Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa (raw, json)
Hash identifier:          7rPleO7PiZeCn0oHMz+NMITzV5tf6M66/TCcuXl1peU=
Subject key identifier:   0C:83:AE:FE:40:BF:4C:63:27:18:5C:50:E0:3A:00:BA:4C:AE:AC:BE
Certificate issuer:       /CN=A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B
Certificate serial:       6604F45444E6319B4906F61888CEFFC4D19DBD73
Authority key identifier: A8:2A:EB:AD:4E:05:08:73:66:90:4B:5D:C3:D0:EE:F5:21:1F:4E:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa
Signing time:             Thu 22 Sep 2022 13:26:39 +0000
ROA not before:           Thu 22 Sep 2022 13:21:39 +0000
ROA not after:            Thu 21 Sep 2023 13:26:39 +0000
asID:                     271335
IP address blocks:        207.248.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:04:f4:54:44:e6:31:9b:49:06:f6:18:88:ce:ff:c4:d1:9d:bd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B
        Validity
            Not Before: Sep 22 13:21:39 2022 GMT
            Not After : Sep 21 13:26:39 2023 GMT
        Subject: CN=0C83AEFE40BF4C6327185C50E03A00BA4CAEACBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:16:e4:1f:7e:00:bf:8a:b4:27:01:7c:45:
                    cf:a7:59:27:34:bc:8c:74:5e:83:d7:4a:c1:10:6f:
                    dd:73:5e:e5:19:6d:46:01:af:4f:38:96:eb:52:55:
                    e0:24:a6:37:4c:2a:38:2c:89:0f:04:a6:d8:b9:b1:
                    85:d7:08:9e:53:07:cb:fe:54:18:32:82:05:79:23:
                    01:0c:c6:40:80:f3:09:73:08:b6:8a:15:61:09:b8:
                    63:68:6f:c5:2a:de:9d:87:69:16:d6:63:6d:0a:a2:
                    4b:57:96:ac:ee:94:93:af:99:d4:32:ff:ff:36:a2:
                    0f:e7:f4:1e:ba:64:7e:30:c0:f6:86:98:47:ed:70:
                    4f:87:e3:c1:cb:e4:15:ea:21:e2:bc:51:2b:74:e8:
                    0c:5c:42:0e:df:54:a0:f5:4a:00:d3:f4:02:68:a2:
                    51:dd:02:ca:15:a7:97:44:b1:e1:e8:1a:e6:06:45:
                    bb:4b:5b:e6:ec:bb:76:af:77:8d:5d:ae:08:76:2a:
                    cc:9d:14:bd:49:95:81:90:8e:ee:4f:c9:c4:f0:16:
                    73:0e:db:9e:46:b5:28:72:98:5d:75:95:db:e2:4a:
                    da:70:23:7e:d0:40:10:03:47:71:51:0e:89:f2:9b:
                    78:be:f1:b5:fa:fa:7b:69:8f:18:0a:12:98:58:12:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:AE:FE:40:BF:4C:63:27:18:5C:50:E0:3A:00:BA:4C:AE:AC:BE
            X509v3 Authority Key Identifier:
                keyid:A8:2A:EB:AD:4E:05:08:73:66:90:4B:5D:C3:D0:EE:F5:21:1F:4E:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A82AEBAD4E05087366904B5DC3D0EEF5211F4E5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:4b:2d:3b:a1:ca:01:d6:67:67:7c:3c:14:e8:f7:c8:e0:
         ce:2b:e1:76:38:63:0f:8f:be:46:ef:d3:3b:ba:ba:75:f3:13:
         f8:80:3b:32:1b:70:d5:b4:07:0e:4a:60:d4:87:56:92:0e:40:
         ef:25:ae:6e:77:50:68:dd:49:42:3a:75:c0:55:88:bf:2d:70:
         0a:dd:4a:7e:d7:88:76:0d:d6:d6:01:4d:d1:3a:3f:e5:70:0a:
         4e:83:68:60:ec:8d:4f:b6:d5:be:da:32:88:73:a6:75:7f:f4:
         15:23:0a:56:b5:10:f4:7e:bc:63:f9:83:12:92:b0:f5:ea:50:
         82:1e:c5:2e:e4:3a:b8:d4:85:6b:b6:8d:cd:a6:69:97:6d:68:
         45:b3:41:ee:3f:e7:fd:50:f4:a4:34:c9:d1:15:11:e8:ce:d1:
         7e:83:9c:a1:5e:36:8c:d4:f6:f4:b6:8d:c8:05:05:fe:6c:64:
         3d:b0:40:9e:a1:fb:6e:58:bc:6b:15:29:52:b1:98:3b:06:8d:
         e3:de:15:9d:da:41:14:6a:4a:a8:dd:51:3c:44:9b:fd:53:de:
         44:af:c0:7f:8e:b6:7d:19:72:c8:ee:49:2b:58:2c:d7:7f:52:
         63:07:46:a2:7f:13:d0:75:5c:0a:29:3c:1c:2b:ae:cb:aa:bb:
         8e:51:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:18:03 2025 by rpki-client