Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/3138362e3233332e37322e302f32312d3231203d3e20323633303730.roa
File:                     3138362e3233332e37322e302f32312d3231203d3e20323633303730.roa (raw, json)
Hash identifier:          fLfr4SKeL13wAux1c6s0+hGOuMQmG7TeKE3ygiWhIMM=
Subject key identifier:   F9:7F:00:A3:CE:13:0B:37:8E:3C:C2:04:73:1D:AF:32:13:B2:ED:E0
Certificate issuer:       /CN=041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC
Certificate serial:       727519E5129F7E228247EE54442BDE6B3F36AE37
Authority key identifier: 04:1A:69:A5:5C:8D:8C:4A:7E:6D:F1:F2:99:FE:21:B2:F2:6A:E8:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/3138362e3233332e37322e302f32312d3231203d3e20323633303730.roa
Signing time:             Tue 13 Sep 2022 09:05:30 +0000
ROA not before:           Tue 13 Sep 2022 09:00:30 +0000
ROA not after:            Tue 12 Sep 2023 09:05:30 +0000
asID:                     263070
IP address blocks:        186.233.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:19:e5:12:9f:7e:22:82:47:ee:54:44:2b:de:6b:3f:36:ae:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC
        Validity
            Not Before: Sep 13 09:00:30 2022 GMT
            Not After : Sep 12 09:05:30 2023 GMT
        Subject: CN=F97F00A3CE130B378E3CC204731DAF3213B2EDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:c7:5a:13:25:ea:43:da:f4:c0:32:65:b3:
                    5e:69:3a:73:24:ca:4c:81:aa:cc:95:e7:ba:37:17:
                    89:ff:5d:fb:96:66:ff:30:aa:fa:0c:c0:c8:0d:32:
                    86:0f:25:b4:c3:6e:b2:0c:2e:55:e3:6f:b4:0d:89:
                    fb:b9:6c:2d:3b:d3:7d:d9:88:0b:85:b8:cb:71:60:
                    3d:16:ee:df:50:14:c5:27:f4:b5:8a:db:2e:0b:0a:
                    36:60:df:48:ce:16:0e:4c:89:f3:79:24:43:2d:28:
                    95:13:2b:77:aa:23:15:30:4d:84:85:6a:a3:f3:fe:
                    63:4d:2a:85:ca:9c:ea:db:30:d9:ab:27:93:9c:4f:
                    fb:fc:b1:b9:ff:19:b3:5e:7c:6f:e0:3c:b0:31:3a:
                    f7:57:bc:4c:27:67:be:2a:b1:b7:0b:0c:a8:9f:4a:
                    ab:43:8a:b1:d2:7f:4c:6a:28:bf:0d:a1:26:97:95:
                    35:64:25:4f:dd:ad:5f:4e:55:7d:0d:e6:b5:31:f4:
                    97:96:f2:83:7f:98:89:30:96:d8:fe:19:f3:46:7f:
                    87:48:80:1c:49:d7:0e:f4:fe:3e:cb:e3:1a:1d:4a:
                    41:41:0d:18:2d:65:a7:9e:08:5a:a9:59:4d:93:d7:
                    77:79:e2:89:2d:4c:d7:3a:fd:e0:92:ec:cf:8e:fe:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:00:A3:CE:13:0B:37:8E:3C:C2:04:73:1D:AF:32:13:B2:ED:E0
            X509v3 Authority Key Identifier:
                keyid:04:1A:69:A5:5C:8D:8C:4A:7E:6D:F1:F2:99:FE:21:B2:F2:6A:E8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/3138362e3233332e37322e302f32312d3231203d3e20323633303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:49:74:9b:53:88:5e:35:f3:57:fa:8f:a6:d4:98:d3:9d:
         dd:93:ca:78:63:54:70:a3:6a:fa:41:bf:96:76:71:1b:27:c8:
         fc:6e:bb:79:ee:c6:3c:e8:bd:2d:cf:b3:e1:ab:fd:0a:b2:8c:
         56:0a:1d:d5:52:0e:53:fb:06:4b:12:79:a7:e5:3e:b2:7b:e3:
         0f:f4:29:dc:a5:8d:35:0b:9a:d9:ac:a7:ee:b7:e1:a1:70:54:
         63:e6:b7:79:4d:32:a2:03:26:81:62:56:e6:1f:c1:90:9b:49:
         12:94:90:06:d3:23:4a:7b:da:f2:63:3f:ae:b4:da:d4:34:24:
         1e:27:d8:eb:24:d4:6b:cc:ba:df:38:4d:07:82:2b:4d:12:cf:
         80:31:e3:65:c3:5c:e0:c7:c6:22:6b:e5:ce:0e:6a:b1:36:a6:
         71:83:76:f0:d8:bf:a6:05:17:b6:ed:7e:68:c4:0a:89:29:e3:
         44:55:23:06:32:a1:00:64:36:a1:4c:72:23:7c:96:2e:48:33:
         bd:fe:00:45:8c:9f:3e:53:08:b5:35:2c:5f:fd:28:b5:31:ba:
         98:3b:86:0c:88:58:76:0e:3c:23:7b:fa:b0:d2:5a:71:cf:75:
         e0:f9:52:40:16:6c:2d:70:93:3c:9f:8f:f8:5d:b1:9a:fc:c2:
         5d:4c:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:51 2025 by rpki-client