Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32312d3234203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32312d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          JLXQSaAPQfKafweXTvEvj0qUwa0VtZEVwfoCvsivybo=
Subject key identifier:   DF:35:C0:8A:46:B5:67:93:16:BC:C2:98:A3:0C:10:4E:07:83:24:5F
Certificate issuer:       /CN=FAD67BBEB430705889FDEAC161CDFF6BB3562972
Certificate serial:       6E186AAED7CD6A80D826D292E52FDB991C45B7D7
Authority key identifier: FA:D6:7B:BE:B4:30:70:58:89:FD:EA:C1:61:CD:FF:6B:B3:56:29:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAD67BBEB430705889FDEAC161CDFF6BB3562972.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32312d3234203d3e20323633313031.roa
Signing time:             Wed 06 Jul 2022 03:00:00 +0000
ROA not before:           Wed 06 Jul 2022 02:55:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     263101
IP address blocks:        186.225.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:18:6a:ae:d7:cd:6a:80:d8:26:d2:92:e5:2f:db:99:1c:45:b7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD67BBEB430705889FDEAC161CDFF6BB3562972
        Validity
            Not Before: Jul  6 02:55:00 2022 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:05:98:e4:69:b4:98:69:d3:40:14:d2:53:
                    08:aa:e5:df:a4:fd:fe:f1:b2:11:0b:9e:ef:00:78:
                    fb:f6:4b:63:f3:45:7e:68:93:d2:46:41:e8:40:31:
                    d8:a9:00:b2:86:2c:ff:ab:dc:47:77:62:9c:92:4c:
                    d7:31:fa:53:60:d2:bb:20:7b:a5:fe:80:0b:02:d6:
                    6f:4f:db:e8:9f:66:ad:74:02:c6:1c:8f:e2:31:ab:
                    39:8f:e6:83:37:6f:6f:21:74:a8:47:5b:df:f8:50:
                    6e:b7:9b:6c:6d:40:2c:d6:b5:55:d1:d3:7d:80:27:
                    20:26:49:bc:6f:7b:91:bf:35:47:87:96:0b:c1:cc:
                    b5:83:e3:84:03:c7:17:e1:29:f3:9d:58:35:a5:a4:
                    99:f7:3d:0f:14:6b:59:44:94:43:b9:43:02:dd:94:
                    74:52:03:72:4e:fc:b0:98:08:06:c3:7e:a3:5a:d1:
                    fb:59:7d:a7:8d:d4:6d:5f:d7:83:72:73:41:69:f7:
                    be:fe:f1:a6:e5:a8:2f:b3:c8:3b:39:72:4c:b0:01:
                    f9:81:fb:24:6e:82:27:84:e5:f8:ed:f4:65:33:85:
                    41:cc:75:26:a1:bb:7b:7f:97:8c:cd:2d:05:b0:17:
                    0d:63:e5:d0:95:98:f7:31:55:6d:34:13:c8:03:5c:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:C0:8A:46:B5:67:93:16:BC:C2:98:A3:0C:10:4E:07:83:24:5F
            X509v3 Authority Key Identifier:
                keyid:FA:D6:7B:BE:B4:30:70:58:89:FD:EA:C1:61:CD:FF:6B:B3:56:29:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/FAD67BBEB430705889FDEAC161CDFF6BB3562972.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAD67BBEB430705889FDEAC161CDFF6BB3562972.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32312d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:05:38:70:eb:e1:4a:bb:ec:56:6d:68:f6:68:40:53:11:31:
         11:32:06:c6:25:c2:c4:de:59:b9:b2:65:67:b0:ad:ea:6d:25:
         d5:05:bc:53:79:96:31:41:cc:fd:fc:0b:09:41:47:ed:53:5a:
         10:07:c4:56:04:2d:f6:2d:4f:6c:ab:5d:dd:32:ec:ce:f1:52:
         ec:cf:53:cb:ef:f8:9f:55:50:14:6d:dd:fe:9b:f2:df:d2:40:
         3c:c2:c7:3b:51:7d:45:00:a4:0b:5b:fd:f6:42:c7:43:6f:ff:
         07:82:5d:21:6c:7d:49:ab:97:40:8b:ae:84:5f:25:b3:85:79:
         e5:97:5e:97:98:cd:f7:e4:06:32:16:b3:33:ae:06:c3:be:65:
         b8:10:75:52:34:6c:ec:d5:6c:b8:d3:10:ee:35:e5:c8:0f:f7:
         dc:2e:8e:70:37:83:6a:76:3c:16:c4:5b:c8:0f:19:a4:13:00:
         e7:88:3f:57:53:54:ad:e7:0b:a0:dd:75:a7:66:98:fc:68:28:
         2d:fa:2f:95:75:73:d7:38:70:72:c3:7a:4a:1b:8d:98:73:37:
         57:0c:24:14:2d:9d:27:cc:d6:32:5a:84:3d:be:7e:81:71:8e:
         15:dd:9a:b2:1c:f7:1d:1c:17:2d:03:ba:bf:35:af:47:52:c2:
         b5:8d:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:30 2025 by rpki-client