Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3234203d3e20323730393732.roa
File:                     3139312e33372e38302e302f32322d3234203d3e20323730393732.roa (raw, json)
Hash identifier:          zyvzuX9tVyYvS8QFAvWdaXtDn0NYUJpvQwV5r0/V2tY=
Subject key identifier:   C2:FB:B9:A6:6D:23:24:51:25:E3:8D:11:A8:D4:25:4E:C4:D9:19:55
Certificate issuer:       /CN=D9674629E111CB01526468B6021BAADE74F2F68E
Certificate serial:       389824FA8009193A0252B913D082D9EBB3C7DB7D
Authority key identifier: D9:67:46:29:E1:11:CB:01:52:64:68:B6:02:1B:AA:DE:74:F2:F6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9674629E111CB01526468B6021BAADE74F2F68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3234203d3e20323730393732.roa
Signing time:             Fri 17 Jun 2022 13:19:29 +0000
ROA not before:           Fri 17 Jun 2022 13:14:29 +0000
ROA not after:            Fri 16 Jun 2023 13:19:29 +0000
asID:                     270972
IP address blocks:        191.37.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:98:24:fa:80:09:19:3a:02:52:b9:13:d0:82:d9:eb:b3:c7:db:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9674629E111CB01526468B6021BAADE74F2F68E
        Validity
            Not Before: Jun 17 13:14:29 2022 GMT
            Not After : Jun 16 13:19:29 2023 GMT
        Subject: CN=C2FBB9A66D23245125E38D11A8D4254EC4D91955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:2e:41:4d:be:0d:07:2f:1f:55:3d:ad:1c:
                    34:c9:05:73:b9:e3:e5:42:0f:d0:3e:66:0a:ba:33:
                    7e:1f:ed:90:1c:62:31:32:ca:9b:b3:b3:d9:3a:2d:
                    2e:6d:ff:7d:50:8e:3b:4c:39:9d:ca:82:0e:1d:72:
                    a2:b6:b2:e7:cb:b6:bd:df:c1:e2:ff:7a:54:92:53:
                    94:90:25:4d:e2:1c:3a:43:d2:96:dd:51:18:05:fa:
                    08:f6:76:a8:47:21:61:c9:50:b0:ff:d1:fc:ca:99:
                    d4:c5:0c:ad:9d:8c:a0:5f:96:dd:e2:5e:26:9b:eb:
                    93:bf:8b:7b:07:71:65:ff:16:d5:59:94:b6:94:b0:
                    04:d1:c5:b7:be:8f:1c:54:25:64:13:ce:78:0d:aa:
                    54:d2:f2:e5:3e:fc:ca:1a:29:36:e8:c2:ec:ba:b7:
                    02:e4:dd:e0:dd:4a:21:bc:3f:27:ec:58:6f:df:ae:
                    7e:20:61:ee:19:84:67:2a:37:16:14:b3:a7:10:50:
                    d2:f5:f2:bd:ed:1b:62:a2:cb:7d:4a:61:fd:d1:62:
                    4e:6a:55:36:2c:32:85:d6:88:ee:cc:d0:cc:01:a5:
                    f9:3a:cc:10:95:e2:35:7a:6f:cc:d8:89:1e:bc:bc:
                    94:0f:18:1d:47:38:ca:e4:45:62:01:44:d1:6b:01:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:B9:A6:6D:23:24:51:25:E3:8D:11:A8:D4:25:4E:C4:D9:19:55
            X509v3 Authority Key Identifier:
                keyid:D9:67:46:29:E1:11:CB:01:52:64:68:B6:02:1B:AA:DE:74:F2:F6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/D9674629E111CB01526468B6021BAADE74F2F68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9674629E111CB01526468B6021BAADE74F2F68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3234203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:29:88:05:f1:ff:7b:64:6c:ab:80:9a:9d:2b:6b:11:46:
         b5:cc:dc:6a:cb:51:9b:44:4d:fd:f0:ef:c2:f8:aa:84:c2:ae:
         44:e3:55:05:f6:d4:79:c4:d0:d8:dd:8f:32:d5:37:fd:f0:97:
         fb:e1:30:10:e7:ca:85:84:a1:43:02:2a:13:f7:2a:af:d9:07:
         29:40:be:32:eb:f0:70:8f:fd:b2:ab:a4:51:1b:65:58:ec:50:
         72:a3:02:a8:f5:ab:e9:af:2d:a9:e4:da:fe:bd:28:96:b3:a9:
         a7:9a:14:63:41:a4:c7:ca:5f:e1:31:5d:00:e1:3b:e8:db:de:
         42:cf:05:c1:5e:e9:cf:b7:34:89:c0:b8:43:b8:18:b2:63:a6:
         be:52:51:c3:49:47:55:34:1b:15:54:b3:c7:0b:cf:0e:a6:21:
         f5:fe:cc:19:0c:24:41:32:0a:aa:8a:fb:e0:33:52:c3:a8:1c:
         23:ad:3c:9e:a9:ed:67:40:0c:99:fd:93:fb:68:4c:c9:89:e9:
         9a:99:85:54:85:a8:95:e6:2f:0f:67:ec:04:9e:d7:f8:58:cb:
         35:42:7b:4a:63:09:18:80:38:88:47:83:36:ed:fe:f1:7b:b8:
         7c:a8:ca:e9:55:a3:8f:c4:4c:fd:a4:9c:12:3e:92:67:c6:c0:
         37:a0:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:26 2025 by rpki-client