Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa
File:                     3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa (raw, json)
Hash identifier:          eZFi4lQVSXb+a+Nwm0PAMNqxzhBTjN5g2u81nS0qcd4=
Subject key identifier:   64:00:6A:A2:B4:11:C0:F6:27:D9:06:08:3B:F1:28:71:A7:A6:13:CE
Certificate issuer:       /CN=8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5
Certificate serial:       7C2C82D7C9AAFA218952B0E8233C0CF57BE42A1F
Authority key identifier: 8C:24:7F:FD:F1:3A:92:33:B3:CB:03:E7:F0:68:98:5E:0A:A4:F4:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa
Signing time:             Tue 26 Jul 2022 15:00:00 +0000
ROA not before:           Tue 26 Jul 2022 14:55:00 +0000
ROA not after:            Wed 26 Jul 2023 15:00:00 +0000
asID:                     267430
IP address blocks:        164.163.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2c:82:d7:c9:aa:fa:21:89:52:b0:e8:23:3c:0c:f5:7b:e4:2a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5
        Validity
            Not Before: Jul 26 14:55:00 2022 GMT
            Not After : Jul 26 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:47:fe:e8:e0:e3:f4:4c:7f:67:14:25:a8:
                    ab:49:6f:69:c1:a7:47:70:c9:03:1d:b5:53:a7:af:
                    66:2b:47:50:54:46:86:a5:20:33:bb:bd:df:11:52:
                    08:31:50:eb:84:b9:11:f8:f6:88:8c:2c:20:3d:e5:
                    4f:22:49:33:aa:4d:39:26:3c:8f:cb:87:cf:50:82:
                    c5:c6:7d:63:9b:b5:cf:d8:dc:b5:99:fc:34:ec:b6:
                    08:41:43:27:3c:7c:5b:25:5e:1b:a3:ec:17:6f:cc:
                    81:4f:0e:48:7e:24:86:13:38:5d:77:44:41:9d:78:
                    fa:b1:4c:ee:eb:80:ad:94:fa:d5:ed:98:0a:6b:8c:
                    0c:60:3c:94:4c:7f:1d:b2:ee:66:3f:5e:0d:02:54:
                    63:71:bf:26:f0:b1:25:74:00:6b:2a:ae:1f:6f:33:
                    86:c3:59:d7:10:65:05:57:a5:da:c8:26:81:de:7a:
                    c6:ee:fd:7f:1b:2b:46:2b:8e:c4:a6:25:c9:f6:0e:
                    2c:d1:c6:ae:bd:5c:5b:56:64:4c:0e:9a:1e:14:14:
                    c2:49:01:6e:06:f9:8c:ac:e5:07:51:87:02:6e:69:
                    11:1e:c3:2a:e9:d7:2e:36:83:6b:0b:fd:c3:9d:89:
                    2d:e4:0a:e7:10:67:44:f0:2b:7f:2f:a0:f6:a2:04:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:00:6A:A2:B4:11:C0:F6:27:D9:06:08:3B:F1:28:71:A7:A6:13:CE
            X509v3 Authority Key Identifier:
                keyid:8C:24:7F:FD:F1:3A:92:33:B3:CB:03:E7:F0:68:98:5E:0A:A4:F4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:52:8a:e7:9d:f6:75:2e:28:78:af:42:7f:fa:c3:bb:a3:2a:
         4b:a6:bf:77:84:87:97:84:64:79:16:d3:4c:b0:32:28:c5:83:
         7d:e3:68:ba:26:b7:f3:1e:c6:b9:9a:4c:87:f3:b1:60:2c:73:
         79:3d:13:85:f9:42:86:bd:8b:90:4f:54:a9:21:bd:2a:e6:1a:
         37:90:63:93:9b:b3:82:32:1b:76:6d:98:ac:a5:cd:c0:ba:21:
         20:74:6e:4c:33:99:2b:95:30:71:ca:36:da:ef:9a:f1:5f:3c:
         8d:20:c6:1f:aa:f6:32:7f:52:84:09:60:81:6c:e6:5f:79:b1:
         f5:7a:a4:38:93:03:09:6d:74:7f:a7:bc:8f:47:26:f2:b6:98:
         09:e1:33:ae:c3:82:f7:50:e7:85:69:ae:c0:ed:fa:2f:99:a0:
         e9:f0:d3:8b:a4:77:f6:2a:4f:66:39:bb:40:f0:f3:3c:ab:21:
         94:76:b6:1c:2e:6f:ff:8f:af:b9:ee:b2:a2:0f:0d:0a:03:bf:
         19:f8:68:1b:28:89:62:1f:31:83:43:9f:fd:fc:8e:5b:18:bb:
         fa:c4:2a:7a:5e:5b:72:8e:21:45:b2:99:b1:85:3f:cd:2f:3e:
         53:c1:e8:42:2c:a7:f4:f2:33:a9:e8:db:91:7f:32:48:f4:22:
         91:1a:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:47:24 2025 by rpki-client