Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32332d3233203d3e20323635393730.roa
File:                     3136342e3136332e3139322e302f32332d3233203d3e20323635393730.roa (raw, json)
Hash identifier:          g9EzuojpcNxzG7dZUI+/F3OiYJCjkVNMXC7SjI3hHpQ=
Subject key identifier:   A7:77:A1:30:59:C3:AA:61:5F:6D:E4:49:2C:22:83:75:7C:EF:1C:7C
Certificate issuer:       /CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
Certificate serial:       6EC9D2139BE5865CDD02C1E30391434B5C3AAED2
Authority key identifier: 6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32332d3233203d3e20323635393730.roa
Signing time:             Tue 11 Jan 2022 10:54:00 +0000
ROA not before:           Tue 11 Jan 2022 10:49:00 +0000
ROA not after:            Tue 10 Jan 2023 10:54:00 +0000
asID:                     265970
IP address blocks:        164.163.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c9:d2:13:9b:e5:86:5c:dd:02:c1:e3:03:91:43:4b:5c:3a:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
        Validity
            Not Before: Jan 11 10:49:00 2022 GMT
            Not After : Jan 10 10:54:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:57:17:ee:1f:e1:61:d5:c9:3e:00:0f:31:
                    83:df:ba:30:1d:a3:35:38:35:0e:e4:36:58:84:04:
                    58:03:c3:69:1c:05:0e:5b:e3:44:3a:96:0f:3b:e6:
                    9d:74:80:0f:3f:f6:76:63:0f:e1:fa:6f:1c:07:eb:
                    6e:3a:5d:7f:93:57:76:f6:88:1a:41:b0:be:e6:bf:
                    57:4e:b2:65:a9:06:29:77:ea:40:48:af:45:ba:64:
                    c6:ae:2c:ce:df:61:10:00:fc:a8:a8:57:d9:3d:c2:
                    3f:10:20:45:ba:44:29:14:b8:2e:0b:69:71:54:bf:
                    a7:22:03:a4:1d:ab:c3:62:e2:a2:f8:81:7c:c8:d6:
                    b0:7b:45:1e:63:75:df:4f:8d:9e:89:50:e5:94:39:
                    63:16:36:a8:2b:d0:98:25:48:a5:c1:6e:15:fb:9a:
                    75:b8:51:59:06:eb:9e:4b:b3:b4:62:5b:a6:7f:d1:
                    71:b1:65:3b:7c:4d:54:87:e2:d0:a3:c2:da:ee:b9:
                    66:b2:47:db:b5:46:5c:2b:7d:18:d2:c3:0e:77:4c:
                    5d:e2:9d:44:4c:e9:6f:42:aa:ad:58:ce:a6:9a:82:
                    1c:cb:a1:36:78:eb:88:7b:b7:46:66:6a:89:92:3e:
                    f0:5a:74:71:08:dd:34:65:0c:a0:cd:1b:25:9d:de:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:77:A1:30:59:C3:AA:61:5F:6D:E4:49:2C:22:83:75:7C:EF:1C:7C
            X509v3 Authority Key Identifier:
                keyid:6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32332d3233203d3e20323635393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:20:7b:34:e2:ab:10:f0:90:ad:09:74:11:e0:83:4d:ce:a8:
         7e:8c:dd:27:4a:25:71:15:5e:ac:b3:15:81:e4:01:e5:3e:16:
         41:05:ea:95:c7:01:2a:60:b6:90:97:9e:aa:b9:17:e0:88:c0:
         37:7b:f2:67:d2:bd:0b:1a:01:fa:22:4c:d7:27:1b:41:d0:9a:
         6d:39:60:78:f7:bb:97:29:87:d8:56:32:30:f5:9b:ae:98:64:
         de:e7:32:f9:d4:b0:ae:28:91:bf:ac:92:7d:6f:07:5c:bd:47:
         db:6f:80:1d:96:21:6b:1b:db:62:e7:28:d2:4f:b9:05:db:40:
         eb:b6:61:28:22:3e:38:e4:65:c1:2f:9a:23:93:50:2d:b3:89:
         de:c6:4d:69:ee:ee:1b:8b:51:7d:95:63:57:3f:ff:f3:d9:24:
         b0:13:db:cb:78:5c:83:e3:f7:93:ae:ae:14:39:49:12:4b:3b:
         40:f5:e1:28:b3:61:a5:5d:44:66:88:90:91:ad:1a:49:36:09:
         cd:29:eb:ad:3e:65:78:1a:9a:5a:a5:e8:6d:c4:86:bd:19:57:
         dc:ff:78:37:f1:fb:a9:3f:02:e0:55:d4:83:39:6d:a7:a0:1d:
         e6:ea:d6:a1:bd:4f:bf:44:45:28:20:6f:03:77:e6:9c:36:fb:
         7f:a8:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:00 2025 by rpki-client