Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/3230372e3234382e31362e302f32322d3234203d3e20323731343132.roa
File:                     3230372e3234382e31362e302f32322d3234203d3e20323731343132.roa (raw, json)
Hash identifier:          o2xedTRv3cMxIDjRHfYfU5X0r8zyLJfBXIYcRWXHU38=
Subject key identifier:   D8:4F:66:AB:C7:0A:38:7F:CF:19:DB:8F:A8:62:02:A6:8F:8D:A9:6D
Certificate issuer:       /CN=471A7ADD455C68D25753DE159530C83B00C46E39
Certificate serial:       2F49956606A6FA8157C9710F1494EA7C4E0E5E41
Authority key identifier: 47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/3230372e3234382e31362e302f32322d3234203d3e20323731343132.roa
Signing time:             Sat 23 Jul 2022 12:00:00 +0000
ROA not before:           Sat 23 Jul 2022 11:55:00 +0000
ROA not after:            Sun 23 Jul 2023 12:00:00 +0000
asID:                     271412
IP address blocks:        207.248.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:49:95:66:06:a6:fa:81:57:c9:71:0f:14:94:ea:7c:4e:0e:5e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471A7ADD455C68D25753DE159530C83B00C46E39
        Validity
            Not Before: Jul 23 11:55:00 2022 GMT
            Not After : Jul 23 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:b7:f8:81:56:a6:51:a3:eb:bf:b7:ae:64:
                    94:a6:07:f7:59:00:9c:c5:f0:d7:ad:e0:e1:e8:83:
                    2f:9f:53:7b:f8:12:20:84:09:09:b1:8f:84:e5:b5:
                    93:72:fe:d3:82:1b:dc:a2:a5:ec:61:85:1c:3f:b3:
                    30:5f:09:d5:30:53:0f:12:22:f4:7d:cc:75:6f:cf:
                    fe:b2:e0:c0:a7:c4:9c:ac:ca:43:8a:dc:7c:ea:7e:
                    8c:a4:46:c2:d7:ff:e8:9a:ef:88:57:93:30:bd:d8:
                    bd:17:76:54:9b:04:08:f0:d3:dc:71:32:6b:bd:53:
                    3e:19:fd:2e:94:f1:6f:a1:41:5f:d7:93:fd:fb:e0:
                    18:14:5c:5c:e3:7f:46:fc:ee:a2:ff:8e:84:f2:e9:
                    64:8e:9f:c3:b0:90:4e:a7:de:31:83:26:11:6d:e9:
                    cb:1d:7c:4f:5e:49:aa:b4:c2:50:4b:f2:03:ff:39:
                    6e:b8:b6:52:c9:dc:a4:93:da:68:3a:6f:bc:88:25:
                    39:1b:3b:92:66:aa:0f:9b:77:87:df:74:f5:fd:2c:
                    7f:26:79:fb:34:40:27:f4:a8:cd:55:92:d2:d5:d2:
                    a3:5c:3f:b8:35:eb:4c:1b:58:00:29:c8:32:83:a8:
                    97:00:c2:f5:d4:62:65:2b:67:ea:eb:01:c8:b4:09:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:66:AB:C7:0A:38:7F:CF:19:DB:8F:A8:62:02:A6:8F:8D:A9:6D
            X509v3 Authority Key Identifier:
                keyid:47:1A:7A:DD:45:5C:68:D2:57:53:DE:15:95:30:C8:3B:00:C4:6E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/471A7ADD455C68D25753DE159530C83B00C46E39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/471A7ADD455C68D25753DE159530C83B00C46E39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/3230372e3234382e31362e302f32322d3234203d3e20323731343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:31:8f:0c:bf:97:6e:83:3a:9d:9f:89:78:0f:e5:12:5a:
         46:d2:2c:0d:35:cc:6c:51:a2:4c:8f:25:f3:db:a5:88:0d:f8:
         f2:9b:e7:99:99:a1:54:70:b5:a6:05:54:02:16:b5:28:13:17:
         3f:de:d2:8f:b6:bc:ae:d8:c9:35:44:ab:ac:86:63:61:4f:e5:
         40:cb:15:ad:04:43:53:46:b4:24:77:b2:d1:94:1b:eb:de:47:
         1d:3f:1a:9d:bb:4e:9c:31:92:7f:c6:1c:0b:14:be:79:fe:75:
         0f:42:71:c3:96:6a:33:8c:da:34:e2:0d:34:91:34:2c:0a:0b:
         43:3b:9d:00:57:78:0c:7c:ac:99:da:71:11:61:d2:f1:e2:28:
         a5:cc:8e:74:91:f6:70:55:1f:d2:dd:b4:5b:f2:63:74:80:fe:
         cd:79:5a:31:e1:e8:90:b7:83:0a:4e:b5:17:aa:8c:57:64:ce:
         df:81:52:a3:93:17:d8:82:b5:fc:1f:01:60:56:ff:cf:e1:d4:
         a4:a2:45:c0:58:c3:47:bb:0e:5a:a4:3d:9d:9d:7c:ca:34:90:
         47:a4:b2:55:da:d1:6e:13:f4:ae:c1:c8:cc:b0:e9:b6:b8:98:
         27:7c:9c:a9:5a:7e:0c:8f:12:c2:f3:1c:88:14:1b:7d:7c:81:
         18:ae:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:36:11 2025 by rpki-client