Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa
File:                     3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa (raw, json)
Hash identifier:          Jd7wpcrN18qe9LsRmtVrcTVBOadBiHkCGKQgs3uQBbA=
Subject key identifier:   E6:97:2C:93:20:43:10:1F:EF:A7:43:39:C6:F5:D5:06:9F:09:F7:C3
Certificate issuer:       /CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
Certificate serial:       6AC31F4B4DCD1DA905E15211A19EB7A9936722AC
Authority key identifier: 22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa
Signing time:             Wed 22 Jan 2025 13:42:08 +0000
ROA not before:           Wed 22 Jan 2025 13:37:08 +0000
ROA not after:            Wed 21 Jan 2026 13:42:08 +0000
asID:                     262644
IP address blocks:        167.249.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:1f:4b:4d:cd:1d:a9:05:e1:52:11:a1:9e:b7:a9:93:67:22:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
        Validity
            Not Before: Jan 22 13:37:08 2025 GMT
            Not After : Jan 21 13:42:08 2026 GMT
        Subject: CN=E6972C932043101FEFA74339C6F5D5069F09F7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:3a:62:af:95:a1:a5:37:47:12:0e:ea:38:
                    72:aa:7f:27:c0:70:d3:e5:52:66:e9:9c:60:d3:7c:
                    c5:d3:3f:b5:31:b6:4d:cb:d8:55:a7:5c:98:c7:bc:
                    78:78:be:8f:7c:e3:ff:ec:c5:c6:dc:33:f7:cd:05:
                    12:d4:1f:51:01:4d:f3:7e:1a:e0:36:b5:9f:51:10:
                    21:bc:93:f2:d2:1e:a0:dc:b1:96:2d:8c:b7:2a:77:
                    47:35:b5:c3:2c:45:6a:80:2a:12:2a:23:f6:48:9f:
                    77:ab:00:9f:5b:bd:eb:5b:65:37:43:51:5d:89:22:
                    30:2b:09:ff:ae:c7:7a:26:f2:b9:ee:7e:b4:00:fb:
                    d4:36:c8:76:e8:b6:d3:9b:ab:f9:51:fa:1a:7a:5c:
                    1d:dc:3a:d5:6b:f4:a0:1f:2e:5b:73:d6:09:2c:cb:
                    15:99:d1:c2:3c:cf:06:48:b8:86:e5:45:c2:87:83:
                    b3:e3:f9:e2:8d:e2:e5:5d:bd:fb:dd:59:ba:83:e5:
                    d2:d4:0f:b2:1a:e4:86:b0:79:b2:0a:12:86:78:49:
                    62:52:db:53:67:b2:a3:c7:aa:f7:69:9b:fe:15:96:
                    9e:d6:db:94:c7:ed:d8:22:00:b7:ad:08:3a:76:67:
                    2b:2d:66:40:72:88:75:38:16:3f:46:c1:71:32:c3:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:2C:93:20:43:10:1F:EF:A7:43:39:C6:F5:D5:06:9F:09:F7:C3
            X509v3 Authority Key Identifier:
                keyid:22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:0a:af:f7:e1:14:b9:bb:09:5a:60:4d:f9:b4:38:af:50:08:
         76:41:4e:7a:7a:da:bf:4a:4e:6e:0c:d8:ba:ca:82:15:9c:08:
         72:01:aa:63:9d:57:13:e7:cc:a3:0d:7d:71:56:ee:9d:0f:4f:
         97:03:f4:9d:50:4c:f9:cd:75:76:6d:ab:18:e0:c9:7c:83:5c:
         14:2f:ee:15:dc:71:81:4e:71:cd:d8:a6:65:5e:96:5c:e0:f8:
         a1:e2:02:da:14:08:86:4a:ef:c8:3a:64:12:ec:1b:3f:85:58:
         16:4f:af:0c:ca:b3:eb:02:9b:b5:df:30:d2:7d:51:b1:6c:dc:
         d3:dd:f0:0e:d1:75:64:98:27:1f:47:22:ce:91:44:59:81:6f:
         8f:e0:27:d8:b5:d0:13:43:37:a7:e0:fd:da:96:d3:d2:42:d1:
         62:25:4a:ff:0a:13:23:a8:d9:47:2a:46:32:0b:a6:70:2a:1b:
         11:5a:a5:6d:92:fd:68:87:0c:eb:de:ad:d1:73:39:03:86:99:
         b5:14:65:0a:b8:33:31:f1:d7:bf:cc:7c:a2:38:41:70:0a:a8:
         e2:ea:5d:5c:0e:a5:4d:0f:8f:41:b3:b9:dc:f8:3a:d8:93:8f:
         ee:0f:d1:3a:4d:f8:01:8b:81:84:a1:4d:bb:c7:03:82:6e:12:
         46:79:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:29:29 2025 by rpki-client