Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0/3230312e3134382e3130302e302f32322d3234203d3e203631383332.roa
File:                     3230312e3134382e3130302e302f32322d3234203d3e203631383332.roa (raw, json)
Hash identifier:          j4OoguzyjhRAsysfGOlt8VXgNrQ34p6nPWFnnqKzKAA=
Subject key identifier:   9B:87:49:53:4C:04:BE:51:0B:3C:42:8E:30:F4:4E:2F:2D:0F:9D:DF
Certificate issuer:       /CN=1529D09679006E6AB394B0A0AF3F4338A8B02F2C
Certificate serial:       7E2D708BEF97B1070B371CD05BC4D0B961605B0C
Authority key identifier: 15:29:D0:96:79:00:6E:6A:B3:94:B0:A0:AF:3F:43:38:A8:B0:2F:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1529D09679006E6AB394B0A0AF3F4338A8B02F2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0/3230312e3134382e3130302e302f32322d3234203d3e203631383332.roa
Signing time:             Wed 05 Oct 2022 14:39:35 +0000
ROA not before:           Wed 05 Oct 2022 14:34:35 +0000
ROA not after:            Wed 04 Oct 2023 14:39:35 +0000
asID:                     61832
IP address blocks:        201.148.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2d:70:8b:ef:97:b1:07:0b:37:1c:d0:5b:c4:d0:b9:61:60:5b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1529D09679006E6AB394B0A0AF3F4338A8B02F2C
        Validity
            Not Before: Oct  5 14:34:35 2022 GMT
            Not After : Oct  4 14:39:35 2023 GMT
        Subject: CN=9B8749534C04BE510B3C428E30F44E2F2D0F9DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:d5:97:a0:28:cd:41:d5:a1:b0:77:6a:d1:
                    e7:3f:b9:33:af:4f:2c:36:8d:09:4c:ba:a3:1f:12:
                    59:13:30:e6:8f:58:84:49:c9:8b:26:dd:c8:49:fe:
                    ba:ac:d0:5e:cc:ac:d1:b8:17:22:c4:9f:0d:1c:35:
                    c7:26:c4:bf:53:dc:92:4b:25:ed:3b:a8:02:dc:c8:
                    b0:34:3c:49:a2:3b:71:f1:4f:fb:e2:7b:96:1e:73:
                    f9:26:b2:9e:6d:a9:22:a7:69:82:bb:04:e0:a5:4a:
                    b3:e8:94:8b:3b:93:fd:39:74:18:e5:33:1c:a9:13:
                    ed:0c:b8:97:60:ed:7a:c7:e1:ec:8f:91:d2:88:d1:
                    37:ed:7c:23:4c:41:59:c6:c7:21:e5:5f:d5:b2:d0:
                    e9:08:33:93:d9:95:8a:d5:b9:dd:19:90:a1:a7:a0:
                    d3:cf:16:d9:64:40:a3:98:c3:35:e6:6f:75:61:d5:
                    ee:c8:b9:f7:11:7a:e1:48:ed:68:b0:ac:69:5a:a9:
                    c6:54:b4:8d:b9:8e:ce:e2:2a:42:43:e6:8d:ba:7d:
                    72:a7:1e:b5:2c:17:2d:c4:4e:1f:89:cd:40:00:42:
                    a0:d8:5e:38:ca:db:57:41:00:a4:2a:fc:e9:be:c5:
                    88:ca:58:29:1f:8f:16:29:7f:21:26:83:9e:03:84:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:87:49:53:4C:04:BE:51:0B:3C:42:8E:30:F4:4E:2F:2D:0F:9D:DF
            X509v3 Authority Key Identifier:
                keyid:15:29:D0:96:79:00:6E:6A:B3:94:B0:A0:AF:3F:43:38:A8:B0:2F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0/1529D09679006E6AB394B0A0AF3F4338A8B02F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1529D09679006E6AB394B0A0AF3F4338A8B02F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4DCXiyDBBCuUWGpLZ9VpBLhmTmPFuUFtB69jXoWv4YM/0/3230312e3134382e3130302e302f32322d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3d:80:bf:34:d0:5f:22:5e:41:90:11:f5:dd:12:bd:78:85:
         5d:7e:0d:5a:25:f4:d2:e8:c0:0f:91:08:8a:a1:c1:e2:b0:77:
         29:7f:0e:7d:40:c1:db:b9:b8:96:c0:7f:3a:bb:c3:40:b6:90:
         5f:54:d9:4d:a7:6e:ff:e7:21:b3:67:92:20:a7:79:68:7e:ad:
         9b:f5:99:fd:cd:b7:2e:e5:46:84:5a:06:f1:a1:6d:47:bc:0b:
         eb:3a:a1:b9:8c:d7:79:60:0d:ac:4a:1d:9a:3b:c6:68:f4:d6:
         bf:d5:4e:25:57:08:cc:b4:e6:66:4c:e6:98:76:72:5a:ef:8d:
         60:f1:60:4c:c6:1d:06:ab:3e:4f:27:f9:08:1c:f0:5b:34:29:
         20:36:cd:57:79:7c:bd:d1:32:6b:a7:0e:b8:16:39:c2:8f:59:
         06:a3:af:57:37:19:16:99:07:a7:80:c3:f6:87:ac:86:32:b7:
         07:c4:93:d5:0e:da:ed:29:0f:cb:f4:58:b3:90:5c:30:6b:12:
         57:10:60:49:b8:71:5e:b3:19:cb:16:64:5f:c3:1e:24:0b:6e:
         5c:1f:0d:5a:2a:8f:ee:58:2d:12:80:b0:d5:0a:41:e7:f9:a4:
         3a:2a:51:11:3b:a6:ff:98:95:db:35:1f:6f:60:72:6d:e6:62:
         7b:67:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:45 2025 by rpki-client