Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/36372e3135392e3232342e302f32312d3231203d3e203137323232.roa
File:                     36372e3135392e3232342e302f32312d3231203d3e203137323232.roa (raw, json)
Hash identifier:          21NDH9vvPH3/UVKcPStVwjr3WN3Tg5XBrd4MMu6RTYM=
Subject key identifier:   55:61:9F:09:89:49:07:56:1A:37:37:67:AF:20:39:85:04:FB:06:26
Certificate issuer:       /CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
Certificate serial:       0A43F03DD925384605F85FE6CB05E6FC0AF5F814
Authority key identifier: F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/36372e3135392e3232342e302f32312d3231203d3e203137323232.roa
Signing time:             Fri 07 Oct 2022 17:04:59 +0000
ROA not before:           Fri 07 Oct 2022 16:59:59 +0000
ROA not after:            Fri 06 Oct 2023 17:04:59 +0000
asID:                     17222
IP address blocks:        67.159.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:43:f0:3d:d9:25:38:46:05:f8:5f:e6:cb:05:e6:fc:0a:f5:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F286FA0129F492A14A427E9C2AB7E0CD87A21615
        Validity
            Not Before: Oct  7 16:59:59 2022 GMT
            Not After : Oct  6 17:04:59 2023 GMT
        Subject: CN=55619F09894907561A373767AF20398504FB0626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:d8:51:5a:e5:7c:0d:31:9f:d8:7d:d6:f0:
                    1d:c6:02:8d:d1:75:a6:d5:c1:a8:6b:84:04:9f:36:
                    dc:5c:ed:2c:f0:00:5c:29:c3:4e:64:25:9a:f1:8c:
                    54:3e:e1:da:6e:29:42:ea:b5:cd:61:8a:8b:0d:17:
                    08:35:7d:94:84:c0:34:5f:a1:d5:4f:1f:48:6c:0d:
                    ab:9f:34:b6:7e:86:a5:f2:8c:10:82:66:40:49:de:
                    cc:92:36:45:cb:19:0c:89:6d:98:b7:c0:b9:7d:90:
                    18:e1:fe:07:2d:8c:7f:af:7c:f7:6a:c3:5d:e5:2a:
                    16:0b:95:5b:06:0c:e3:76:96:80:89:c2:82:5d:0c:
                    b5:e5:7d:d2:60:72:b0:c2:eb:ba:4a:2f:9a:4c:27:
                    a6:19:ed:09:51:e0:64:6d:fb:5d:c8:2f:d4:24:1d:
                    42:27:5f:bb:ed:7d:ab:cb:28:88:8d:8d:c0:c1:6c:
                    bd:88:cc:74:e8:db:57:b0:44:13:55:23:6c:64:56:
                    20:8e:5a:ff:56:5c:20:b2:77:e4:80:93:d2:db:06:
                    07:1a:2b:89:6c:a7:af:1d:9c:74:43:7d:cc:66:1a:
                    02:3a:f3:f0:5b:65:00:ab:41:c3:88:5a:9c:4c:fb:
                    c3:df:80:05:95:42:c4:0f:22:66:3a:fe:66:17:0c:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:61:9F:09:89:49:07:56:1A:37:37:67:AF:20:39:85:04:FB:06:26
            X509v3 Authority Key Identifier:
                keyid:F2:86:FA:01:29:F4:92:A1:4A:42:7E:9C:2A:B7:E0:CD:87:A2:16:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F286FA0129F492A14A427E9C2AB7E0CD87A21615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/36372e3135392e3232342e302f32312d3231203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:30:49:bc:d8:90:2b:d1:84:68:63:41:14:d7:f8:1e:9e:be:
         72:f3:ae:c2:1f:60:d1:3d:0e:6d:ad:c0:7d:b4:39:73:a0:5e:
         41:18:fc:50:53:0c:a7:14:0f:51:f6:78:6b:ef:fc:b6:07:9f:
         a4:58:71:a8:e1:69:56:66:c7:80:ff:0a:03:0b:d5:f8:53:7b:
         9e:b2:5e:d9:e9:2d:46:fe:22:83:71:78:35:37:f1:ab:55:5d:
         c3:f1:1c:69:7e:bf:aa:d1:57:24:21:d9:0e:87:05:85:cc:91:
         f3:36:ce:25:d7:24:a1:a5:f3:f9:38:5f:5a:c9:0d:ed:96:ce:
         ed:0d:75:6f:89:50:71:7d:33:dd:9d:ab:bf:d8:b8:d8:29:cc:
         6a:42:e2:1b:55:54:a6:38:08:2b:10:1c:c4:3f:20:ab:2e:1a:
         f9:3d:05:f7:8b:03:9e:f4:cc:01:52:4c:f6:f0:0a:3b:b2:16:
         d1:68:04:77:6a:74:aa:b4:a6:47:3b:18:a1:a0:86:df:ce:a2:
         7a:c1:b8:a5:14:89:d4:5c:a3:1e:9f:a0:a8:6a:0e:9b:3f:ec:
         4e:03:00:52:47:a9:11:29:a3:90:3a:21:3d:e4:de:83:66:2e:
         b0:3d:71:f8:95:82:61:80:1c:a7:51:ab:17:44:7a:05:c6:5f:
         65:35:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:57 2025 by rpki-client