:d8:9b:82:56:dc:0e:ce:b3:3f:78:89:f7:
         45:26:92:7c:46:fe:ff:42:16:97:a2:9f:6d:3a:16:bd:c2:cc:
         10:13:01:32:dd:fe:78:ed:b2:43:61:5d:00:b0:a1:71:c4:69:
         25:7f:dc:89:45:b2:fb:f4:16:66:9a:a7:a0:3a:f2:a8:db:4d:
         06:5d:4e:b2:ff:1b:04:3c:82:ae:ef:61:4b:f1:b5:49:21:58:
         47:85:c0:94:c2:a3:d6:c6:5f:fb:12:80:7d:b0:60:3b:70:07:
         e2:0e:e2:a8:db:11:d9:b5:6e:7c:cb:d1:99:d9:e3:5c:e2:6c:
         19:cc:ab:6e:e4:5c:56:51:ee:07:83:e8:9c:e2:1f:f1:2b:d6:
         c1:2b:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:27 2025 by rpki-client