Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34342e302f32332d3233203d3e20323632363938.roa
File:                     3138372e3130322e34342e302f32332d3233203d3e20323632363938.roa (raw, json)
Hash identifier:          nEmN6mebVODU812uMpm3g5hikYi4CXL1jj2dkQ1anSQ=
Subject key identifier:   5E:B3:5E:DE:B0:B1:3F:B4:D4:A1:01:F2:61:F0:9F:5C:D7:63:EE:94
Certificate issuer:       /CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
Certificate serial:       6E57F91CC570BF2AE5A9655F63C0B4C91E67EB91
Authority key identifier: FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34342e302f32332d3233203d3e20323632363938.roa
Signing time:             Wed 20 Apr 2022 20:19:24 +0000
ROA not before:           Wed 20 Apr 2022 20:14:24 +0000
ROA not after:            Wed 19 Apr 2023 20:19:24 +0000
asID:                     262698
IP address blocks:        187.102.44.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:f9:1c:c5:70:bf:2a:e5:a9:65:5f:63:c0:b4:c9:1e:67:eb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
        Validity
            Not Before: Apr 20 20:14:24 2022 GMT
            Not After : Apr 19 20:19:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:59:7e:84:c7:d4:c4:61:40:fc:80:ca:44:
                    a1:dc:85:0c:f0:4e:6e:19:50:e3:40:18:80:5a:b9:
                    16:b9:18:5e:f6:ad:14:a2:2a:99:ff:2e:12:66:b2:
                    3b:c3:69:1e:2d:e8:77:32:d8:a5:15:a6:91:49:65:
                    a3:31:26:b8:5a:23:1e:6e:04:27:47:cc:93:36:49:
                    a1:28:f9:66:a1:b0:99:1a:b5:0f:ec:a0:66:32:62:
                    20:30:60:60:8b:5a:9d:1e:ed:44:b9:20:74:ff:14:
                    62:d7:b0:00:85:38:f9:fa:6e:1d:eb:1e:e0:77:0f:
                    20:d0:14:af:0c:b7:53:82:e6:de:61:e0:77:f8:ff:
                    69:b1:ca:27:f7:42:49:6d:dc:df:65:bc:26:60:23:
                    b1:dc:ea:da:b7:61:eb:5a:f7:d0:ee:a1:af:0c:42:
                    e5:e7:72:a1:ac:3e:3c:03:bd:8b:42:dc:4e:b8:04:
                    41:33:e9:a2:76:24:e2:8f:e8:5d:d5:79:58:55:36:
                    bf:f6:8a:0b:63:8f:01:f6:43:bc:04:ed:a6:cf:f6:
                    f7:17:3f:fc:7c:5b:f1:f2:da:c3:2a:72:fe:18:18:
                    64:df:74:81:be:61:db:58:dd:2e:4a:80:bb:7e:a3:
                    ab:c6:8d:d1:d4:f7:23:09:b1:74:7c:33:3c:22:40:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:5E:DE:B0:B1:3F:B4:D4:A1:01:F2:61:F0:9F:5C:D7:63:EE:94
            X509v3 Authority Key Identifier:
                keyid:FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34342e302f32332d3233203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:a8:d6:08:be:88:55:68:d6:cc:93:2a:a9:08:17:05:5a:8b:
         44:24:98:3b:10:4e:18:ee:a1:6e:5e:90:16:e8:cd:25:76:d6:
         ac:6f:00:48:2a:1e:ae:eb:50:a8:3a:7f:5a:3e:21:4c:95:c4:
         fa:ba:3f:7e:e4:0f:90:6b:d3:29:bf:b8:06:a8:5e:d5:08:1c:
         ed:28:a2:b2:1c:b5:5e:ef:5c:7d:91:3b:88:dd:8b:56:c2:98:
         c6:53:47:3f:86:64:4a:2d:52:50:36:ee:64:c1:bc:8a:44:29:
         41:41:f2:b1:96:cd:9b:e0:79:41:08:75:c0:db:76:98:91:b8:
         80:91:07:22:81:f8:25:c7:42:99:11:b5:d6:c6:75:5f:91:a8:
         47:70:96:8d:f4:2d:6e:ce:29:ef:e5:cd:dc:23:ec:f7:95:fd:
         36:41:51:b0:9c:68:3d:1e:95:34:e6:ac:6d:42:42:48:c3:cf:
         94:c1:dc:3f:36:73:f1:0e:f8:5d:fc:57:cc:a4:5a:c5:04:21:
         b3:e1:9e:4e:85:09:03:7f:23:b6:75:0e:ad:82:44:c3:74:1f:
         10:3c:88:f9:5d:9e:89:18:15:cc:73:78:f4:4f:db:d7:7b:12:
         88:c7:73:f0:6f:e2:2a:24:18:31:a7:20:4c:1d:6c:69:d5:89:
         79:c1:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:28 2025 by rpki-client