Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32322d3232203d3e20323632343931.roa
File:                     3137372e36362e39362e302f32322d3232203d3e20323632343931.roa (raw, json)
Hash identifier:          JJIDjTn2pS5AvxniTWc4JnzuGiO53Y5Hmnua5Rhm2Nc=
Subject key identifier:   18:14:63:23:81:60:36:99:1D:22:9C:6A:39:73:D0:5F:6D:09:D6:A9
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       368018791EC5C1F136451B6B763F5FB2AA5BAE09
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32322d3232203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:48:02 +0000
ROA not before:           Sat 26 Nov 2022 02:43:02 +0000
ROA not after:            Sat 25 Nov 2023 02:48:02 +0000
asID:                     262491
IP address blocks:        177.66.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:80:18:79:1e:c5:c1:f1:36:45:1b:6b:76:3f:5f:b2:aa:5b:ae:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:43:02 2022 GMT
            Not After : Nov 25 02:48:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:bc:fa:fb:1b:01:c6:84:85:93:c6:aa:81:
                    b6:e6:a6:20:5a:62:03:6a:82:5d:bf:70:15:17:a8:
                    ed:e5:4b:d6:db:85:d0:0d:f6:27:f0:6b:d0:7d:21:
                    d3:ec:a4:7a:38:e6:59:fc:16:7d:f7:51:6f:b6:61:
                    d6:5a:d3:2c:73:21:4e:8c:44:0b:8f:aa:a3:c0:09:
                    24:b2:7a:e3:fc:e6:52:d7:37:77:54:3a:97:56:46:
                    bb:c7:4f:9b:13:96:a1:55:3c:3a:3e:b9:8d:0c:82:
                    74:41:59:9a:1b:cc:8c:c5:51:78:31:f1:28:51:cc:
                    64:83:a9:bd:08:a0:36:d5:b1:c9:97:c9:bd:e9:82:
                    70:8d:8b:ba:08:76:c3:b6:b0:26:bb:a2:1c:0a:20:
                    c1:7b:0a:13:76:55:dc:77:8b:cc:f6:b0:2e:2c:65:
                    33:90:75:dc:cb:81:9f:ea:13:59:46:b1:78:57:cc:
                    d2:51:80:c2:92:8f:12:ae:31:2a:fc:9b:8d:c6:68:
                    d0:26:10:44:55:1a:66:32:3c:cf:a1:d3:43:c6:b7:
                    69:c0:a6:db:9c:a8:7f:73:59:62:35:21:7b:b3:2e:
                    2b:24:7a:1c:ff:c9:32:a0:ea:53:f8:45:19:5d:68:
                    ae:91:2b:94:a6:a9:d0:fd:eb:03:6f:3b:dc:1e:40:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:14:63:23:81:60:36:99:1D:22:9C:6A:39:73:D0:5F:6D:09:D6:A9
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32322d3232203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:78:43:e8:0c:2b:65:9c:5a:f6:a0:42:4f:d7:06:a0:37:79:
         ac:28:3a:8a:0f:11:ba:94:19:8c:ee:09:5a:8a:9a:c5:4d:5a:
         52:0c:e4:4a:a9:1b:a7:a0:07:4e:eb:ee:76:18:25:aa:eb:99:
         5a:0d:a3:7c:f9:3b:45:25:8c:06:af:2f:09:da:85:1a:83:d1:
         62:ec:11:4c:1c:19:5b:0c:b9:04:2f:7b:a9:b2:4e:b5:e6:09:
         f0:9a:a7:12:51:ab:fb:54:60:bd:fc:03:6e:1c:25:58:50:09:
         eb:78:85:8e:e3:80:2b:48:52:00:4e:38:e8:1c:7a:20:04:ba:
         ca:fb:86:02:76:17:bb:43:fc:4e:f4:bf:f8:81:11:1e:9b:fd:
         a0:0a:6b:23:4a:f9:b5:9a:37:8e:a2:ac:a9:fc:23:49:4e:24:
         67:95:00:76:01:a0:ee:69:d3:a7:38:f7:1e:8e:42:46:5e:b0:
         0f:66:b7:6c:4c:5c:b1:2f:71:ac:33:a1:d4:eb:49:ae:b5:bc:
         0b:7d:37:0d:ba:7e:f1:c8:9e:d1:08:7d:ec:e7:81:f4:39:52:
         01:3a:d4:27:74:89:d9:b9:06:fd:f8:69:64:63:42:4f:ea:51:
         74:f1:e1:b5:c1:4a:b4:a5:cc:93:b6:ee:57:2b:62:e5:7e:3e:
         db:09:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:31 2025 by rpki-client