Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/3136342e3136332e3134332e302f32342d3234203d3e20323635393632.roa
File:                     3136342e3136332e3134332e302f32342d3234203d3e20323635393632.roa (raw, json)
Hash identifier:          MY2bjxcU3Xk2pOWJ0gkfstYfWBHz78eQNay6YxhaICE=
Subject key identifier:   34:EC:B8:BE:6C:70:12:5E:E3:2E:40:1B:7E:55:9B:05:72:39:9A:CB
Certificate issuer:       /CN=B341456AAC05E98AB06981D07165A60E8AB6CE88
Certificate serial:       2E6AC755204C439C88E1BBD3548D141A88307BD8
Authority key identifier: B3:41:45:6A:AC:05:E9:8A:B0:69:81:D0:71:65:A6:0E:8A:B6:CE:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B341456AAC05E98AB06981D07165A60E8AB6CE88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/3136342e3136332e3134332e302f32342d3234203d3e20323635393632.roa
Signing time:             Tue 12 Jul 2022 18:39:00 +0000
ROA not before:           Tue 12 Jul 2022 18:34:00 +0000
ROA not after:            Tue 11 Jul 2023 18:39:00 +0000
asID:                     265962
IP address blocks:        164.163.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6a:c7:55:20:4c:43:9c:88:e1:bb:d3:54:8d:14:1a:88:30:7b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B341456AAC05E98AB06981D07165A60E8AB6CE88
        Validity
            Not Before: Jul 12 18:34:00 2022 GMT
            Not After : Jul 11 18:39:00 2023 GMT
        Subject: CN=34ECB8BE6C70125EE32E401B7E559B0572399ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:35:97:5e:4b:93:5f:53:d1:0c:47:f4:a3:
                    24:e3:6d:5d:ee:53:ea:4c:c1:20:7b:ba:49:aa:cb:
                    fc:13:27:91:82:61:3b:e4:02:aa:0b:46:b6:de:1e:
                    8a:07:b2:8f:98:8c:a7:38:6b:bf:d8:2a:f4:b9:73:
                    d2:c0:d0:dd:08:8d:37:5b:69:1e:c8:a7:d7:7d:d6:
                    ee:20:11:37:5c:59:e4:8c:1e:d1:90:bc:80:fc:d9:
                    70:db:d1:6f:b7:ac:75:b2:fe:a8:d5:28:25:fa:d0:
                    fd:8c:5d:a9:6a:9e:9a:e2:ce:97:83:48:57:f8:3b:
                    b6:49:26:76:d7:25:3f:c0:ec:21:49:c5:3c:4d:21:
                    7c:dc:bb:45:90:49:a3:c4:b4:27:66:70:7a:b8:de:
                    73:cc:75:9f:d3:8f:73:61:83:e3:07:0c:ea:3b:ec:
                    b7:9f:08:e1:48:7d:78:3c:b3:ba:3f:e0:1e:db:f9:
                    f6:81:6a:9c:5b:1b:03:11:b9:4a:9f:6b:08:17:7f:
                    fe:a0:ef:2c:31:79:cc:c4:89:d3:e9:8f:7f:69:86:
                    db:40:42:cf:fb:ec:e6:44:d7:1c:45:91:bd:d1:8b:
                    ec:74:6f:eb:b4:29:88:83:13:96:a3:b9:93:9d:be:
                    f1:e2:9c:5a:51:84:14:59:4d:05:7c:4a:9e:13:bf:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:B8:BE:6C:70:12:5E:E3:2E:40:1B:7E:55:9B:05:72:39:9A:CB
            X509v3 Authority Key Identifier:
                keyid:B3:41:45:6A:AC:05:E9:8A:B0:69:81:D0:71:65:A6:0E:8A:B6:CE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/B341456AAC05E98AB06981D07165A60E8AB6CE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B341456AAC05E98AB06981D07165A60E8AB6CE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/3136342e3136332e3134332e302f32342d3234203d3e20323635393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:c0:60:a8:48:af:f6:3d:a1:78:03:3d:f5:5f:7b:51:b5:
         a9:b5:77:71:cd:7b:a5:8b:7a:62:d2:34:2e:9d:89:8a:e1:08:
         a2:61:83:1b:30:96:fe:00:0c:49:9b:3c:24:85:99:0f:ad:40:
         9c:87:e7:f4:db:04:79:14:8a:66:6d:00:21:91:86:63:5a:1d:
         29:60:38:7f:4a:ac:03:75:e9:dc:f0:d4:58:23:1f:51:9d:ec:
         11:60:46:ab:3c:14:0a:20:70:01:10:ee:15:f2:14:70:42:e6:
         f2:04:61:7a:8d:67:e6:cb:af:5f:2a:ce:43:35:30:27:f9:d9:
         70:70:9d:bf:0a:bf:04:0d:9e:58:da:d3:42:f7:81:84:62:9e:
         69:11:f6:6f:b9:c5:50:a5:37:11:dd:5b:8e:00:d4:e0:77:2d:
         5f:c2:f0:4b:7f:21:70:b0:32:bb:e3:19:bc:d5:07:be:7f:e8:
         2a:00:b0:37:4e:04:a0:bb:99:1b:ce:81:7d:b5:0f:b4:26:90:
         77:31:ec:8d:a3:50:16:db:d3:d9:b4:df:71:06:20:da:95:c8:
         ed:ad:e5:c3:f4:6d:2d:cd:90:a7:10:1a:3e:59:d1:bf:2b:ea:
         1a:e6:38:35:1f:72:8a:45:56:73:4d:83:e9:ee:fc:4a:17:7e:
         a1:27:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:52:08 2025 by rpki-client