Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3135372e302f32342d3332203d3e20323632383134.roa
File:                     3230312e31362e3135372e302f32342d3332203d3e20323632383134.roa (raw, json)
Hash identifier:          deIvwBdU7jFq05Ifp+6x2o+5+WD3vPQe8rYZz0vd6T4=
Subject key identifier:   F9:E3:80:E4:7E:95:7E:B0:72:08:07:EB:86:51:A4:73:82:F6:46:62
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       0B281D0C6CF6526D3393F42361E586E19963F202
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3135372e302f32342d3332203d3e20323632383134.roa
Signing time:             Mon 13 Dec 2021 14:33:26 +0000
ROA not before:           Mon 13 Dec 2021 14:28:26 +0000
ROA not after:            Mon 12 Dec 2022 14:33:26 +0000
asID:                     262814
IP address blocks:        201.16.157.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:28:1d:0c:6c:f6:52:6d:33:93:f4:23:61:e5:86:e1:99:63:f2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 13 14:28:26 2021 GMT
            Not After : Dec 12 14:33:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:9e:69:79:fd:84:99:06:36:88:cc:2c:67:
                    ed:9e:7e:ab:e9:e9:8c:cb:51:12:93:68:1f:b6:ac:
                    15:08:97:25:00:dd:4c:c0:23:d0:e5:b6:15:0a:1b:
                    4c:07:ed:6a:29:ef:2f:10:96:6f:a7:20:63:ec:f6:
                    86:01:b8:31:eb:61:01:27:b1:81:b7:fa:99:cc:93:
                    c8:36:39:7b:b1:09:57:82:3a:8d:f0:dd:14:0f:f8:
                    37:fd:fb:55:35:19:7f:b0:ca:15:13:0a:fb:0e:25:
                    a4:aa:3e:eb:90:73:bc:d0:78:ed:b6:28:e9:3e:56:
                    09:1e:cb:a6:4c:6f:77:9c:1d:d9:47:a7:ef:a2:0f:
                    31:fb:7b:05:24:1c:51:40:38:05:05:1f:2a:46:20:
                    1a:93:5e:9c:77:32:37:82:86:04:b5:3b:16:d5:98:
                    80:eb:5a:5f:87:37:17:cd:a4:7b:b8:38:e4:6e:ff:
                    43:f4:65:85:84:66:72:72:53:9d:5c:28:7f:80:47:
                    28:91:a8:fb:b0:a3:d8:81:71:ad:a1:9c:ae:ab:de:
                    84:25:2d:93:f3:a2:c9:42:67:14:4a:d2:f4:a7:1e:
                    0a:dc:a2:4b:39:40:65:6e:5e:4d:78:06:44:f1:ec:
                    03:22:42:d8:93:5a:46:3d:75:83:47:4e:71:8c:94:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E3:80:E4:7E:95:7E:B0:72:08:07:EB:86:51:A4:73:82:F6:46:62
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3230312e31362e3135372e302f32342d3332203d3e20323632383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:30:f1:5a:7e:21:3b:5a:44:f0:a1:02:2e:bd:a9:58:0b:
         a1:ac:05:7d:f4:c9:5c:1d:dd:c3:f2:13:a6:73:95:c1:c8:91:
         3b:d1:8c:62:54:a4:3f:24:a9:bf:9a:86:ae:81:8e:98:e3:28:
         e9:00:73:37:59:d3:1a:b9:1f:c5:f7:79:f2:cc:35:23:c3:bb:
         06:31:44:fb:10:26:0c:1b:0a:a9:c5:de:65:c9:b1:5c:6b:e0:
         39:d5:7c:cc:45:21:41:f5:27:ee:4c:9d:18:7c:e5:fe:fe:d4:
         3b:ac:7d:fe:35:b3:10:97:a6:c4:d4:50:80:23:92:bf:03:79:
         89:5f:88:e6:03:92:55:66:32:5f:71:fd:b2:a6:eb:9f:59:a6:
         44:92:25:66:d4:32:9d:78:85:8a:47:50:81:31:8c:00:99:11:
         eb:d9:f6:e8:28:26:eb:ad:ec:ee:3d:98:b3:e0:79:bc:71:b1:
         29:ca:e7:11:4d:28:54:50:c0:f5:77:4a:94:ea:ae:19:b3:d2:
         f4:7f:68:81:83:02:b4:f3:0c:0d:14:31:1b:1a:cb:26:91:a1:
         45:4b:bd:6d:1f:dc:cd:f5:4f:4e:4a:45:42:78:c6:16:0b:d1:
         ec:db:c1:9d:c4:24:9d:3d:4a:dc:e3:aa:19:f5:f7:d7:88:34:
         1a:3b:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:04 2025 by rpki-client