Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/3132382e3230312e39322e302f32322d3234203d3e20323636363231.roa
File:                     3132382e3230312e39322e302f32322d3234203d3e20323636363231.roa (raw, json)
Hash identifier:          dopPXcVGhPEAGfQ7Sy6j+231fueSvFhNbw/rGWbZUwM=
Subject key identifier:   D4:5A:96:07:27:8C:DC:C2:73:25:62:27:C3:EC:71:72:81:5E:B8:90
Certificate issuer:       /CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
Certificate serial:       47909F0266425B436FCC60671A26177AE13A4724
Authority key identifier: 7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/3132382e3230312e39322e302f32322d3234203d3e20323636363231.roa
Signing time:             Thu 06 Mar 2025 22:28:03 +0000
ROA not before:           Thu 06 Mar 2025 22:23:03 +0000
ROA not after:            Thu 05 Mar 2026 22:28:03 +0000
asID:                     266621
IP address blocks:        128.201.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:90:9f:02:66:42:5b:43:6f:cc:60:67:1a:26:17:7a:e1:3a:47:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
        Validity
            Not Before: Mar  6 22:23:03 2025 GMT
            Not After : Mar  5 22:28:03 2026 GMT
        Subject: CN=D45A9607278CDCC273256227C3EC7172815EB890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:c2:67:c3:46:81:09:cc:9c:02:12:1e:0d:
                    53:49:cb:59:4a:6b:2b:09:85:f5:3c:9f:12:2e:9e:
                    2c:20:80:e3:ce:14:38:b9:9c:84:1c:91:5c:8b:22:
                    3f:bb:6b:35:44:2c:57:59:18:fb:a8:dc:98:cc:bb:
                    f5:11:c6:bb:61:15:25:f7:1a:37:60:f7:95:06:b2:
                    0e:9f:65:cd:4e:c0:d1:54:c8:68:9e:8a:0c:42:9b:
                    65:51:5e:ee:49:02:a8:01:f2:6f:5e:d0:a4:78:da:
                    19:bf:84:3b:92:10:1b:52:f2:ae:0c:18:70:50:9f:
                    c5:dd:d8:86:9a:81:31:51:f0:f5:90:bd:76:21:f5:
                    7e:79:59:f9:e6:66:ef:b0:27:fd:22:97:e2:b5:54:
                    f9:e2:92:7a:50:b4:f2:bb:16:10:c3:bd:a5:41:00:
                    ab:87:1f:14:34:11:ad:0a:79:3f:26:28:d3:4c:e2:
                    a8:fc:b9:f2:9b:31:36:f8:78:43:82:1c:41:17:f4:
                    24:66:0a:0a:47:75:3c:ca:cf:1b:87:66:79:fb:88:
                    6e:49:91:ee:ca:f6:2f:b6:f4:88:ba:63:14:34:ee:
                    69:93:5b:ad:ee:0c:ce:98:50:ed:a3:c5:71:0d:ef:
                    c6:b5:4b:98:d4:7d:a0:6b:67:ef:1a:ee:aa:68:e8:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5A:96:07:27:8C:DC:C2:73:25:62:27:C3:EC:71:72:81:5E:B8:90
            X509v3 Authority Key Identifier:
                keyid:7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/3132382e3230312e39322e302f32322d3234203d3e20323636363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:e0:80:37:e6:80:76:da:be:c2:a0:31:cd:24:81:15:4b:73:
         28:76:50:ec:fd:59:47:89:5b:e8:a9:e1:3c:f9:b6:79:09:df:
         51:5f:7a:0b:e2:9c:ec:4c:a3:4e:19:a5:c3:c7:9c:fd:99:cc:
         66:9b:ac:fb:80:35:e0:f7:24:94:2c:f2:37:22:9c:b0:ca:4a:
         7f:07:28:aa:32:71:b1:55:9b:95:53:db:a5:40:c0:27:18:76:
         b6:ba:24:41:5a:da:19:a4:7d:5f:c9:40:c6:29:ca:4c:60:3d:
         2b:ab:d4:92:f6:ae:a8:f2:8d:e8:5e:b3:fa:94:62:92:ee:4c:
         c6:c5:02:51:88:fc:ff:0f:ac:ae:d8:bf:f5:87:38:94:67:1b:
         55:22:26:28:59:fd:79:2a:8b:7c:ae:d9:6e:61:5f:77:30:09:
         e1:7a:35:ce:8a:d7:86:22:ae:53:e2:01:c5:96:b8:65:18:24:
         40:7e:1d:11:47:5b:b4:08:14:b9:a3:1c:56:9d:7d:27:cb:ab:
         c3:e5:78:0f:ec:c7:e8:de:4d:eb:e9:37:b3:a0:43:36:f0:a5:
         04:d1:10:82:79:a0:d0:e1:96:21:01:a8:50:62:34:63:b7:cd:
         97:79:c6:4f:b6:e7:48:fc:5e:88:56:93:4a:92:46:c9:73:70:
         cf:a5:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:22:03 2025 by rpki-client