Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32322d3232203d3e20323633333236.roa
File:                     3139312e372e3137362e302f32322d3232203d3e20323633333236.roa (raw, json)
Hash identifier:          iOQdLzu+WKuzLAV0grEoetX6vU2uNwaw0cNlNG2rdmY=
Subject key identifier:   87:1D:4D:32:E8:7E:96:43:1D:89:00:BC:42:C3:FA:10:E7:39:CD:72
Certificate issuer:       /CN=6787DF814FEA422F8EC55C4419AF95E22A6E49EB
Certificate serial:       182BD93C4975808942E5F90CD6109D10B2B49C6E
Authority key identifier: 67:87:DF:81:4F:EA:42:2F:8E:C5:5C:44:19:AF:95:E2:2A:6E:49:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6787DF814FEA422F8EC55C4419AF95E22A6E49EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32322d3232203d3e20323633333236.roa
Signing time:             Wed 05 Oct 2022 14:14:42 +0000
ROA not before:           Wed 05 Oct 2022 14:09:42 +0000
ROA not after:            Wed 04 Oct 2023 14:14:42 +0000
asID:                     263326
IP address blocks:        191.7.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2b:d9:3c:49:75:80:89:42:e5:f9:0c:d6:10:9d:10:b2:b4:9c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6787DF814FEA422F8EC55C4419AF95E22A6E49EB
        Validity
            Not Before: Oct  5 14:09:42 2022 GMT
            Not After : Oct  4 14:14:42 2023 GMT
        Subject: CN=871D4D32E87E96431D8900BC42C3FA10E739CD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:f4:6c:38:44:9d:df:2e:a0:74:0b:ed:7e:
                    d7:1c:f7:b6:65:70:6d:5e:d5:e7:67:1d:fb:ae:9a:
                    d2:87:99:f1:34:ff:5d:77:5a:ea:9c:81:38:8e:d8:
                    5b:54:7f:fd:50:59:70:96:ed:23:60:1d:3f:55:e3:
                    51:87:29:36:e5:55:f2:5d:39:b0:08:b8:ac:62:35:
                    d3:d7:de:ad:06:12:ef:81:71:91:95:ce:95:44:56:
                    88:98:74:cd:5b:cc:d9:16:d2:ad:0f:0f:31:35:84:
                    59:d8:90:9a:aa:a4:a3:84:09:de:e7:23:da:a5:80:
                    79:30:5e:b2:b5:01:53:b0:20:79:05:01:65:42:0c:
                    c1:c0:1a:34:a6:8e:f2:96:2b:75:c7:e9:09:79:fc:
                    a9:38:e8:68:32:74:3a:5c:fe:36:bb:bd:5a:3a:e0:
                    2f:4f:ec:8a:0e:f6:07:e7:8c:82:c8:c5:9c:af:74:
                    c6:95:a4:2e:ec:b9:d1:6c:80:e9:51:26:64:2e:96:
                    31:23:27:f0:cd:84:a7:d4:52:b4:b8:79:6d:d8:26:
                    b5:4f:c2:cc:2f:c9:f1:cc:f6:e2:8a:80:95:06:d6:
                    fe:ce:1c:34:ad:e8:af:b7:3b:0b:b4:74:e1:77:a7:
                    85:4e:8f:45:27:00:95:aa:d7:74:84:47:45:76:9f:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1D:4D:32:E8:7E:96:43:1D:89:00:BC:42:C3:FA:10:E7:39:CD:72
            X509v3 Authority Key Identifier:
                keyid:67:87:DF:81:4F:EA:42:2F:8E:C5:5C:44:19:AF:95:E2:2A:6E:49:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/6787DF814FEA422F8EC55C4419AF95E22A6E49EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6787DF814FEA422F8EC55C4419AF95E22A6E49EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32322d3232203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:59:7f:ea:fa:1a:67:98:94:00:6f:86:49:66:b1:96:81:
         38:b2:f2:54:f4:ff:1b:89:d8:a5:f0:82:76:5e:3b:26:96:8e:
         f3:b4:28:7d:09:37:fa:40:3c:6e:66:50:cc:0a:e2:ba:21:fc:
         52:88:53:36:cc:e2:ba:37:5d:8b:78:e6:98:b2:bb:62:6c:b5:
         d6:da:cd:7a:01:ff:f1:42:57:39:76:2f:09:9c:e1:43:9a:32:
         96:96:87:49:62:9a:17:cf:46:cb:25:8c:3c:74:a1:f5:67:91:
         bf:ec:b3:8c:42:24:21:2f:53:ab:a3:f0:86:de:cf:c3:89:39:
         e4:e7:86:90:7c:64:0b:3a:ba:f7:ea:f8:6e:4a:81:d6:9f:22:
         ed:ec:55:bd:43:67:91:f3:58:70:6e:fb:31:1d:4e:f4:31:6f:
         87:a1:11:71:c0:22:68:71:a1:3d:02:08:33:fd:44:50:cc:2d:
         d0:a2:60:fe:7e:3c:81:a2:9f:f0:35:8b:25:ab:4c:1b:16:72:
         28:9d:f3:39:21:6d:51:0e:28:44:63:79:6a:8e:1f:57:bd:a1:
         56:37:22:b4:87:5b:7e:74:6f:2b:4a:30:32:f5:bc:ac:a4:16:
         b2:d2:7d:1a:19:87:1f:22:aa:c7:e2:47:6e:eb:a2:89:b3:ef:
         a0:aa:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:23:27 2025 by rpki-client