Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32342d3234203d3e20323633323634.roa
File:                     3138362e3230392e3232322e302f32342d3234203d3e20323633323634.roa (raw, json)
Hash identifier:          tlPh+c/RALru+wI0oBDzjxjCSmOXZNZcQ/RuoogkhU4=
Subject key identifier:   95:E7:A0:01:D5:CC:7A:37:50:3B:FC:77:25:61:04:0A:A0:E8:7A:99
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       0E7718587EFFB7BB534895FD751E91DC95D38406
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32342d3234203d3e20323633323634.roa
Signing time:             Wed 25 Jan 2023 20:47:25 +0000
ROA not before:           Wed 25 Jan 2023 20:42:25 +0000
ROA not after:            Wed 24 Jan 2024 20:47:25 +0000
asID:                     263264
IP address blocks:        186.209.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:18:58:7e:ff:b7:bb:53:48:95:fd:75:1e:91:dc:95:d3:84:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: Jan 25 20:42:25 2023 GMT
            Not After : Jan 24 20:47:25 2024 GMT
        Subject: CN=95E7A001D5CC7A37503BFC772561040AA0E87A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:46:3c:44:17:be:dc:c7:a9:39:a4:7c:44:
                    ee:65:24:55:1d:e1:f7:17:3d:fe:46:55:db:27:1b:
                    0a:f1:ba:d7:3d:a0:c0:64:62:f7:eb:d2:31:4f:06:
                    0f:c8:d6:40:83:8c:e8:6a:81:04:87:85:ce:38:b0:
                    63:79:c6:6e:9e:9f:28:0a:7c:fb:dd:94:a2:56:db:
                    4f:cc:8f:16:f4:b8:ba:a5:ec:e4:d8:fc:b7:4b:dd:
                    fc:e1:c2:f7:a0:80:f7:9a:dc:8d:44:2c:d6:5a:26:
                    f1:cf:0c:29:5f:ef:b4:d7:4a:03:a5:38:d6:6c:51:
                    f7:47:90:c9:bf:cf:2f:6e:ce:1c:a1:d1:7c:c3:da:
                    eb:97:f6:22:d6:a1:2b:12:b5:b2:d6:73:29:02:60:
                    84:bf:f3:46:26:08:9c:ba:24:2d:75:26:e7:f8:59:
                    43:ee:7b:77:69:98:a8:0e:58:31:42:4b:6f:20:9e:
                    69:99:7b:aa:74:a0:d5:7c:96:7c:17:a5:b3:a9:f5:
                    01:3b:7b:84:89:01:5a:99:3a:11:35:56:b7:55:c5:
                    4a:2c:00:2e:31:bc:4a:8d:6c:87:da:a5:d1:2c:12:
                    17:44:fa:75:52:73:5f:f7:8f:38:fe:f6:10:fe:82:
                    4b:ba:02:0b:d9:e8:a8:fb:76:04:ea:a1:85:4b:7c:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:A0:01:D5:CC:7A:37:50:3B:FC:77:25:61:04:0A:A0:E8:7A:99
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32342d3234203d3e20323633323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:21:2b:39:12:5e:fd:d1:1a:21:5e:fb:04:80:a0:85:5f:d3:
         ea:58:80:b7:51:f1:d2:66:5b:e4:74:d2:37:4c:76:eb:47:2b:
         b4:04:51:05:9c:fa:40:2e:d0:d2:f0:af:42:56:ef:7c:21:06:
         7b:0a:2e:29:7d:a1:c4:e2:b2:cc:50:60:c6:73:10:51:03:2f:
         b7:e8:40:63:00:f9:7d:0a:08:5d:ff:39:1f:4d:f5:15:d4:c0:
         cf:8f:cd:0c:b2:79:53:da:0d:01:37:9d:5f:e0:b2:dc:e6:0a:
         b1:87:4e:24:74:0e:76:cb:0b:de:26:ff:f5:2f:20:7b:df:8e:
         13:72:25:51:8f:f5:04:46:2e:4f:e3:7d:eb:3c:f2:2c:14:51:
         b4:89:2e:43:f9:e8:9c:48:fe:c3:1d:4c:35:44:89:b8:d6:b9:
         43:de:1c:50:f3:2d:7a:6b:4c:3d:a1:10:83:87:9f:b2:90:3c:
         53:f4:01:8b:be:82:c2:b3:dc:c6:13:4c:4e:55:64:85:cb:64:
         c1:49:a7:28:f8:ce:4a:51:20:2f:bc:bf:9f:04:e4:ab:a6:79:
         6e:a8:06:74:d4:2c:b6:d0:30:cb:bb:f9:c6:cd:58:25:d0:8f:
         59:40:29:68:7a:4b:4a:d7:93:dd:42:5c:72:97:fb:59:5a:2a:
         a8:52:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:01 2025 by rpki-client