Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230312e31362e36342e302f31382d3234203d3e203134383430.roa
File:                     3230312e31362e36342e302f31382d3234203d3e203134383430.roa (raw, json)
Hash identifier:          8rEy1cISveQy5yhnS+PoXGxPaM9J09lV2VgPcNduMwk=
Subject key identifier:   28:A1:FB:39:3B:C8:AF:47:EA:6C:56:29:B3:9D:C3:BC:78:C8:0B:99
Certificate issuer:       /CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
Certificate serial:       78B112C5FD3FD349109F6E03BFDA21850C3EDFBA
Authority key identifier: E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230312e31362e36342e302f31382d3234203d3e203134383430.roa
Signing time:             Thu 03 Nov 2022 21:46:57 +0000
ROA not before:           Thu 03 Nov 2022 21:41:57 +0000
ROA not after:            Thu 02 Nov 2023 21:46:57 +0000
asID:                     14840
IP address blocks:        201.16.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:12:c5:fd:3f:d3:49:10:9f:6e:03:bf:da:21:85:0c:3e:df:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
        Validity
            Not Before: Nov  3 21:41:57 2022 GMT
            Not After : Nov  2 21:46:57 2023 GMT
        Subject: CN=28A1FB393BC8AF47EA6C5629B39DC3BC78C80B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:66:a8:33:4b:5f:f1:be:3c:a5:c4:29:fc:
                    a7:ba:28:31:f5:41:3b:a7:ab:d3:68:ad:fa:50:da:
                    d3:1b:fa:3c:65:4f:4b:e6:cc:24:0c:cc:bd:37:ff:
                    c3:b8:e9:aa:08:af:14:08:9a:ea:d7:d6:84:e0:fc:
                    bc:b6:07:4b:6c:43:a3:82:6c:96:fb:0f:f4:1f:cc:
                    6a:b1:f5:18:b1:cd:a8:94:9e:5c:48:01:08:c4:85:
                    c4:b9:8d:65:69:c1:fc:97:2d:ac:eb:a8:4b:f3:24:
                    d3:84:3a:fb:07:71:82:7d:d5:a7:b6:96:bb:15:f2:
                    bf:e5:4e:ae:ee:20:ff:b2:1f:61:c4:f7:11:1d:8d:
                    ac:db:1f:c5:69:48:8c:c2:43:b0:cf:30:07:06:8e:
                    b6:7e:c4:1e:aa:f5:cf:b4:c3:ad:df:16:0e:12:88:
                    92:85:f7:bc:c0:c2:bd:ca:61:c1:43:06:8b:a9:d2:
                    69:d6:b5:05:7d:12:f5:94:9d:17:b1:bc:9d:79:83:
                    5c:18:06:ae:77:8d:42:2a:25:b5:8b:b6:31:13:55:
                    3c:6f:b5:02:6d:32:8b:54:b1:0f:d9:57:f2:1e:d7:
                    01:1f:c1:9a:54:98:82:f3:a4:ba:47:9f:92:e2:ed:
                    9a:eb:d8:cd:5b:b1:9b:62:e9:b4:77:3a:bc:53:54:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A1:FB:39:3B:C8:AF:47:EA:6C:56:29:B3:9D:C3:BC:78:C8:0B:99
            X509v3 Authority Key Identifier:
                keyid:E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230312e31362e36342e302f31382d3234203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d8:33:37:44:74:45:11:79:f7:44:a9:01:ff:72:72:00:01:d4:
         05:3d:ea:41:94:1b:71:b2:f2:cf:a0:09:f9:2d:11:79:93:54:
         39:a9:d2:e4:64:78:97:8f:35:e1:8b:ef:98:32:e5:3d:31:4d:
         22:e9:fc:cb:bb:e4:20:c6:aa:77:f0:b9:c2:6c:c4:a0:db:f8:
         82:1a:c4:e5:61:aa:3b:76:55:5e:94:3e:af:b6:d0:02:d5:f9:
         62:8c:3b:bc:3b:d2:23:dd:c3:5b:c4:fc:4d:eb:4e:cb:75:01:
         58:85:fa:bb:fd:b2:8a:69:02:53:2b:2e:c8:90:10:e1:da:10:
         f7:08:be:b3:b6:5a:53:0c:05:0e:75:90:34:46:73:72:6a:7a:
         25:a6:5b:b5:9e:3c:87:8d:d2:a4:aa:b1:1a:5d:f5:5f:7f:63:
         71:16:b5:48:da:d2:5d:4e:f6:ef:5d:3c:77:ab:6a:56:a1:54:
         32:59:51:7c:f8:6b:7d:e5:f9:f8:4a:51:b3:be:e5:db:0f:bd:
         f2:ed:85:7f:e4:79:57:96:08:05:f2:2e:ef:76:9d:03:12:3f:
         9e:02:63:12:37:79:a4:31:a7:9e:8f:ef:5f:31:7c:ac:47:b9:
         7f:ff:bf:3a:45:90:61:e2:17:61:91:3d:d0:6a:03:ef:c8:b5:
         fe:4b:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:44:40 2025 by rpki-client