Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa
File:                     3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa (raw, json)
Hash identifier:          Gl5pcXp2myrgFtsXUl010n8k3rKGTIaSkegrB18jqfo=
Subject key identifier:   0B:95:25:11:F0:83:F1:DC:99:50:6C:F5:3B:58:1E:9E:10:2F:84:42
Certificate issuer:       /CN=5442614336999E86885B6AC9A40CA8953FC17D75
Certificate serial:       5FB99C485F28139CDC50C72160FAB8B846437EA3
Authority key identifier: 54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa
Signing time:             Tue 08 Nov 2022 12:13:18 +0000
ROA not before:           Tue 08 Nov 2022 12:08:18 +0000
ROA not after:            Tue 07 Nov 2023 12:13:18 +0000
asID:                     263480
IP address blocks:        191.242.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b9:9c:48:5f:28:13:9c:dc:50:c7:21:60:fa:b8:b8:46:43:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5442614336999E86885B6AC9A40CA8953FC17D75
        Validity
            Not Before: Nov  8 12:08:18 2022 GMT
            Not After : Nov  7 12:13:18 2023 GMT
        Subject: CN=0B952511F083F1DC99506CF53B581E9E102F8442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:0f:75:fe:9d:c9:60:e5:e0:9c:b5:36:98:
                    bc:74:11:ae:75:b2:d8:c6:60:10:2f:1f:b5:6d:6b:
                    fa:67:df:a6:2b:cf:10:9d:18:83:22:22:df:55:c2:
                    4f:57:ec:e8:2e:ff:39:21:09:89:fe:32:10:b2:88:
                    5e:46:5f:bc:a4:cc:56:b6:8c:9d:d7:7c:16:06:05:
                    df:21:62:2a:ef:7c:57:97:9b:9c:5c:23:dc:24:7f:
                    7d:4f:e9:10:e1:33:1f:e7:05:38:dd:04:42:30:85:
                    2f:37:cd:c0:67:76:7b:9e:37:72:f8:f0:ee:e9:9e:
                    7b:b0:b6:8f:4d:1e:bb:45:ee:64:65:d6:f5:b6:02:
                    b9:9d:b1:e7:8a:47:9e:3e:74:15:b8:d7:2c:ac:b9:
                    0e:de:d0:00:d3:79:83:c1:0b:87:1a:7f:ce:42:b5:
                    48:2c:9a:0b:95:e9:fe:93:d3:af:bd:1c:7d:88:6f:
                    2d:0c:a2:42:6c:9a:5b:dc:00:01:3f:77:a0:17:7a:
                    06:d5:18:92:a2:91:c0:b2:1b:fd:e2:e6:b3:c2:b8:
                    1d:97:b6:72:a1:1e:2e:80:96:ca:99:ed:b6:5d:f7:
                    22:8a:25:97:d2:7b:ca:af:ca:1b:41:c2:fb:77:73:
                    0d:4b:61:85:ca:43:f9:14:d6:bf:4a:00:d7:ba:1d:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:25:11:F0:83:F1:DC:99:50:6C:F5:3B:58:1E:9E:10:2F:84:42
            X509v3 Authority Key Identifier:
                keyid:54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:de:2e:ab:2c:07:d0:5e:64:9f:1c:8c:6b:b8:59:f9:a7:
         c0:d8:07:d4:1a:36:f3:23:30:03:61:2a:c7:c3:0e:21:12:92:
         4a:06:94:9f:10:9e:5b:73:49:83:58:38:cf:51:b4:fd:0c:b5:
         8e:14:c6:84:52:2f:12:2a:d4:3a:71:34:75:bb:ab:96:50:ca:
         38:32:2c:85:9a:68:b4:25:bd:ad:c3:79:4c:49:75:2b:e2:d1:
         99:ac:99:d8:32:39:4a:26:78:36:df:06:fe:07:05:ae:64:e9:
         a9:79:18:bc:b9:0a:04:d5:ee:15:21:f3:ea:6e:f7:50:b7:0c:
         b2:ee:8f:59:ba:57:4e:60:51:06:fc:d4:81:e7:4c:21:e8:f2:
         55:c8:2b:ad:e5:1f:4d:70:94:ad:a1:73:f3:b0:82:c8:70:6f:
         8c:5e:71:81:a9:d3:23:69:e6:71:9a:88:fd:65:51:bd:58:3a:
         d4:7b:47:80:63:6c:3a:17:dd:1d:18:75:db:53:52:38:86:6e:
         29:b6:c3:3f:6a:c7:a4:b5:11:3e:58:1b:d0:23:e6:f7:cc:64:
         4f:d2:fd:9b:41:3a:4b:4e:0f:74:6b:cb:79:1d:e3:3a:89:4a:
         b1:ad:8d:50:16:07:b4:b8:ef:b6:73:1a:9f:e8:b6:70:e9:05:
         c8:e5:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:52 2025 by rpki-client