Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37322e302f32322d3232203d3e20323633303930.roa
File:                     3138362e3235302e37322e302f32322d3232203d3e20323633303930.roa (raw, json)
Hash identifier:          iHq+FOTt07RFRUBfcJ0aOE2TBiPR8XNwVXc7+odv6Ns=
Subject key identifier:   43:A6:EB:3D:C0:BF:D8:8F:D5:FB:12:4D:22:91:57:BD:AA:A5:90:EE
Certificate issuer:       /CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
Certificate serial:       41DC8622BE5A447388950B635CA27DE67A58FB2A
Authority key identifier: 96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37322e302f32322d3232203d3e20323633303930.roa
Signing time:             Thu 01 Dec 2022 17:58:37 +0000
ROA not before:           Thu 01 Dec 2022 17:53:37 +0000
ROA not after:            Thu 30 Nov 2023 17:58:37 +0000
asID:                     263090
IP address blocks:        186.250.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:86:22:be:5a:44:73:88:95:0b:63:5c:a2:7d:e6:7a:58:fb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
        Validity
            Not Before: Dec  1 17:53:37 2022 GMT
            Not After : Nov 30 17:58:37 2023 GMT
        Subject: CN=43A6EB3DC0BFD88FD5FB124D229157BDAAA590EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:88:d3:af:17:40:73:a8:e9:4b:20:62:b1:
                    0e:e7:97:8e:38:48:2b:66:20:d2:15:cb:fb:a7:d5:
                    79:f5:7b:6b:c3:91:38:df:b6:cc:cf:b3:f4:8c:81:
                    8d:70:9f:34:c1:11:12:b1:ba:f2:83:24:8e:2a:ca:
                    d3:53:b7:16:c8:d8:82:cd:22:e8:b9:76:d2:5c:fd:
                    d1:c1:f7:94:f5:d6:48:cf:70:97:9f:56:72:db:42:
                    e1:2d:75:1d:dd:35:45:34:1a:da:77:cd:49:b6:74:
                    2b:8a:9c:47:14:bb:94:63:ef:e8:67:17:48:cc:b1:
                    31:0f:c2:b7:27:8b:ff:67:e8:6c:9f:f1:0d:82:ca:
                    cb:33:ce:14:64:37:b8:a5:c6:d7:1f:73:23:3d:11:
                    48:6e:f1:e7:3a:73:7c:ba:35:39:52:a7:a6:f7:d1:
                    b3:1f:26:da:fa:ec:ea:bc:15:67:42:0c:35:3b:2d:
                    5a:f0:8a:d9:fc:20:77:a3:2f:db:ba:2b:89:5d:d5:
                    fd:5b:30:ac:ab:40:1d:43:2a:bc:9e:87:f9:75:d7:
                    4b:5e:33:8c:ae:67:f9:33:57:24:48:a3:96:5e:b0:
                    01:1b:8b:c9:21:61:9e:6f:88:f7:63:f9:8f:28:65:
                    58:a2:8f:49:e1:c9:36:eb:d2:75:5b:59:b9:6f:32:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A6:EB:3D:C0:BF:D8:8F:D5:FB:12:4D:22:91:57:BD:AA:A5:90:EE
            X509v3 Authority Key Identifier:
                keyid:96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37322e302f32322d3232203d3e20323633303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:a1:e4:61:a8:57:b2:24:60:4f:b5:c0:81:ea:f9:98:f3:
         1d:0c:49:dc:74:10:1b:10:c1:8d:1c:5a:7d:d1:48:84:c7:b6:
         af:d4:ef:6d:24:10:1b:eb:be:ad:43:d1:8f:32:cd:1f:07:04:
         39:7b:f5:bf:0e:ff:ad:88:7e:a5:c1:86:78:65:c7:21:98:fe:
         f1:ea:6f:65:14:c0:c9:cf:76:7f:4b:3e:df:b1:06:67:7c:02:
         be:0e:de:fb:c9:f9:cd:6d:c0:71:53:07:5a:45:10:22:8f:39:
         61:95:33:8d:e2:5b:60:c7:bf:0b:38:d1:b7:d8:2f:98:e9:c6:
         f5:02:7d:51:d8:23:7c:f9:f2:dc:3a:72:5c:03:69:33:df:58:
         c7:c7:ba:61:50:65:e0:b2:c3:ac:0d:c0:26:1e:cb:cf:85:db:
         d7:ee:f5:79:3b:7d:8a:2e:7e:4d:ba:38:7c:fa:94:92:d3:a7:
         d2:f4:1d:bf:f5:3b:22:9d:91:32:10:50:55:1d:ef:a8:c0:32:
         5c:57:84:52:5a:ca:4f:1a:25:96:75:72:30:d0:42:47:66:eb:
         4c:99:d4:da:d3:64:bf:ed:e7:13:d3:cd:07:c0:75:37:09:9e:
         3f:95:33:7b:65:d4:36:23:64:26:04:54:3e:93:0c:1b:59:59:
         3d:35:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:55 2025 by rpki-client