Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34362e302f32332d3233203d3e20323632363938.roa
File:                     3138372e3130322e34362e302f32332d3233203d3e20323632363938.roa (raw, json)
Hash identifier:          d7R8f2DioiSTli4hqoHEcMUsGkpFZGoZN94knoV+AkY=
Subject key identifier:   90:5D:4B:F4:94:20:E3:AC:1A:F1:B6:AD:51:CD:01:D3:60:00:78:FD
Certificate issuer:       /CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
Certificate serial:       731D22C0650001D29F71EDA9DA4C8F7B67248A7A
Authority key identifier: FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34362e302f32332d3233203d3e20323632363938.roa
Signing time:             Thu 14 Oct 2021 01:51:42 +0000
ROA not before:           Thu 14 Oct 2021 01:46:42 +0000
ROA not after:            Thu 13 Oct 2022 01:51:42 +0000
asID:                     262698
IP address blocks:        187.102.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1d:22:c0:65:00:01:d2:9f:71:ed:a9:da:4c:8f:7b:67:24:8a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE1EA931EE531E8E42E4943EAD18922730F2B334
        Validity
            Not Before: Oct 14 01:46:42 2021 GMT
            Not After : Oct 13 01:51:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:e5:57:35:ce:c7:f3:8a:93:84:86:08:cb:
                    0e:c6:ce:71:47:ef:b5:45:dd:b4:3b:fc:81:dc:e4:
                    4d:c6:d0:8f:9b:40:68:d0:e1:36:dd:93:6d:e3:96:
                    fa:88:b6:79:1f:89:ba:c1:05:df:7e:93:0c:de:f2:
                    b3:87:37:30:08:58:7b:74:10:02:14:d2:f1:1b:29:
                    16:c2:25:38:dc:9d:90:b5:dd:36:68:3c:fb:d6:e7:
                    87:c5:cb:92:78:98:45:59:e2:48:7c:70:e4:83:43:
                    33:81:5b:cb:b7:ab:4a:1e:06:39:3d:80:27:d2:92:
                    38:ea:44:9e:d2:e9:f5:46:8e:cc:54:bb:59:12:98:
                    0a:a0:69:1c:59:c5:8f:b1:73:7f:4a:41:43:06:4c:
                    a6:65:ea:6e:dc:4c:b4:ee:e5:b0:41:b3:b5:12:58:
                    a9:6e:5c:5d:cb:17:74:93:80:7d:2b:ce:d9:49:78:
                    bb:72:7c:43:d8:4c:c1:72:7a:90:86:97:51:01:13:
                    54:54:ba:64:6b:70:62:70:c1:b8:b3:97:ce:51:d4:
                    24:fc:9c:89:00:1d:60:3d:e8:2c:d1:b3:60:ac:59:
                    68:7d:de:f1:1d:08:27:f6:fb:03:72:fa:dd:32:b1:
                    e9:9f:e4:ce:c7:6d:31:91:a9:c6:ee:a5:5b:08:57:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:4B:F4:94:20:E3:AC:1A:F1:B6:AD:51:CD:01:D3:60:00:78:FD
            X509v3 Authority Key Identifier:
                keyid:FE:1E:A9:31:EE:53:1E:8E:42:E4:94:3E:AD:18:92:27:30:F2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE1EA931EE531E8E42E4943EAD18922730F2B334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34362e302f32332d3233203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:52:91:17:2b:96:ec:f3:36:03:60:ae:06:f9:64:3a:df:96:
         b6:92:e3:0b:4f:d1:5b:a8:2a:e8:d7:b8:5f:e0:e3:1c:e9:07:
         c8:1b:7e:66:9b:52:41:18:40:41:df:5e:a7:4c:b9:59:71:ba:
         7d:c0:c3:4e:4c:60:1b:d7:f1:40:6b:35:6f:9d:b4:ae:62:40:
         cf:b4:02:05:79:d8:29:3d:c0:fc:0c:65:ea:38:df:ca:83:bf:
         f3:e6:11:60:a5:ff:26:0f:26:64:8b:a3:07:b2:5f:a6:06:56:
         06:04:47:af:b3:1f:a4:cb:3b:f5:65:54:a9:e5:a4:43:9f:7c:
         d3:f7:f9:f5:67:ee:dd:66:9c:d6:fd:6b:21:de:ae:ca:1f:da:
         31:f3:a7:35:bc:4b:ee:55:09:26:1f:ca:54:38:f7:04:b5:0d:
         22:85:99:f5:f1:9b:4f:bf:93:e5:76:4a:c3:1c:28:3e:e7:6f:
         12:f1:68:5a:3e:a9:9e:c2:96:f0:b2:76:2c:32:f0:26:9a:25:
         a6:95:5f:74:1e:e4:4c:20:c0:e1:08:13:73:00:f8:d9:90:f1:
         2b:55:45:4f:ee:ea:23:24:1b:93:1b:99:e9:d6:59:61:34:30:
         1a:5d:a2:9f:43:f7:06:cf:98:6e:9f:b4:47:4e:19:64:ec:57:
         b2:92:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:50 2025 by rpki-client