Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/3136372e3235302e36382e302f32322d3233203d3e20323635323035.roa
File:                     3136372e3235302e36382e302f32322d3233203d3e20323635323035.roa (raw, json)
Hash identifier:          RLhzmyvt8jxSVj1tWXY709AcbrgQ+03p1+rjl0AHci4=
Subject key identifier:   FF:68:3A:E1:FD:48:4F:5D:BA:C0:71:4A:4F:DF:77:CF:1E:FA:B0:27
Certificate issuer:       /CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
Certificate serial:       31F596916320F6F40373CA4AD8E29184F2A1EECE
Authority key identifier: E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/3136372e3235302e36382e302f32322d3233203d3e20323635323035.roa
Signing time:             Wed 11 Jan 2023 18:13:51 +0000
ROA not before:           Wed 11 Jan 2023 18:08:51 +0000
ROA not after:            Wed 10 Jan 2024 18:13:51 +0000
asID:                     265205
IP address blocks:        167.250.68.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f5:96:91:63:20:f6:f4:03:73:ca:4a:d8:e2:91:84:f2:a1:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
        Validity
            Not Before: Jan 11 18:08:51 2023 GMT
            Not After : Jan 10 18:13:51 2024 GMT
        Subject: CN=FF683AE1FD484F5DBAC0714A4FDF77CF1EFAB027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:a2:39:8a:8e:94:39:4b:57:ab:35:b2:c0:
                    29:d9:a5:53:cb:32:da:73:2e:02:b0:f7:a0:dd:6c:
                    ea:00:56:ff:3c:af:b2:89:7e:52:86:f1:da:39:a4:
                    85:b1:02:43:35:b7:a2:63:b7:8e:5d:26:e0:cd:13:
                    01:4e:c1:2b:2d:a5:aa:df:68:e2:00:22:be:59:b5:
                    c3:10:05:dd:11:23:d0:a6:2e:75:b9:3c:77:91:2a:
                    4f:eb:49:df:66:6b:93:ce:79:2f:ff:ca:b8:55:6f:
                    cd:db:43:3d:ad:8a:8c:d7:1b:3b:2c:74:a8:0d:d7:
                    f1:34:ac:15:85:59:6f:bf:74:71:fb:77:c9:0f:31:
                    a5:2a:17:f0:80:42:4d:48:a6:3f:0f:83:3a:e1:b8:
                    c6:86:15:fd:7a:04:94:39:71:3e:f0:c4:16:82:40:
                    5d:74:3f:a0:76:a8:dd:a8:c9:e8:47:ad:4b:e7:d7:
                    59:cb:a0:f1:03:0f:cf:0d:c6:a2:a1:e9:00:8a:bb:
                    81:77:b1:37:11:41:8c:3f:72:25:19:04:13:19:f1:
                    3b:86:9a:6f:df:c5:9d:4c:f3:b5:96:9e:e9:7d:a0:
                    a1:d1:ca:4f:aa:5c:6a:f2:a0:9c:bc:6a:22:8b:04:
                    08:e7:f2:e0:71:49:ea:86:0b:35:72:26:7d:61:c0:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:68:3A:E1:FD:48:4F:5D:BA:C0:71:4A:4F:DF:77:CF:1E:FA:B0:27
            X509v3 Authority Key Identifier:
                keyid:E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/3136372e3235302e36382e302f32322d3233203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:96:14:82:f0:74:99:17:73:79:39:82:57:4c:9e:fc:ac:04:
         32:0f:41:03:d8:5e:32:2c:02:f2:70:53:0d:2f:75:8d:4d:ba:
         65:a2:b5:fe:78:ee:4d:00:7b:3e:b6:dc:67:59:65:2d:cb:24:
         5d:35:f9:a5:20:66:3b:19:14:5a:a6:f6:f1:26:67:72:5a:c2:
         f2:ba:e6:3a:38:5b:b6:86:64:9b:21:4a:17:32:ea:36:71:ff:
         30:54:87:43:cc:dc:04:40:67:c5:af:db:36:7e:cb:37:69:b7:
         fe:bf:00:6e:19:f1:80:65:60:b5:b5:ce:d8:8d:1f:28:5b:de:
         ce:61:00:f0:71:1f:86:84:1c:8d:8c:c7:ce:7d:50:48:9b:96:
         06:a6:60:3f:b1:5c:7f:c4:f9:15:ae:7e:d4:03:bf:b2:da:18:
         a9:4b:18:33:1d:69:74:f1:3b:b4:24:be:71:8a:7f:df:92:24:
         ab:7d:b9:d2:68:f6:bb:c8:b3:47:14:81:c2:a1:86:28:f2:0b:
         b7:62:06:61:52:e3:b3:e5:d0:01:e9:b8:f2:24:46:08:84:ce:
         e5:80:36:34:bf:99:29:e3:07:93:10:9b:c4:f3:8a:1c:11:d2:
         76:af:e6:77:de:ac:bc:04:45:c3:8c:7b:b9:b5:18:8f:c3:40:
         f8:71:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:10 2025 by rpki-client