Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3231322e302f32322d3232203d3e20323632383139.roa
File:                     3138362e3235302e3231322e302f32322d3232203d3e20323632383139.roa (raw, json)
Hash identifier:          kjthEP7s2WzdsUQRVkwtfbtI9wiAGMolEyHzfpKGpAE=
Subject key identifier:   27:C5:54:EB:5E:69:D6:E5:98:02:21:1F:29:B4:7C:B5:96:DE:59:DD
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       2711954C08397E6FEC845076AB466F840BDAD7E6
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3231322e302f32322d3232203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:02 +0000
ROA not before:           Wed 09 Nov 2022 20:06:02 +0000
ROA not after:            Wed 08 Nov 2023 20:11:02 +0000
asID:                     262819
IP address blocks:        186.250.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:11:95:4c:08:39:7e:6f:ec:84:50:76:ab:46:6f:84:0b:da:d7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:02 2022 GMT
            Not After : Nov  8 20:11:02 2023 GMT
        Subject: CN=27C554EB5E69D6E59802211F29B47CB596DE59DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:09:bf:67:80:15:32:3d:83:a4:bd:8e:46:
                    3f:85:4f:4b:1a:94:1a:85:69:da:a1:2b:3d:ad:ee:
                    24:bf:8e:cf:6e:ed:c8:50:ca:eb:26:bc:02:40:75:
                    b5:be:1f:98:42:5e:47:d3:b3:bd:43:fa:a9:aa:66:
                    14:3e:28:ee:fa:fd:eb:09:03:88:7c:34:20:8e:b0:
                    87:02:a2:49:86:ed:1a:88:f9:fe:f7:ac:d3:d7:38:
                    44:96:3f:b7:32:8c:93:a0:10:28:2d:2d:75:3f:ef:
                    89:9e:ba:7f:94:16:37:77:ad:94:24:14:ff:13:2b:
                    e3:78:66:bc:9b:97:ab:31:5b:18:2f:91:66:ad:56:
                    d8:b0:a9:63:90:01:d2:5e:5c:1c:63:39:37:75:11:
                    37:09:27:aa:1c:03:d0:84:32:2e:56:86:5b:ad:4f:
                    ae:4e:6a:e9:7d:49:ca:45:43:aa:17:db:2c:8a:84:
                    88:3c:ab:96:12:c9:0f:8d:f1:3e:0b:78:1c:51:29:
                    85:ad:82:fe:08:72:aa:c8:3e:a8:a3:6e:0d:ef:e7:
                    1c:09:09:9b:cc:bc:99:9d:fd:df:00:c8:d6:06:03:
                    55:70:a4:ab:a4:85:ec:1e:fc:c7:36:f4:c4:06:57:
                    e5:46:f5:f3:ee:07:34:33:fc:6d:3f:75:31:d3:82:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C5:54:EB:5E:69:D6:E5:98:02:21:1F:29:B4:7C:B5:96:DE:59:DD
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3231322e302f32322d3232203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:90:31:77:65:96:d6:36:00:d4:ea:e9:92:2d:0d:8a:8c:14:
         29:6d:ce:a4:06:7c:33:1a:24:3f:62:8a:16:37:3e:85:1d:59:
         73:12:9a:93:54:59:d1:b0:e3:f7:45:e6:c2:d0:2f:c4:27:23:
         58:79:a5:4d:34:e1:6b:7b:e5:d9:48:de:09:6d:c9:e2:e0:53:
         08:3a:f1:f7:de:79:5b:22:03:1c:50:7a:c7:13:06:75:84:cc:
         3a:8f:ca:d6:fa:82:9e:fa:40:d8:c7:7a:32:50:64:5d:6d:e3:
         6c:f5:f2:2c:9b:d5:ba:7e:5d:b5:cf:23:04:7f:d0:65:f1:59:
         02:7d:a6:24:bc:ce:27:19:37:ec:d1:07:9c:d4:78:57:22:ff:
         68:b1:c4:39:7b:2d:9b:97:ce:86:00:9b:0b:38:07:47:b5:60:
         03:b2:5b:85:91:08:02:09:dc:54:af:8a:ad:7b:3e:68:fd:af:
         d4:10:c5:ed:66:c8:8f:a6:87:e5:22:03:d3:6f:f6:a2:6e:83:
         75:57:73:a3:81:ab:1a:bf:30:f4:1e:c9:a5:ee:64:7b:1a:11:
         40:88:54:33:da:1b:32:d0:e7:5f:ec:c5:36:89:54:c1:e2:8f:
         92:9b:92:ca:ac:4a:a7:5e:f1:e0:a2:4d:fa:87:67:51:93:1a:
         b3:7a:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:28 2025 by rpki-client