Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3230312e3135302e38382e302f32322d3232203d3e20323633303930.roa
File:                     3230312e3135302e38382e302f32322d3232203d3e20323633303930.roa (raw, json)
Hash identifier:          JRM7jNyUEyv8Pm3KVds3rD69xZ1bRe1mMIMQnKtq6YE=
Subject key identifier:   7C:E1:D0:70:24:87:F5:5B:A8:88:51:46:93:A8:2D:8B:47:43:5E:6A
Certificate issuer:       /CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
Certificate serial:       15B65302CE2C9C9748C75C880D33DB5D5F65209B
Authority key identifier: 96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3230312e3135302e38382e302f32322d3232203d3e20323633303930.roa
Signing time:             Thu 01 Dec 2022 17:58:38 +0000
ROA not before:           Thu 01 Dec 2022 17:53:38 +0000
ROA not after:            Thu 30 Nov 2023 17:58:38 +0000
asID:                     263090
IP address blocks:        201.150.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b6:53:02:ce:2c:9c:97:48:c7:5c:88:0d:33:db:5d:5f:65:20:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
        Validity
            Not Before: Dec  1 17:53:38 2022 GMT
            Not After : Nov 30 17:58:38 2023 GMT
        Subject: CN=7CE1D0702487F55BA888514693A82D8B47435E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:19:ee:2d:c9:c0:69:f0:15:f4:eb:75:4b:
                    cc:a4:a2:2a:9e:3d:6c:e5:4d:13:3e:a8:b6:84:cc:
                    de:0d:5f:c6:01:20:c7:04:da:05:7e:87:09:ac:ae:
                    f7:13:53:fa:20:96:b3:53:57:87:d9:3a:48:30:5d:
                    86:e1:bf:a8:53:f3:d2:4e:c6:8e:5d:97:47:54:68:
                    99:d9:d8:9c:77:ad:bb:0b:fe:1b:6a:3b:67:de:29:
                    29:76:31:89:50:ab:88:b1:64:c5:4f:7d:b8:1c:1f:
                    cc:73:69:38:38:6e:f3:99:7e:bd:7f:62:47:8b:9f:
                    6b:eb:e0:f3:80:92:55:76:36:23:f4:99:b4:68:bb:
                    76:49:3f:2b:1f:cd:df:1a:12:18:17:29:39:09:89:
                    28:e6:a4:c4:68:c0:ad:25:f8:63:29:e3:d4:72:4c:
                    fc:86:35:13:71:d0:ef:24:fd:c4:fd:86:4f:10:6a:
                    1e:a2:df:4e:ff:70:fc:01:a6:89:e3:97:fc:43:00:
                    22:5a:d6:3f:01:a4:6e:11:2d:04:cc:07:6a:0d:05:
                    21:00:9f:9f:8f:44:d0:36:7c:53:a8:ae:e4:ad:7f:
                    67:e2:be:1a:af:4f:b6:b3:34:3f:67:46:16:b9:e3:
                    da:78:93:d6:c0:46:5d:db:99:60:85:fb:33:82:8f:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:D0:70:24:87:F5:5B:A8:88:51:46:93:A8:2D:8B:47:43:5E:6A
            X509v3 Authority Key Identifier:
                keyid:96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3230312e3135302e38382e302f32322d3232203d3e20323633303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:84:a8:36:d1:9b:e3:53:e1:94:ad:96:f6:24:a7:07:f0:a0:
         0d:9f:51:3c:c3:a1:8d:6b:12:f9:b1:a8:c3:9b:21:ba:0e:bc:
         76:02:1f:9c:e9:33:a2:c1:54:04:4c:d5:51:86:3f:46:be:11:
         06:2a:95:63:2c:88:e7:c2:f2:f8:67:66:ee:a3:19:3e:7a:d5:
         6a:d7:3f:b6:73:35:d5:8b:2f:2a:ba:98:c5:7b:3b:50:0e:4f:
         17:7c:33:40:89:9b:ca:c6:00:f4:4c:a2:c2:e9:2d:1c:fa:42:
         e6:60:f5:a5:77:fe:a5:60:dc:83:2a:8c:e0:b9:8f:5e:69:92:
         56:64:f5:a2:3d:2e:7d:24:b6:9e:9f:ec:9a:30:8c:f3:d5:23:
         da:76:90:7b:5d:e9:6f:b9:2d:af:5d:7d:44:01:53:71:b0:65:
         cf:53:97:42:e1:ec:68:27:b1:9b:e8:2b:b4:a7:82:69:d6:09:
         c4:b1:ed:e8:68:4f:30:eb:31:3c:6b:b8:50:4a:64:22:cd:1f:
         f1:bf:1d:22:9e:8f:7e:67:4d:2f:70:75:e9:94:e4:99:a8:54:
         91:8e:80:06:0b:28:d9:ea:81:74:c4:ed:4d:9c:97:f4:4e:97:
         74:da:dc:d6:28:e0:9c:a5:a8:52:15:4f:e4:35:d9:a2:e5:e7:
         93:e9:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:33:58 2025 by rpki-client