Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/2/3138362e3233332e39362e302f32322d3232203d3e20323632373836.roa
File:                     3138362e3233332e39362e302f32322d3232203d3e20323632373836.roa (raw, json)
Hash identifier:          Kcw+Ro60JRmAocFlX48ohGt7GntJOKdKTbL+MjfZE2I=
Subject key identifier:   99:02:1B:A4:16:9C:A1:9B:E9:26:AB:8D:0B:3C:B6:7C:86:C8:48:FA
Certificate issuer:       /CN=12805771EEAD698BC62B96B7C3007ACFF7519C31
Certificate serial:       15211091FF075740A954B0BCB7450E47AAB92DF9
Authority key identifier: 12:80:57:71:EE:AD:69:8B:C6:2B:96:B7:C3:00:7A:CF:F7:51:9C:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12805771EEAD698BC62B96B7C3007ACFF7519C31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/2/3138362e3233332e39362e302f32322d3232203d3e20323632373836.roa
Signing time:             Mon 24 Oct 2022 16:44:31 +0000
ROA not before:           Mon 24 Oct 2022 16:39:31 +0000
ROA not after:            Mon 23 Oct 2023 16:44:31 +0000
asID:                     262786
IP address blocks:        186.233.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:21:10:91:ff:07:57:40:a9:54:b0:bc:b7:45:0e:47:aa:b9:2d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12805771EEAD698BC62B96B7C3007ACFF7519C31
        Validity
            Not Before: Oct 24 16:39:31 2022 GMT
            Not After : Oct 23 16:44:31 2023 GMT
        Subject: CN=99021BA4169CA19BE926AB8D0B3CB67C86C848FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:6a:a3:e2:d9:af:20:1b:9e:87:af:f1:3c:
                    da:5a:ec:c2:df:dc:7c:7b:3b:dd:ff:e3:01:71:95:
                    c4:b4:86:b8:2b:19:3f:77:db:fd:34:b2:46:48:70:
                    be:c3:17:e7:29:60:71:df:d1:0f:db:02:cd:96:30:
                    e2:c1:46:ec:f3:a8:e3:8c:94:ed:71:53:50:e6:16:
                    7f:59:f8:b4:5d:b8:ca:43:d3:49:73:97:a1:8d:9a:
                    a1:3d:c9:d9:f8:f0:75:ca:ec:b3:ed:91:8a:56:e8:
                    e0:5c:a4:39:64:67:db:bc:c1:43:f2:66:91:3c:4e:
                    49:69:47:a0:f2:ec:4f:a9:63:3f:ff:72:98:65:94:
                    85:6a:de:3e:39:ab:85:1d:f1:63:3f:30:e4:cd:af:
                    3c:95:7e:e1:89:61:26:0b:af:d3:4a:8a:4a:f6:eb:
                    75:00:ef:a5:86:c2:2e:20:97:57:95:cf:64:5e:51:
                    d8:7e:23:56:23:68:81:8b:15:e0:44:8e:ae:a2:f3:
                    29:53:4a:c8:8a:a8:63:e0:16:50:4e:e7:15:fd:92:
                    41:bf:76:93:0e:c3:4c:75:47:5c:d9:39:3d:0e:68:
                    85:ca:de:d2:c5:d8:d6:67:45:13:33:39:4f:82:74:
                    3d:41:b6:9a:35:46:5e:4c:91:e7:05:f2:a6:3b:60:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:1B:A4:16:9C:A1:9B:E9:26:AB:8D:0B:3C:B6:7C:86:C8:48:FA
            X509v3 Authority Key Identifier:
                keyid:12:80:57:71:EE:AD:69:8B:C6:2B:96:B7:C3:00:7A:CF:F7:51:9C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/2/12805771EEAD698BC62B96B7C3007ACFF7519C31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12805771EEAD698BC62B96B7C3007ACFF7519C31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/2/3138362e3233332e39362e302f32322d3232203d3e20323632373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:bb:34:30:a4:0f:b2:3b:ff:35:9e:a5:cc:ad:e8:b6:a2:
         27:75:16:49:81:60:e8:c5:46:47:0b:b5:74:36:c3:77:5a:89:
         e6:75:e6:c8:23:14:5a:c6:b3:fd:4e:e1:6a:94:c1:2b:96:52:
         60:38:0b:1b:f5:99:cf:6b:f4:53:e3:1d:9c:f0:c8:37:33:f5:
         cd:04:fa:03:e3:fe:2a:49:18:09:ce:0f:85:e8:8d:ad:9e:6c:
         9d:a4:a3:d9:91:ff:63:9f:f7:6d:2e:77:82:cc:17:6c:4a:84:
         e7:a3:e5:89:a2:40:97:2e:af:d3:3d:4c:f1:09:30:d3:9e:cd:
         dd:7e:50:6c:d3:9f:5d:98:e8:ae:28:83:d6:f5:e2:9d:b6:9e:
         59:a7:8c:ba:c0:56:75:a5:e1:40:ce:6c:ad:25:4c:a4:0d:7b:
         a3:d3:92:48:3a:26:86:bf:b1:2b:1f:11:84:98:48:92:71:45:
         03:97:fa:d3:4a:a9:82:e4:5f:14:8c:c2:e3:3e:ac:19:90:d8:
         8b:46:09:cc:58:c1:e3:25:6c:21:5c:51:a8:31:84:b0:7a:42:
         f1:5e:e4:be:28:77:07:86:0c:ed:dc:53:e6:35:eb:17:5f:8d:
         f0:ae:ed:1e:37:29:89:60:7d:8d:8e:91:ea:1f:b4:0e:58:0b:
         32:a2:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:20 2025 by rpki-client