Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138372e38362e39362e302f32302d3230203d3e20323632363832.roa
File:                     3138372e38362e39362e302f32302d3230203d3e20323632363832.roa (raw, json)
Hash identifier:          Iyr+VYnF1ykJjEe8B/uJ6P9C2WgWde62jj9qiSVfsmY=
Subject key identifier:   03:F2:9E:DF:0E:59:42:31:F9:AE:9A:65:15:0C:5B:53:86:29:7C:C3
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       50B351B23056E15D2E9AE7AD1F93C25C0A3B5F66
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138372e38362e39362e302f32302d3230203d3e20323632363832.roa
Signing time:             Thu 22 Sep 2022 19:44:57 +0000
ROA not before:           Thu 22 Sep 2022 19:39:57 +0000
ROA not after:            Thu 21 Sep 2023 19:44:57 +0000
asID:                     262682
IP address blocks:        187.86.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b3:51:b2:30:56:e1:5d:2e:9a:e7:ad:1f:93:c2:5c:0a:3b:5f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 22 19:39:57 2022 GMT
            Not After : Sep 21 19:44:57 2023 GMT
        Subject: CN=03F29EDF0E594231F9AE9A65150C5B5386297CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:05:01:ec:aa:59:b8:37:6c:d7:06:63:f6:
                    33:a7:f2:38:b8:fd:65:49:56:0f:75:ce:c0:7a:32:
                    35:16:73:83:04:85:4a:ce:96:95:1f:7a:0f:c3:8d:
                    7d:af:ea:6f:f5:96:a1:0d:8f:35:6e:de:fa:50:41:
                    0c:a3:63:1d:e6:af:02:c3:5d:66:cc:5d:59:37:c1:
                    c1:88:f5:47:57:90:d8:f8:7c:66:21:04:56:6b:0f:
                    10:cd:27:ea:fe:0c:01:32:53:87:2f:70:a2:61:4a:
                    d2:f9:d3:96:62:83:12:b8:6d:74:51:18:10:19:b9:
                    4c:36:c0:18:31:b5:b0:ec:2f:71:80:4f:c0:bd:63:
                    74:cf:05:27:2b:9a:5a:6b:4f:59:0e:da:68:45:62:
                    e2:16:6b:f3:a8:f3:de:4c:77:7e:9f:5f:99:39:46:
                    3d:37:db:5c:3f:27:29:9c:e1:12:6f:a8:5c:e0:c7:
                    e5:1a:db:b3:c2:47:ed:6c:aa:df:a3:8b:cf:cc:67:
                    2d:87:09:d5:7e:f6:53:64:37:35:b7:4b:ff:47:14:
                    c5:bc:88:92:bb:b0:7c:de:bf:13:20:26:c0:7c:71:
                    34:41:7e:61:1a:ad:0d:bf:e4:e0:51:6a:70:bc:fd:
                    15:3d:47:4f:2f:35:b4:2b:8a:57:cc:f7:4e:d4:71:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:9E:DF:0E:59:42:31:F9:AE:9A:65:15:0C:5B:53:86:29:7C:C3
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138372e38362e39362e302f32302d3230203d3e20323632363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:11:25:a1:cb:06:72:94:fb:7d:15:ac:92:c2:95:b4:7f:
         26:6e:45:4f:ed:d4:71:bb:c4:e3:90:9c:e8:95:67:e4:aa:b5:
         a1:4b:a5:b6:c4:5b:6c:7c:a8:bd:85:aa:d6:7c:b9:22:37:a2:
         f6:9f:e9:a2:e7:1f:2b:cc:93:83:a3:60:5f:2f:36:0a:bb:f2:
         80:fa:43:ae:a6:3e:17:b7:93:f0:f2:22:97:04:6c:c8:28:3f:
         ed:99:e7:cf:16:22:98:a4:78:9a:4e:45:0a:a3:b9:48:35:45:
         49:97:4f:45:5f:36:84:06:44:f2:40:b3:99:73:bc:2d:7b:7c:
         ca:98:c4:34:af:9b:76:01:8a:d5:f7:ae:92:9c:cf:98:1d:16:
         d5:ed:3e:43:c5:bf:0e:00:ba:f1:06:bc:be:25:1a:55:d6:ce:
         e8:8d:8a:26:23:fe:ad:ee:ac:6e:89:66:7a:b4:4c:6e:f2:54:
         95:ca:2d:ef:fc:f1:03:44:08:3c:f1:96:34:b2:fc:e7:d2:62:
         24:8c:c8:5d:16:2c:e9:f2:e2:0c:8f:d4:6a:da:f0:43:77:ca:
         83:7b:d1:dc:0e:83:a5:28:e7:3c:81:55:b9:50:dd:3f:a7:8d:
         c5:c0:1f:f3:de:47:e4:fd:7b:b1:34:db:58:53:7b:62:92:8a:
         ce:82:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:15 2025 by rpki-client