Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32322d3234203d3e20323730353834.roa
File:                     3138372e39342e342e302f32322d3234203d3e20323730353834.roa (raw, json)
Hash identifier:          Rl+BD/xSbcuNDz6Jb5HN9E8HuSiR7nskcmEnaE9ehis=
Subject key identifier:   AB:6D:AE:35:B7:AC:88:CA:6B:E0:29:70:47:BB:09:C9:20:8B:CB:76
Certificate issuer:       /CN=D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7
Certificate serial:       4F19455D2B51E2167C92A0BF6957D017324104B8
Authority key identifier: D9:35:79:90:5C:A8:82:2E:AD:9B:3A:08:CA:28:E7:D4:5B:B1:F9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32322d3234203d3e20323730353834.roa
Signing time:             Fri 08 Jul 2022 16:00:00 +0000
ROA not before:           Fri 08 Jul 2022 15:55:00 +0000
ROA not after:            Sat 08 Jul 2023 16:00:00 +0000
asID:                     270584
IP address blocks:        187.94.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:19:45:5d:2b:51:e2:16:7c:92:a0:bf:69:57:d0:17:32:41:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7
        Validity
            Not Before: Jul  8 15:55:00 2022 GMT
            Not After : Jul  8 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:c8:f6:40:29:f4:fa:b3:22:df:80:38:97:
                    ca:9a:74:7b:8a:08:de:6d:04:dc:1a:22:ca:a7:ee:
                    70:8a:98:24:92:3a:3d:55:77:8b:bc:4a:28:55:13:
                    44:51:6f:b9:0a:98:ed:c3:8e:d0:dd:c9:69:92:99:
                    64:58:97:13:0f:ee:8e:c1:6e:8f:51:8b:5e:6f:af:
                    cf:88:3b:4c:d3:71:66:e7:1d:de:c8:34:b8:e8:22:
                    f6:53:b2:4e:b1:18:ca:92:bc:a0:03:4d:c1:1f:cf:
                    b0:72:fc:00:58:d9:0d:c1:ab:98:3b:2b:45:67:cd:
                    60:04:33:59:e5:aa:76:94:d2:eb:3d:af:b9:ad:78:
                    07:9c:4a:76:e1:62:9e:88:30:35:0b:be:29:1c:1c:
                    6a:f8:2a:ec:ea:64:ef:65:60:48:93:62:99:f9:54:
                    11:46:f6:ce:b9:32:ba:5b:95:78:68:d9:bf:ca:2c:
                    b2:77:4f:00:36:a6:cc:b1:75:60:6e:6c:18:a8:33:
                    92:69:b4:a2:dd:ce:e6:32:52:4b:fd:bb:6e:af:86:
                    59:4c:7c:95:e5:07:ad:fe:6f:cb:e1:13:a4:4c:00:
                    06:25:0a:4f:96:30:b8:e5:63:77:e3:bd:d4:bc:7b:
                    5c:18:3a:eb:28:24:69:d8:a1:37:61:01:88:c1:60:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6D:AE:35:B7:AC:88:CA:6B:E0:29:70:47:BB:09:C9:20:8B:CB:76
            X509v3 Authority Key Identifier:
                keyid:D9:35:79:90:5C:A8:82:2E:AD:9B:3A:08:CA:28:E7:D4:5B:B1:F9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D93579905CA8822EAD9B3A08CA28E7D45BB1F9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32322d3234203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:f5:da:eb:f7:14:8e:43:9f:42:1d:98:52:00:48:a6:a4:ea:
         24:7d:ac:2c:55:3d:c8:33:bb:c0:7e:9a:fd:8c:3f:65:d2:13:
         e3:66:05:42:2b:ed:62:3d:77:7b:7d:4f:11:f1:54:8a:3d:18:
         fd:62:1b:8d:e4:7c:75:be:cc:b6:57:e5:86:86:2b:c9:4c:f1:
         04:ba:7c:52:58:95:21:ca:f0:27:6a:46:35:e9:8a:30:6c:7d:
         07:d6:3a:50:87:9c:b6:6f:57:16:32:91:4b:b2:67:ae:dc:a0:
         f3:df:2b:a5:b1:cd:3b:07:e1:65:58:46:6e:b6:7a:f9:0e:34:
         e7:17:53:a6:b3:72:88:72:d4:4a:9a:67:f3:e0:48:08:79:09:
         5a:7f:08:03:17:6b:25:79:39:b8:aa:96:f7:83:8a:ee:50:c8:
         08:03:49:06:31:14:4c:fb:dc:96:67:d1:cb:a5:4b:66:da:02:
         1d:eb:80:c2:17:d5:83:7a:5c:27:48:a5:c2:4e:bd:9e:dc:19:
         90:08:82:af:1f:4c:db:7f:02:2f:c5:59:7d:bc:5f:aa:3b:e8:
         6f:35:6d:a6:8b:93:75:7e:81:8b:7f:ee:12:02:fe:47:75:2b:
         ae:e0:25:ba:7f:84:3a:bb:03:d4:63:0a:28:0d:f9:70:ba:3c:
         08:5f:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:19 2025 by rpki-client