Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35362e302f32322d3232203d3e20323632393632.roa
File:                     3138372e38352e35362e302f32322d3232203d3e20323632393632.roa (raw, json)
Hash identifier:          LS0EXvcYN0Atyx+A/Bj6deCXiZXVJMSbQkS1pINU3kc=
Subject key identifier:   BD:64:59:79:93:2C:2F:1C:EE:AC:75:21:F5:32:25:85:C1:4F:2D:AB
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       6D1298FD01163F11D86306E28CF82C2E7AB8A3A3
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35362e302f32322d3232203d3e20323632393632.roa
Signing time:             Fri 13 Oct 2023 17:09:59 +0000
ROA not before:           Fri 13 Oct 2023 17:04:59 +0000
ROA not after:            Fri 11 Oct 2024 17:09:59 +0000
asID:                     262962
IP address blocks:        187.85.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:12:98:fd:01:16:3f:11:d8:63:06:e2:8c:f8:2c:2e:7a:b8:a3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:04:59 2023 GMT
            Not After : Oct 11 17:09:59 2024 GMT
        Subject: CN=BD645979932C2F1CEEAC7521F5322585C14F2DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:18:b4:c4:fd:38:b8:86:60:ae:6d:32:37:
                    2c:0a:41:be:70:06:8e:8b:1e:22:e1:bc:92:2b:02:
                    0d:7b:8b:dc:39:2f:9f:86:dc:c0:15:d8:ae:b7:19:
                    2c:49:4a:6d:4a:36:b8:73:d1:12:ec:a5:bc:69:d0:
                    e7:e8:df:9c:9a:50:22:d2:af:49:db:de:03:c0:22:
                    c5:0c:46:ed:73:d9:52:6e:29:17:c4:32:1a:1a:c1:
                    d2:10:de:84:91:88:3e:be:1d:38:c6:4c:c8:06:d7:
                    6d:53:8e:3c:d6:53:79:00:77:31:3c:9b:c8:72:df:
                    90:d2:43:cd:1f:ab:75:b6:be:98:30:82:af:3c:5f:
                    e8:f4:e1:99:37:c1:d6:2b:cb:44:3d:55:af:7b:91:
                    03:51:56:38:56:29:df:95:6c:e5:f5:0c:ba:09:c7:
                    66:fe:83:87:df:8e:c0:c0:86:b7:0e:3e:c1:d8:b2:
                    24:7e:a6:99:00:61:3e:0b:ea:52:86:18:bc:7e:be:
                    d4:8f:16:af:83:0f:0a:a6:92:12:91:13:58:63:43:
                    86:28:70:4f:e7:6f:d9:a1:fe:1d:13:b0:ab:4e:1c:
                    15:1a:4a:ef:52:64:8e:e1:a6:b3:9c:2d:a3:fe:11:
                    dc:3e:2c:0a:57:67:42:14:f8:f0:ec:19:08:0a:26:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:59:79:93:2C:2F:1C:EE:AC:75:21:F5:32:25:85:C1:4F:2D:AB
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35362e302f32322d3232203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:4e:b8:2a:ed:e6:62:70:c0:51:29:a6:c9:27:cd:42:40:82:
         63:fd:aa:ad:de:7b:14:e9:0e:08:0a:04:0a:5f:f7:5e:29:70:
         48:82:b4:9c:7c:e4:a3:0e:c4:93:bf:3d:f3:88:c1:5e:3d:01:
         a1:63:f3:9d:08:37:be:dc:1a:48:56:ac:be:91:3d:9b:83:ae:
         aa:0b:63:fc:d2:e4:15:f3:f0:f6:8f:ae:ba:a5:c4:ca:d4:6b:
         16:50:b1:ba:92:66:39:74:9f:6f:76:0d:3d:c1:04:66:09:e9:
         2c:99:c2:cc:cd:64:36:39:17:d8:e1:ac:3b:8c:dd:fa:a8:b7:
         42:0d:6c:73:72:bd:23:71:12:35:3c:9e:bc:fb:f0:06:c4:d4:
         b4:10:a4:bd:a2:81:c3:19:31:58:2f:c0:90:d8:9a:ab:90:bf:
         a8:2e:c1:f1:de:4d:12:d1:ca:ea:d9:74:3b:03:a4:5f:02:51:
         5c:bf:b5:0f:80:c3:c3:bb:6b:6b:49:63:7a:db:aa:ce:4f:bc:
         93:fe:e6:4b:99:59:30:2a:ab:00:c1:d3:88:4f:52:e7:b4:c9:
         79:ed:7b:e1:a6:3b:2a:2a:38:1b:07:02:45:e9:bd:16:9a:66:
         e1:91:91:22:66:3a:fc:dc:91:62:82:42:12:3e:d1:f2:79:14:
         04:4d:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:29:15 2025 by rpki-client