Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37322e302f32332d3233203d3e20323633303930.roa
File:                     3138362e3235302e37322e302f32332d3233203d3e20323633303930.roa (raw, json)
Hash identifier:          DXU/BbL7jjRHogEv/L0LBUVvJBntMNgECybhXs7UDNs=
Subject key identifier:   EA:80:C5:08:B3:73:FB:64:78:DA:FE:CA:C2:43:8B:C7:70:8A:F7:BE
Certificate issuer:       /CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
Certificate serial:       28B8746700B1B4A3EC617F077C3CB61047ECC8EF
Authority key identifier: 96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37322e302f32332d3233203d3e20323633303930.roa
Signing time:             Thu 01 Dec 2022 17:58:37 +0000
ROA not before:           Thu 01 Dec 2022 17:53:37 +0000
ROA not after:            Thu 30 Nov 2023 17:58:37 +0000
asID:                     263090
IP address blocks:        186.250.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b8:74:67:00:b1:b4:a3:ec:61:7f:07:7c:3c:b6:10:47:ec:c8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
        Validity
            Not Before: Dec  1 17:53:37 2022 GMT
            Not After : Nov 30 17:58:37 2023 GMT
        Subject: CN=EA80C508B373FB6478DAFECAC2438BC7708AF7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9f:e0:f5:c6:e5:fb:e2:7e:27:05:c3:3b:b4:
                    76:5e:3d:49:74:36:ef:c8:cb:6a:5c:60:5b:1f:3f:
                    45:bd:77:1b:2f:08:fb:bd:a8:45:20:9b:41:cb:73:
                    d1:61:87:6f:06:99:d7:4e:e6:1b:b2:81:5c:45:e4:
                    69:14:4e:7b:90:bc:cb:8a:f7:00:b0:27:e2:a6:51:
                    9d:d5:fc:e6:32:e4:6c:a1:c0:1c:77:11:49:46:5d:
                    d9:45:9c:cf:24:85:2a:90:c2:f9:63:63:04:5f:de:
                    7e:12:1e:60:3b:71:29:a9:50:b0:89:bb:ff:d2:20:
                    a5:86:3a:d6:93:5a:e2:9a:e2:3e:e6:7f:91:0a:0f:
                    87:ef:af:0d:f5:ce:b6:df:61:4c:0b:1b:4c:17:18:
                    6d:a3:4d:6d:a5:07:d2:0d:db:2e:c3:20:9d:7d:b6:
                    3b:62:18:e8:43:d0:6a:f1:15:19:af:29:fd:ef:f2:
                    1d:dd:98:b6:16:d3:76:5a:5c:a2:b5:62:61:12:53:
                    64:b1:8f:a6:12:2d:54:a6:76:89:8c:53:7e:ac:2e:
                    27:bc:a6:02:da:08:ac:fb:f3:e9:c3:f2:7d:b9:c6:
                    13:e1:b5:ec:6e:3c:b1:36:1d:74:46:2e:a2:09:a4:
                    9e:27:ff:ac:bf:59:4a:ba:7f:19:d6:96:5b:36:84:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:C5:08:B3:73:FB:64:78:DA:FE:CA:C2:43:8B:C7:70:8A:F7:BE
            X509v3 Authority Key Identifier:
                keyid:96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3138362e3235302e37322e302f32332d3233203d3e20323633303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:d0:95:e4:52:a8:90:0e:00:32:6f:57:d7:56:9d:d9:21:
         9d:6d:b5:28:5f:77:92:db:b3:6b:28:fc:2c:72:d9:44:51:14:
         1f:ad:d4:4a:07:2c:ba:30:24:e5:d3:b0:1f:8d:2e:7b:20:05:
         75:55:6d:0c:27:57:df:66:8b:1e:df:69:79:2f:92:c4:4f:78:
         32:21:45:85:b6:e3:9e:40:bf:f3:e7:26:e3:f1:90:f1:0d:2c:
         30:bb:d1:13:fa:e1:32:94:aa:69:64:9b:38:32:7a:ce:41:5b:
         b2:80:8f:c9:79:a9:24:16:a2:d7:83:1d:7e:e5:4c:69:66:93:
         93:ad:63:e5:51:28:7a:e7:55:e2:f3:c2:2a:af:6b:46:a2:72:
         2c:b6:10:e0:1f:7d:4a:c3:6d:89:c5:b3:0e:90:ee:5d:b3:d3:
         9a:bd:5f:e1:9b:9a:21:4b:85:d8:9c:ca:7e:71:93:05:ea:c7:
         65:a3:ee:89:2a:f3:80:70:27:a3:3a:61:c8:9e:c3:bb:27:11:
         2e:6f:ec:25:eb:0f:1f:07:3e:c1:d1:36:cb:6d:23:c8:c9:1d:
         4b:52:48:b1:f7:c4:41:75:4a:66:80:68:c2:e6:be:d3:68:c4:
         68:95:50:93:ee:f1:c9:5c:27:8c:4c:8a:49:99:d5:60:f2:cb:
         61:cb:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:38:38 2025 by rpki-client