Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fe1bwuU4TxwH2VPBkDr5j5iJApgBprjot2oCi5CREiS2/0/3230312e3231382e3136382e302f32322d3234203d3e20323731333730.roa
File:                     3230312e3231382e3136382e302f32322d3234203d3e20323731333730.roa (raw, json)
Hash identifier:          7aZDWjWOHRr90g7ly3mYg1terhSkNSo3T1ntjV4HhJA=
Subject key identifier:   1F:6D:F2:6E:BA:03:E2:58:BB:F3:F7:5E:13:51:E3:5D:3E:87:73:06
Certificate issuer:       /CN=E91CC8664D1EDA98A713F6DD9D1A4BF74D95BF98
Certificate serial:       058692FF984E0AA44D44FE99CF608D95CD6928C0
Authority key identifier: E9:1C:C8:66:4D:1E:DA:98:A7:13:F6:DD:9D:1A:4B:F7:4D:95:BF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E91CC8664D1EDA98A713F6DD9D1A4BF74D95BF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fe1bwuU4TxwH2VPBkDr5j5iJApgBprjot2oCi5CREiS2/0/3230312e3231382e3136382e302f32322d3234203d3e20323731333730.roa
Signing time:             Wed 17 Aug 2022 15:26:50 +0000
ROA not before:           Wed 17 Aug 2022 15:21:50 +0000
ROA not after:            Wed 16 Aug 2023 15:26:50 +0000
asID:                     271370
IP address blocks:        201.218.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:92:ff:98:4e:0a:a4:4d:44:fe:99:cf:60:8d:95:cd:69:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91CC8664D1EDA98A713F6DD9D1A4BF74D95BF98
        Validity
            Not Before: Aug 17 15:21:50 2022 GMT
            Not After : Aug 16 15:26:50 2023 GMT
        Subject: CN=1F6DF26EBA03E258BBF3F75E1351E35D3E877306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:d7:80:6a:06:48:4b:03:f0:1b:4c:3e:7d:
                    15:3b:98:75:c4:2a:52:d3:db:92:46:c6:a4:5a:f5:
                    9a:98:80:44:12:10:b2:3f:31:97:73:b7:17:39:c1:
                    d1:3e:ef:e4:34:6c:a5:86:b8:1d:3f:da:88:64:3f:
                    9d:f9:cf:69:c7:a6:7f:aa:a1:2e:3c:ba:60:5f:30:
                    44:93:c6:ef:6c:b1:fd:ed:a2:2b:0b:c4:3a:78:3c:
                    57:8d:28:73:96:f8:a3:30:d9:33:27:b5:00:bd:1d:
                    8d:ff:7b:64:85:8c:13:bf:58:f2:94:8e:be:cb:64:
                    80:6d:30:06:8b:ba:de:e9:46:a5:88:13:89:3e:39:
                    a8:08:b4:29:80:21:70:b3:0e:74:86:52:2c:3c:ca:
                    0b:bf:2b:80:f8:e5:4d:f5:ec:c4:47:35:e9:74:40:
                    e5:87:c9:e0:cc:e7:0d:cc:b5:00:a3:49:d5:23:44:
                    e0:8b:13:18:90:c7:c7:24:f5:da:73:c4:46:12:0d:
                    ef:3e:5b:f3:76:36:fd:c9:88:40:29:2a:69:0e:8c:
                    ef:41:33:e7:d8:c0:ef:47:c0:1c:5b:c5:28:35:b9:
                    a1:36:cc:cb:ca:6c:31:29:a9:cd:0d:de:bb:cb:6f:
                    29:4d:a0:ca:59:ba:3a:93:80:ec:7a:7b:c7:48:e9:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6D:F2:6E:BA:03:E2:58:BB:F3:F7:5E:13:51:E3:5D:3E:87:73:06
            X509v3 Authority Key Identifier:
                keyid:E9:1C:C8:66:4D:1E:DA:98:A7:13:F6:DD:9D:1A:4B:F7:4D:95:BF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fe1bwuU4TxwH2VPBkDr5j5iJApgBprjot2oCi5CREiS2/0/E91CC8664D1EDA98A713F6DD9D1A4BF74D95BF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E91CC8664D1EDA98A713F6DD9D1A4BF74D95BF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fe1bwuU4TxwH2VPBkDr5j5iJApgBprjot2oCi5CREiS2/0/3230312e3231382e3136382e302f32322d3234203d3e20323731333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:f4:d9:f2:ce:8f:4b:21:ed:00:bd:9b:79:5b:ae:1c:30:74:
         b4:df:77:e0:15:15:67:35:81:29:9e:16:5f:b9:f4:6b:a0:2f:
         59:ed:2b:59:4a:62:e9:32:80:ec:0f:c7:88:24:14:00:02:97:
         53:88:89:99:37:2b:41:70:e6:df:34:88:a3:e3:ba:53:a9:35:
         1d:c6:4a:f0:17:60:81:f8:a3:c6:6c:3e:1c:e8:dc:d4:b6:76:
         33:77:8c:0f:dc:51:40:c3:38:e5:23:c1:64:2d:d3:49:3f:18:
         ac:f8:d7:2b:5c:06:ca:3f:10:06:9c:a6:29:79:10:96:d4:72:
         25:2f:01:87:e3:f8:a4:70:16:2b:31:3a:f7:22:05:be:42:f8:
         e2:d8:29:45:02:15:ec:ed:f1:02:a8:14:59:a4:b0:c5:fb:fe:
         7a:16:ba:57:b5:e5:1b:a6:4d:56:97:0f:8a:20:22:18:77:51:
         87:f1:83:64:6a:b9:c1:8a:a5:d6:fb:72:6e:50:e8:97:2a:9f:
         55:fd:03:95:87:fa:09:a9:e5:d0:1a:52:7e:03:1d:96:3f:31:
         a7:49:d6:19:90:84:e4:8b:fd:1a:a0:4b:4c:d5:e0:1f:0a:3c:
         86:92:ce:10:0e:54:59:63:f5:2e:b3:a6:f2:b8:87:66:6e:7a:
         e3:0a:5e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:55 2025 by rpki-client