Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERhoA12GpDvPfTnYQxDN9saKHYdbFfSaYkd5m3XPoHiV/0/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          U2nvkFVqcArSFOJY8P9HnZOgxyqon0E4xQzawzB8Qns=
Subject key identifier:   C3:9D:09:E0:68:B4:38:C7:29:92:A4:4A:BA:C1:E6:B8:4D:5F:23:BB
Certificate issuer:       /CN=A4D4FDC6FE1ABFF9A4E7D7275ACF3B5FA1127BD9
Certificate serial:       6011B702F175364444DD71AA3F6984BD2925CF51
Authority key identifier: A4:D4:FD:C6:FE:1A:BF:F9:A4:E7:D7:27:5A:CF:3B:5F:A1:12:7B:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D4FDC6FE1ABFF9A4E7D7275ACF3B5FA1127BD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERhoA12GpDvPfTnYQxDN9saKHYdbFfSaYkd5m3XPoHiV/0/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa
Signing time:             Fri 17 Jun 2022 13:40:16 +0000
ROA not before:           Fri 17 Jun 2022 13:35:16 +0000
ROA not after:            Fri 16 Jun 2023 13:40:16 +0000
asID:                     271134
IP address blocks:        167.249.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:11:b7:02:f1:75:36:44:44:dd:71:aa:3f:69:84:bd:29:25:cf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D4FDC6FE1ABFF9A4E7D7275ACF3B5FA1127BD9
        Validity
            Not Before: Jun 17 13:35:16 2022 GMT
            Not After : Jun 16 13:40:16 2023 GMT
        Subject: CN=C39D09E068B438C72992A44ABAC1E6B84D5F23BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:ff:83:18:76:25:88:68:41:a9:16:28:b8:
                    76:97:5f:5a:e3:c1:58:f0:78:dc:2e:46:f1:83:05:
                    35:b6:60:e9:01:db:7f:1a:fb:00:3f:06:91:6f:e8:
                    75:46:1b:9a:3d:94:96:86:43:d7:cf:2c:48:7a:31:
                    be:81:c0:42:c4:36:b6:99:3f:7c:57:94:59:8f:d2:
                    e4:c2:7a:fc:42:8f:ab:50:e1:56:f5:25:41:cb:b3:
                    ee:c0:15:02:2f:e3:f7:6b:e4:c0:fc:0b:1a:8c:e1:
                    55:2c:25:3c:e6:07:b5:9a:42:b5:13:35:c5:ea:a6:
                    23:d3:49:a0:f8:8f:9f:fe:01:90:de:66:0a:8d:39:
                    24:4c:96:0d:9d:b6:cf:65:4b:65:70:89:e4:b6:e5:
                    d2:3d:88:ef:e2:3b:5c:13:a9:56:a7:60:d4:bc:31:
                    2f:60:ed:8a:33:b0:58:f4:ba:74:ac:c5:5a:f7:a0:
                    db:c1:31:79:18:f3:06:9e:a0:fc:6e:6d:f5:06:a0:
                    24:c7:2c:85:db:d8:08:94:fd:53:6b:1a:a3:30:84:
                    64:1b:6f:18:c8:57:09:68:df:43:89:92:71:58:b8:
                    cc:34:46:59:70:bd:02:0e:45:4d:1a:9e:84:ce:47:
                    9b:9e:a4:05:d2:59:e6:db:a1:7e:97:bb:61:2e:a6:
                    c5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9D:09:E0:68:B4:38:C7:29:92:A4:4A:BA:C1:E6:B8:4D:5F:23:BB
            X509v3 Authority Key Identifier:
                keyid:A4:D4:FD:C6:FE:1A:BF:F9:A4:E7:D7:27:5A:CF:3B:5F:A1:12:7B:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERhoA12GpDvPfTnYQxDN9saKHYdbFfSaYkd5m3XPoHiV/0/A4D4FDC6FE1ABFF9A4E7D7275ACF3B5FA1127BD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D4FDC6FE1ABFF9A4E7D7275ACF3B5FA1127BD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERhoA12GpDvPfTnYQxDN9saKHYdbFfSaYkd5m3XPoHiV/0/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:be:7e:4f:f9:f9:47:e9:72:de:54:05:f8:29:68:62:33:8b:
         54:42:44:4a:5e:e1:cf:58:ef:2a:3a:b7:46:e4:a0:f4:ca:d3:
         20:e1:f0:52:0e:48:40:b3:ec:9c:e7:ee:5f:c6:0f:9d:00:07:
         f5:bd:5c:92:26:6c:f9:01:fc:c1:7e:db:af:1b:05:0f:aa:da:
         58:2c:10:b8:99:fe:1c:bc:f3:e4:ec:ab:8c:c1:57:47:c9:27:
         a0:56:ef:9c:32:c7:07:a4:70:ec:8b:27:0b:10:3f:a8:a8:eb:
         20:c2:c0:46:c9:ac:d5:28:09:03:a8:46:52:7d:08:f4:12:3c:
         9b:43:88:a5:c8:2f:20:f2:ff:0d:f7:cf:a9:55:6f:ad:9d:f7:
         88:d0:ee:62:57:66:e6:5c:e5:82:a4:5f:aa:14:bf:71:e8:14:
         62:88:ad:62:a5:99:91:f6:c7:ea:81:23:84:8d:38:e0:ee:2c:
         4f:3c:2d:bf:4a:fb:ce:61:58:b9:3c:66:fe:ed:97:aa:f4:cb:
         c1:46:5b:81:9e:da:e1:fb:40:c7:55:92:c0:b8:0a:b7:48:2d:
         ee:9c:62:e1:97:87:98:b4:24:3d:49:a5:05:97:ad:84:06:1b:
         18:25:22:f2:36:03:8b:26:cd:1b:b8:7f:af:78:0d:c5:c9:00:
         5d:4d:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:27 2025 by rpki-client