Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3132382e302f32312d3231203d3e203137323232.roa
File:                     3138392e34352e3132382e302f32312d3231203d3e203137323232.roa (raw, json)
Hash identifier:          38kW+xyNa6qRC3MAy/0wRiQGh7tpxE+xjsoTidjWJYI=
Subject key identifier:   85:DA:2F:DA:CA:7A:8A:C4:27:67:02:D3:85:08:CF:A9:7E:98:A2:B2
Certificate issuer:       /CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
Certificate serial:       2D08CADE2AF08C0EE17F8FC1E3C4EA55BD2F36EC
Authority key identifier: F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3132382e302f32312d3231203d3e203137323232.roa
Signing time:             Wed 12 Oct 2022 17:46:54 +0000
ROA not before:           Wed 12 Oct 2022 17:41:54 +0000
ROA not after:            Wed 11 Oct 2023 17:46:54 +0000
asID:                     17222
IP address blocks:        189.45.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:ca:de:2a:f0:8c:0e:e1:7f:8f:c1:e3:c4:ea:55:bd:2f:36:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
        Validity
            Not Before: Oct 12 17:41:54 2022 GMT
            Not After : Oct 11 17:46:54 2023 GMT
        Subject: CN=85DA2FDACA7A8AC4276702D38508CFA97E98A2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:74:86:24:f8:64:3c:dc:b2:d9:4b:41:df:
                    29:5f:45:57:86:f4:61:21:4c:37:2e:52:49:25:bf:
                    c6:8f:76:16:53:64:a1:9b:a9:69:b9:bb:4c:12:23:
                    b1:e9:8f:95:b6:06:4d:d9:1c:0c:eb:00:30:0e:9e:
                    21:00:38:84:4e:9a:13:f9:43:91:83:c3:8c:61:18:
                    39:e3:fa:ed:f3:75:e6:b6:3f:fd:05:75:ea:05:35:
                    9d:d4:4c:5a:fa:f4:85:89:6f:86:5c:f1:f8:0b:af:
                    8a:0c:87:f5:70:63:b8:1d:f6:35:87:1d:b3:49:6a:
                    53:2e:b0:b2:cd:17:26:5d:1b:fa:fc:7c:18:5f:66:
                    97:3a:5b:9d:5d:e0:9e:e5:5c:54:98:2c:c7:16:b2:
                    61:e6:76:54:fb:50:b2:47:8a:af:4c:e0:a8:35:45:
                    a6:3d:07:34:4b:8f:33:eb:f9:8d:90:7b:fd:a0:03:
                    5b:9e:e8:08:38:81:6d:b7:8b:66:d0:33:44:ba:18:
                    07:e4:d2:87:c3:ad:34:06:3b:ba:6a:95:7d:eb:d0:
                    ae:53:6c:3e:af:84:9d:f5:d8:2d:de:0c:4f:85:09:
                    50:01:5c:72:15:38:cb:07:58:e7:1b:d7:ee:09:73:
                    51:b5:8e:fd:d5:06:56:13:65:fa:66:dc:cc:23:1a:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:2F:DA:CA:7A:8A:C4:27:67:02:D3:85:08:CF:A9:7E:98:A2:B2
            X509v3 Authority Key Identifier:
                keyid:F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138392e34352e3132382e302f32312d3231203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:51:a6:76:d8:9b:1e:7c:b2:68:e8:0e:ac:97:72:20:5f:bf:
         3a:dc:29:3c:25:ac:5d:ba:fb:19:3e:0d:f5:2e:7b:0b:a4:79:
         d7:46:94:e9:25:5c:22:0f:e5:54:4e:09:bb:3f:79:2f:6c:7b:
         9a:02:3d:02:4e:26:05:59:7e:b4:c6:38:aa:e1:d6:a7:f1:d8:
         22:7a:9d:8c:ad:0e:2a:6c:bd:0d:ce:f0:a7:0f:a9:12:fe:57:
         55:58:94:b9:8e:78:07:e1:e5:1a:39:21:f1:a5:02:2d:26:c8:
         aa:e3:33:da:ff:87:e9:75:55:dc:de:45:79:c7:40:ae:c0:74:
         f8:fc:78:2f:c3:4f:f6:6f:f6:8b:78:47:68:0c:44:d8:d3:67:
         59:e5:5f:a4:ed:5c:e1:db:a3:0b:66:29:0c:23:91:d5:b2:ec:
         76:6e:81:ff:bc:82:b2:d3:03:25:8e:48:c9:55:14:ba:5d:43:
         08:40:0c:f8:b3:09:cb:97:37:5b:18:ee:34:42:0b:e5:07:11:
         59:85:b0:17:0f:27:a3:49:9c:0c:74:3b:23:8d:9b:a9:02:e6:
         fc:bb:b1:e3:27:63:6d:6a:db:ea:ff:06:58:79:be:52:01:cf:
         21:15:7d:44:46:fa:6f:f4:22:f6:03:13:9b:3e:8f:f9:ec:ea:
         1f:10:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:38 2025 by rpki-client