Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa
File:                     3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          4kK540X8PeBa+sC0hcRQgIMH1XkWnnqryoL0fmQkZBM=
Subject key identifier:   6B:5F:32:83:62:7D:92:18:A1:D1:26:7A:B3:11:0F:E0:DF:31:FC:12
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       0BE38AA2570DE6485C0D448CE88ECF034CFF06FE
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa
Signing time:             Mon 26 Sep 2022 12:29:16 +0000
ROA not before:           Mon 26 Sep 2022 12:24:16 +0000
ROA not after:            Mon 25 Sep 2023 12:29:16 +0000
asID:                     53059
IP address blocks:        201.148.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e3:8a:a2:57:0d:e6:48:5c:0d:44:8c:e8:8e:cf:03:4c:ff:06:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 26 12:24:16 2022 GMT
            Not After : Sep 25 12:29:16 2023 GMT
        Subject: CN=6B5F3283627D9218A1D1267AB3110FE0DF31FC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:2f:af:50:7d:9a:ca:99:3c:94:15:d8:90:
                    66:55:fa:67:21:ab:d0:ff:b2:54:a0:8e:10:44:ea:
                    2c:0b:3b:35:bd:46:7e:0d:59:42:bf:42:95:76:2c:
                    d7:ab:19:1b:90:bf:46:6d:34:4f:ee:33:52:fe:b4:
                    12:1c:83:23:88:d4:19:a5:92:b1:5e:55:56:1c:c4:
                    68:65:b1:fe:ed:a7:25:7b:0c:d3:6a:1d:0c:31:98:
                    af:75:b7:0d:1b:e1:72:14:bb:dd:d4:89:ad:9f:20:
                    51:82:0d:05:c0:90:33:e1:a6:a3:0e:94:d9:78:c6:
                    cc:9e:cf:b1:c4:1f:ed:eb:92:11:7f:c6:2b:8d:28:
                    32:ee:59:d0:b9:c0:22:54:23:64:78:ff:79:25:66:
                    13:1e:de:a6:86:0d:8c:dc:20:f9:23:b4:fc:69:76:
                    e3:d1:11:4f:a1:6d:3a:63:bf:79:4a:05:a6:19:e4:
                    52:b8:e5:44:ec:c3:f0:6a:88:11:be:cd:77:00:24:
                    ca:51:77:25:b1:a6:d4:01:18:31:2f:37:03:e0:cc:
                    e6:64:cf:3f:f3:bc:ce:b4:75:df:5c:de:67:0f:57:
                    fb:2f:fe:c8:a0:48:09:ee:a6:ab:c4:ba:d9:b8:89:
                    07:61:2d:4a:3c:6f:35:05:16:e4:92:a2:ba:86:d9:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5F:32:83:62:7D:92:18:A1:D1:26:7A:B3:11:0F:E0:DF:31:FC:12
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:94:a1:f9:12:31:a8:65:ce:64:a4:55:c9:a0:3a:a6:ae:64:
         3b:4d:65:68:72:ed:66:ed:d8:97:2a:6a:12:77:b1:a7:92:db:
         69:03:49:bd:26:5b:83:e7:cf:f4:3c:ec:56:19:93:4f:8c:48:
         40:08:40:dd:29:7c:7c:62:d6:db:50:f7:c8:cd:86:25:96:6e:
         0f:41:83:d6:fc:a2:02:af:74:8e:90:ff:ba:a6:01:30:51:2b:
         f5:9c:22:8f:4b:71:83:5d:73:d4:b9:66:e2:53:34:b2:a8:7f:
         71:a5:bb:d1:03:96:8f:6c:8d:7f:7b:1d:61:66:a8:98:cc:40:
         f9:ff:32:18:b9:93:ce:16:5b:f8:57:8b:14:62:ac:8d:b4:53:
         93:4a:03:da:31:27:c0:70:a9:20:2c:dd:4d:8d:24:7e:d9:06:
         0d:30:4c:c0:2e:f1:3a:69:3a:79:74:52:cd:b3:a5:8b:25:fc:
         00:be:a9:e3:7b:ff:91:d7:1d:18:4a:05:f8:1a:07:ef:8f:f7:
         7e:eb:99:4b:de:21:b2:f8:a0:14:9d:e0:75:a1:e2:d5:07:e0:
         35:d3:e2:e5:7b:37:23:a6:9b:8d:99:5d:45:a1:a1:cf:30:d4:
         97:10:e4:68:1e:bb:34:51:9f:8f:d6:80:74:78:98:dc:57:6c:
         45:fe:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:59:34 2025 by rpki-client