Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3230312e3134382e3138382e302f32332d3233203d3e20323632373830.roa
File:                     3230312e3134382e3138382e302f32332d3233203d3e20323632373830.roa (raw, json)
Hash identifier:          C9VGgh50f5/6ti1q2NeNkxCvpk1JDiv4PKFOpD6JBzQ=
Subject key identifier:   55:BC:72:38:8F:47:BA:79:0A:64:93:EB:2B:1D:B3:59:1F:F0:B1:1B
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       021DC6FA4D4FD6CF37060AA13688BB3DE6B37F5D
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3230312e3134382e3138382e302f32332d3233203d3e20323632373830.roa
Signing time:             Wed 21 Sep 2022 12:20:19 +0000
ROA not before:           Wed 21 Sep 2022 12:15:19 +0000
ROA not after:            Wed 20 Sep 2023 12:20:19 +0000
asID:                     262780
IP address blocks:        201.148.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1d:c6:fa:4d:4f:d6:cf:37:06:0a:a1:36:88:bb:3d:e6:b3:7f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 21 12:15:19 2022 GMT
            Not After : Sep 20 12:20:19 2023 GMT
        Subject: CN=55BC72388F47BA790A6493EB2B1DB3591FF0B11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:fb:ec:6d:ed:6d:93:37:3f:fa:e6:b4:63:
                    4c:4b:d4:16:53:35:c0:7c:c4:c4:e9:2f:23:b2:3a:
                    1d:59:ea:5b:77:fe:d3:7a:e5:2a:78:83:c8:c4:33:
                    c4:66:aa:e9:7e:cc:29:04:81:b9:d8:fc:07:75:06:
                    7f:7f:59:d1:cc:13:2e:b5:e7:d4:12:3b:64:36:78:
                    03:4e:2a:62:e3:9e:cd:1a:94:41:09:86:71:57:d2:
                    05:6e:fc:09:80:e7:da:f9:92:da:10:77:0e:53:32:
                    22:40:7d:9b:e9:67:5d:72:5d:4b:10:a9:98:3f:f3:
                    a4:8e:22:58:00:17:de:48:e6:01:e6:1f:ff:2a:41:
                    d5:a9:ef:82:77:69:5c:94:47:dd:b2:b3:0f:cc:a2:
                    79:fa:29:02:28:34:d0:bd:f9:e2:b5:29:f8:c1:2e:
                    e5:50:e5:99:67:26:bd:c8:3a:80:b2:25:43:d7:d5:
                    0d:3d:85:7e:cc:4c:d3:80:23:5c:64:9a:7e:48:49:
                    40:9c:a5:55:75:fd:20:2c:55:c2:ae:bc:e6:56:4c:
                    4b:a4:63:b8:81:24:31:a9:8d:74:f6:63:8c:5d:f5:
                    18:6f:52:8a:f9:74:4c:9a:21:d2:da:e1:98:b2:83:
                    69:78:bd:05:ac:64:38:b9:8e:24:b5:fa:a1:de:9e:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BC:72:38:8F:47:BA:79:0A:64:93:EB:2B:1D:B3:59:1F:F0:B1:1B
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3230312e3134382e3138382e302f32332d3233203d3e20323632373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:f7:78:d8:52:94:8c:74:2d:4a:be:e4:77:a0:e5:0b:8d:
         af:7a:5d:02:07:c3:28:1e:93:90:90:1f:32:3c:42:38:f8:f3:
         70:14:5a:88:06:31:85:80:bb:b4:50:81:3e:09:21:66:39:68:
         2d:6d:e6:2b:e0:ef:7d:4f:1a:18:c3:a3:7e:af:33:3a:e2:ec:
         b1:98:05:64:02:ca:6a:b7:f6:71:c7:f5:55:09:9a:0a:c7:9e:
         98:32:c4:71:24:c6:9c:ca:cf:a3:e9:6e:85:65:05:cd:95:94:
         b9:30:a8:bd:18:ef:48:ce:17:6a:06:b1:a6:72:20:4e:eb:16:
         54:27:7b:3c:b4:e5:cd:be:ed:1c:09:2e:c5:45:38:fb:59:ae:
         82:7d:25:e6:f1:ff:cc:70:f5:b9:9e:ba:71:66:0b:a8:30:6e:
         93:fe:dd:2f:d4:ed:c0:be:2d:ad:64:89:48:1a:95:8a:49:43:
         a8:de:d0:a5:13:0f:6f:c2:59:ff:00:e4:a8:51:92:89:5e:7f:
         91:e3:0b:79:81:81:2d:c5:7d:e6:32:8d:ea:b6:83:d2:d6:6d:
         51:81:b8:6a:b5:8c:1d:6b:be:4d:10:63:fc:e0:ea:b2:2c:d0:
         09:13:7f:6a:03:55:92:5d:5d:82:9a:a4:33:7a:4c:91:4e:0d:
         d5:42:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:41 2025 by rpki-client