Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/3138362e3235302e3136342e302f32322d3232203d3e203532383934.roa
File:                     3138362e3235302e3136342e302f32322d3232203d3e203532383934.roa (raw, json)
Hash identifier:          laVRIQk8d3yxk7bkzOQQ0ubEKJDXwRnuDv/yEoyHnYU=
Subject key identifier:   BE:45:93:CB:5E:86:C0:EA:AB:56:AE:30:84:DB:FC:64:72:44:3F:5B
Certificate issuer:       /CN=B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE
Certificate serial:       01AA93AC0A4206D8D26B0F75C94B030543DEA17F
Authority key identifier: B0:20:B3:BE:42:77:F6:09:9B:24:5F:3A:04:D7:AF:D1:EC:33:AF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/3138362e3235302e3136342e302f32322d3232203d3e203532383934.roa
Signing time:             Fri 02 Sep 2022 11:48:57 +0000
ROA not before:           Fri 02 Sep 2022 11:43:57 +0000
ROA not after:            Fri 01 Sep 2023 11:48:57 +0000
asID:                     52894
IP address blocks:        186.250.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:aa:93:ac:0a:42:06:d8:d2:6b:0f:75:c9:4b:03:05:43:de:a1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE
        Validity
            Not Before: Sep  2 11:43:57 2022 GMT
            Not After : Sep  1 11:48:57 2023 GMT
        Subject: CN=BE4593CB5E86C0EAAB56AE3084DBFC6472443F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:64:91:db:a9:8e:1b:e7:09:75:8a:58:2f:
                    b2:fe:bb:c0:3f:08:5c:88:ee:2c:6e:9e:2e:d9:a7:
                    a5:4a:ad:3a:40:b0:f7:53:b8:3e:23:ef:57:23:12:
                    2a:2b:0a:80:a1:96:5e:d6:cf:f5:b0:3d:c0:39:a7:
                    5f:c8:75:ae:48:24:a9:4c:73:02:15:ae:37:bd:de:
                    c1:2c:45:3c:43:dc:98:57:2d:01:2a:ff:f5:a2:9e:
                    cf:92:74:f4:ca:eb:fd:69:be:be:10:37:f0:54:e6:
                    09:05:f2:de:6b:fe:cc:91:6c:97:b2:e7:04:65:9e:
                    7d:29:99:26:44:ed:e9:d0:58:f3:9b:36:86:16:ac:
                    66:13:24:66:db:93:57:e6:00:dc:1d:6d:f6:92:c4:
                    e5:55:ba:b4:15:32:f9:f1:00:d9:77:25:57:14:e3:
                    df:3a:56:9f:05:12:3b:84:22:5e:16:a4:47:92:d9:
                    f5:46:46:81:df:04:55:34:4c:9b:27:84:39:47:8d:
                    ba:f8:57:2e:9c:74:23:44:cd:b1:e4:49:5f:cc:3e:
                    59:dc:16:a2:1c:8c:c7:9b:b5:02:c6:07:9c:fc:17:
                    22:61:b1:6b:b3:34:f1:0a:40:41:84:66:87:18:04:
                    2f:1c:e9:1f:40:f1:b3:90:ba:bb:4d:9f:38:ac:af:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:45:93:CB:5E:86:C0:EA:AB:56:AE:30:84:DB:FC:64:72:44:3F:5B
            X509v3 Authority Key Identifier:
                keyid:B0:20:B3:BE:42:77:F6:09:9B:24:5F:3A:04:D7:AF:D1:EC:33:AF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B020B3BE4277F6099B245F3A04D7AFD1EC33AFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW6JkbTQ3NUsHb8zrntgfxyXemnDNLYvovvdZJ6kqeND/0/3138362e3235302e3136342e302f32322d3232203d3e203532383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:1a:cf:90:06:b2:52:89:bd:41:01:a7:83:7d:88:cd:43:5a:
         71:b1:cd:c8:23:02:dc:73:f0:d2:34:9b:c7:c3:1a:b2:ce:0d:
         81:9b:58:a0:1f:55:76:7b:e0:4e:86:53:4c:9f:9d:70:68:89:
         8e:39:91:8f:65:61:87:66:67:e8:b8:6f:ed:db:83:05:51:f8:
         6f:19:b6:1d:b8:b8:4c:0f:49:b4:d5:fd:48:b4:d5:52:85:12:
         0d:59:23:cb:d5:00:27:16:f7:93:81:5e:28:be:ee:96:49:c7:
         7a:08:c5:6d:c7:b9:59:e9:9c:b8:88:7e:a0:45:5b:b7:f0:78:
         d2:e1:01:34:53:bf:68:fa:bd:ee:0c:96:49:6d:13:12:c0:f8:
         26:4d:2a:ea:d4:62:30:e0:8b:4b:3d:65:5d:11:0c:b3:92:36:
         80:88:54:39:9e:e7:3c:63:1e:86:42:40:39:72:8e:c1:ba:54:
         9f:29:72:ac:f2:74:05:10:5a:ea:98:49:c5:a0:f3:99:cc:a8:
         db:e9:41:86:0c:a1:72:94:5a:ea:7a:13:e2:c4:74:ad:4d:fa:
         9f:c7:dd:f1:2c:8f:b6:2b:1a:70:1b:16:c0:50:7d:f0:9b:f9:
         3a:11:61:ea:2f:9a:ac:16:dd:3b:bd:9c:b0:46:85:ab:d0:8f:
         5f:73:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:07:55 2025 by rpki-client