Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3136312e33382e34312e302f32342d3234203d3e203137323232.roa
File:                     3136312e33382e34312e302f32342d3234203d3e203137323232.roa (raw, json)
Hash identifier:          nKygnk/h2YGdjlRl7sknb2+rrkM12aZsqUtzBr6x1CY=
Subject key identifier:   24:72:23:4A:4D:69:2F:DE:F7:61:6C:D6:93:52:0A:79:A3:B7:89:06
Certificate issuer:       /CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
Certificate serial:       7ABBEA813BA28C8A70A313ED91D32A9F0FA42151
Authority key identifier: F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3136312e33382e34312e302f32342d3234203d3e203137323232.roa
Signing time:             Mon 10 Oct 2022 20:25:09 +0000
ROA not before:           Mon 10 Oct 2022 20:20:09 +0000
ROA not after:            Mon 09 Oct 2023 20:25:09 +0000
asID:                     17222
IP address blocks:        161.38.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bb:ea:81:3b:a2:8c:8a:70:a3:13:ed:91:d3:2a:9f:0f:a4:21:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
        Validity
            Not Before: Oct 10 20:20:09 2022 GMT
            Not After : Oct  9 20:25:09 2023 GMT
        Subject: CN=2472234A4D692FDEF7616CD693520A79A3B78906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:96:20:61:9a:04:2c:f3:1b:09:a4:6b:84:
                    67:8c:41:7d:62:b6:a7:f2:f7:13:5f:60:99:71:f9:
                    03:34:6f:6e:91:a6:7e:94:dd:4f:91:dc:a9:12:f0:
                    28:ca:eb:02:92:45:57:e8:0b:69:7d:1c:28:6e:ba:
                    ce:d7:aa:c0:c7:88:5b:c0:40:ef:ff:4f:9d:c5:92:
                    49:43:81:69:41:64:cb:97:2c:b9:6f:0c:50:e7:b7:
                    e2:13:89:87:f5:c2:37:92:78:5c:ff:c8:7a:d4:bf:
                    6e:19:fe:0b:21:3f:04:f7:67:75:a8:3d:a2:a0:4e:
                    11:de:1d:02:b4:c7:a6:1a:d7:c5:a3:c3:07:de:d8:
                    91:69:4c:6a:13:d1:2c:56:5a:ca:de:26:a8:67:02:
                    6e:b7:57:89:58:05:90:09:5f:85:f7:a3:66:fb:5a:
                    7e:62:1e:fa:56:3c:39:82:83:b7:42:bd:e8:01:33:
                    d5:47:e8:41:21:9c:05:47:0f:d9:9c:87:99:45:49:
                    f7:22:75:a3:13:d0:68:77:38:00:39:2f:1a:52:a4:
                    b5:7d:55:79:7d:81:17:6e:a2:ac:9e:6e:01:da:1b:
                    0c:6c:03:c2:c3:62:a5:c0:63:8b:3d:ab:aa:50:3d:
                    77:ae:da:69:f6:ef:ea:35:6c:a7:fa:2d:0c:ec:7d:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:72:23:4A:4D:69:2F:DE:F7:61:6C:D6:93:52:0A:79:A3:B7:89:06
            X509v3 Authority Key Identifier:
                keyid:F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3136312e33382e34312e302f32342d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:fa:57:dd:f2:f9:e7:dc:8c:44:2f:4f:c4:3b:f2:38:b5:
         b0:6d:77:71:48:30:cb:71:47:ae:2d:91:42:8e:2f:80:33:7f:
         1a:0c:b3:9e:a2:93:0a:15:59:f0:34:00:42:29:9c:95:16:6e:
         fd:7e:f2:07:e5:a7:f3:aa:65:d6:74:d7:24:26:cf:e8:ea:db:
         a3:5a:5e:6f:e5:f2:a3:d7:c7:13:7b:b3:d5:e9:71:89:e6:38:
         3c:48:ce:45:13:df:53:d8:c8:03:56:86:12:c2:96:97:15:0e:
         b0:7b:0f:ba:f7:85:ae:27:e3:6c:33:e0:8f:2e:49:20:64:f2:
         8e:0b:81:02:69:e8:ba:3c:8d:94:8e:89:f1:b0:c8:ff:3b:18:
         8c:06:ab:06:89:b8:b1:88:db:f0:d6:0a:29:14:8d:19:05:2a:
         2c:7f:0f:37:e1:01:b7:73:4b:a9:05:ea:6c:6c:b0:f0:34:c7:
         51:fe:48:24:5d:ee:2f:a2:ee:77:97:84:7f:f8:bf:1d:a9:fc:
         49:44:9e:ce:1b:8d:5e:3a:ef:b0:44:c7:da:c3:9e:b4:e0:c4:
         6b:af:56:b1:c2:c3:a5:74:79:eb:b0:66:6e:70:e4:c3:44:f7:
         78:ca:90:47:b4:3c:f9:f0:92:9e:f4:02:de:1c:57:8b:7a:97:
         07:db:be:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:15 2025 by rpki-client