Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3232203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32322d3232203d3e20323731333335.roa (raw, json)
Hash identifier:          6vnzc+FotsLEO361cchD2U69nhdMfzLQuTKEvUxW9QU=
Subject key identifier:   41:64:B1:BC:53:E5:B3:E9:3C:04:96:A9:BE:BC:F7:29:A0:DD:C6:95
Certificate issuer:       /CN=A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B
Certificate serial:       4FA3AD42A5F7AEAEC0CB1AA8FDB5577DEE884343
Authority key identifier: A8:2A:EB:AD:4E:05:08:73:66:90:4B:5D:C3:D0:EE:F5:21:1F:4E:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3232203d3e20323731333335.roa
Signing time:             Thu 22 Sep 2022 13:26:25 +0000
ROA not before:           Thu 22 Sep 2022 13:21:25 +0000
ROA not after:            Thu 21 Sep 2023 13:26:25 +0000
asID:                     271335
IP address blocks:        207.248.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a3:ad:42:a5:f7:ae:ae:c0:cb:1a:a8:fd:b5:57:7d:ee:88:43:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B
        Validity
            Not Before: Sep 22 13:21:25 2022 GMT
            Not After : Sep 21 13:26:25 2023 GMT
        Subject: CN=4164B1BC53E5B3E93C0496A9BEBCF729A0DDC695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:96:ae:c3:a5:1c:4c:7b:15:e5:f0:1b:ce:
                    d3:05:f7:de:77:ce:21:4e:c0:1b:16:84:3e:c7:08:
                    db:56:15:da:f3:c9:4f:dd:91:f0:5b:76:80:6c:54:
                    8c:1f:32:68:ba:58:7a:c4:1a:c6:cb:df:65:f5:75:
                    ac:46:cb:10:aa:0f:51:4d:e0:9c:ba:02:25:b0:cc:
                    6f:28:c7:f1:14:60:6c:f7:ce:21:11:68:97:d5:2e:
                    a1:a4:73:dd:be:0c:b8:c0:4d:a0:57:5d:1e:c4:85:
                    26:75:8e:e7:b7:37:99:2f:c4:62:1c:27:e5:4c:86:
                    87:83:00:99:de:24:08:79:7f:88:65:cc:ba:15:06:
                    1f:a0:c7:aa:cf:ab:22:43:a1:94:2b:0a:f9:17:38:
                    8f:cf:7e:4e:b8:4f:78:ab:0a:53:c4:40:37:9b:e9:
                    04:f4:6a:d1:7f:33:fe:aa:72:17:92:32:0a:69:c4:
                    54:82:e5:62:2e:e0:09:7b:86:15:c8:9d:6f:ab:f3:
                    1c:20:d4:5b:18:c3:55:4c:0e:4a:16:51:92:c8:1e:
                    05:6b:ea:bf:c9:9c:54:fd:6c:b6:42:e5:89:57:a9:
                    53:ff:d1:59:b7:a9:8d:45:83:55:a7:0e:6a:f9:dc:
                    58:b6:25:a8:c1:38:57:e6:81:96:9a:f3:63:b6:8b:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:B1:BC:53:E5:B3:E9:3C:04:96:A9:BE:BC:F7:29:A0:DD:C6:95
            X509v3 Authority Key Identifier:
                keyid:A8:2A:EB:AD:4E:05:08:73:66:90:4B:5D:C3:D0:EE:F5:21:1F:4E:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32322d3232203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:4f:f0:ce:90:91:db:ae:25:fb:b1:e4:d4:1d:e7:9e:c7:
         c8:ff:05:9d:46:7a:7c:f2:59:bc:fd:17:a4:a8:47:58:06:01:
         3d:1e:f2:b4:7e:ee:b3:1d:c3:52:b3:58:d9:3e:86:b7:77:44:
         d5:b9:7c:37:10:52:ed:b4:6d:58:b0:49:e4:1c:1a:2d:b6:e5:
         4a:d5:68:fd:72:f1:d0:22:71:7d:59:52:72:58:44:ae:21:96:
         fb:13:32:0c:12:95:74:d6:86:0f:2d:39:7d:71:e2:89:a8:02:
         cd:1d:d1:d3:79:83:f3:70:b3:e5:ce:9b:2b:22:de:f9:8b:50:
         cd:b4:0b:69:8f:93:3b:ed:4c:72:d5:94:0e:a4:d8:95:3d:e1:
         a9:4f:de:9e:4e:df:70:ac:8c:94:8b:ab:41:47:74:28:a9:bd:
         7b:1c:e5:4d:6f:7e:9b:09:bf:a0:02:44:18:d1:c3:8c:b8:2a:
         59:85:07:ed:e1:fc:6c:1a:2f:43:7c:0f:c3:94:68:df:4f:88:
         9b:b9:98:81:83:58:a4:bd:f1:cd:d3:29:d7:e5:98:c7:49:a5:
         78:97:8c:fd:76:aa:97:8b:10:d8:0d:c2:ae:39:d7:c2:d2:e2:
         1e:ef:71:cb:b6:5c:40:e7:26:b4:05:8c:84:74:36:dd:08:1f:
         9f:c1:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:42 2025 by rpki-client