Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32342d3234203d3e20323635393730.roa
File:                     3136342e3136332e3139322e302f32342d3234203d3e20323635393730.roa (raw, json)
Hash identifier:          +tAxxoLn1TFKHlwq504Yl1HAhwYOAPhrPYp7doS6oXk=
Subject key identifier:   A5:2E:0B:F1:14:C0:A8:D8:C3:BD:B7:39:E5:DD:02:70:EE:7F:E5:FD
Certificate issuer:       /CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
Certificate serial:       5FE3526BCE953F2E6E2A235D87387F3208E25A07
Authority key identifier: 6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32342d3234203d3e20323635393730.roa
Signing time:             Tue 11 Jan 2022 10:56:00 +0000
ROA not before:           Tue 11 Jan 2022 10:51:00 +0000
ROA not after:            Tue 10 Jan 2023 10:56:00 +0000
asID:                     265970
IP address blocks:        164.163.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e3:52:6b:ce:95:3f:2e:6e:2a:23:5d:87:38:7f:32:08:e2:5a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
        Validity
            Not Before: Jan 11 10:51:00 2022 GMT
            Not After : Jan 10 10:56:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:5d:66:97:64:b7:de:84:63:eb:44:50:f2:
                    e8:1e:47:be:39:62:5b:ea:e8:c8:b3:b6:9d:98:73:
                    88:a9:35:7f:c8:02:2e:fd:b5:62:88:d6:17:b7:7d:
                    44:bf:90:59:2d:af:1f:55:32:92:e6:9d:34:09:e6:
                    f4:f3:9d:c0:79:84:d6:9c:4e:f7:f4:a2:4a:15:65:
                    72:04:8d:b6:b8:01:16:46:27:d8:05:f6:e4:ca:e3:
                    a3:32:38:a3:29:d4:d1:69:36:2b:f6:cc:f2:21:b9:
                    06:60:27:ce:41:bd:ca:6a:c8:11:bb:15:a8:d1:45:
                    7f:46:5d:08:00:ea:72:20:19:6d:99:b4:40:79:7e:
                    f2:66:73:74:2d:a1:bb:ce:d6:73:d6:6f:f8:7b:9b:
                    45:a9:09:82:3e:7c:02:19:55:0d:2b:bf:20:4b:c1:
                    85:5d:de:40:06:09:a0:44:58:58:45:63:dd:04:60:
                    fd:8a:71:fd:3b:6c:38:4e:da:a3:b4:5e:df:28:bc:
                    bc:10:7f:73:48:be:81:64:7b:87:f1:13:56:51:b0:
                    aa:76:da:b3:8b:f0:38:43:1b:98:3d:ff:ef:f6:29:
                    a7:bc:ef:33:86:af:db:b5:dc:6f:32:6a:21:b3:a3:
                    25:d5:69:61:3c:09:e4:75:e1:86:f7:7d:03:c0:fb:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2E:0B:F1:14:C0:A8:D8:C3:BD:B7:39:E5:DD:02:70:EE:7F:E5:FD
            X509v3 Authority Key Identifier:
                keyid:6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32342d3234203d3e20323635393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:57:48:84:e8:97:29:aa:20:42:ea:4e:c1:0a:ef:be:9e:
         e0:4f:ab:88:e9:25:ac:92:a3:c6:c1:75:7f:1b:f9:9e:6a:bb:
         b4:d0:7b:d5:bc:6a:a7:cc:7f:58:34:29:d8:de:24:3d:c1:63:
         39:81:3a:72:27:2d:21:16:2a:dc:93:57:ff:27:44:46:bd:24:
         85:bb:9a:ac:cd:49:5e:a2:07:4d:0e:f7:55:7c:be:32:11:67:
         61:94:fc:f0:e7:85:1c:9f:7e:11:0d:44:a5:eb:b6:81:51:80:
         e0:f3:bd:e6:4c:ff:bc:0a:78:87:7e:dd:1c:2d:7b:63:d0:6c:
         d9:12:58:f8:f8:a5:86:b2:fb:fa:89:75:0e:9c:05:d9:ce:33:
         f3:e4:77:7c:2f:c7:09:37:01:c7:ea:e4:ee:fe:26:56:dd:ef:
         b7:fb:83:da:a5:82:cb:c1:7f:6c:3c:f8:15:9f:67:64:2d:b2:
         6f:bc:d2:ec:d2:c1:60:3f:40:0c:6a:20:61:e2:24:1c:c3:61:
         79:cb:da:d9:21:d8:00:67:1c:1e:c5:f3:a7:ab:86:d9:89:f3:
         5e:e1:c2:cc:48:20:1f:89:75:eb:8e:f2:86:7c:02:4a:b6:94:
         53:52:79:1c:81:b3:f0:53:8a:df:a4:4a:c5:41:97:ce:7b:83:
         06:3d:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:16:58 2025 by rpki-client