Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38312e302f32342d3234203d3e20323932393938.roa
File:                     3138362e3232342e38312e302f32342d3234203d3e20323932393938.roa (raw, json)
Hash identifier:          xpL24T7daE43xu69mZoYQM8ceKK1bzQI6Sl+gABsByw=
Subject key identifier:   32:A3:E6:31:39:27:80:BA:7C:39:5F:A6:01:AA:00:D1:3B:C3:82:88
Certificate issuer:       /CN=25B80D450923FBAF7E31D41324FA2A66D766846C
Certificate serial:       7863441159D73D162251E2BB36233CF04401680B
Authority key identifier: 25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38312e302f32342d3234203d3e20323932393938.roa
Signing time:             Tue 04 Jul 2023 20:55:02 +0000
ROA not before:           Tue 04 Jul 2023 20:50:02 +0000
ROA not after:            Tue 02 Jul 2024 20:55:02 +0000
asID:                     292998
IP address blocks:        186.224.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:63:44:11:59:d7:3d:16:22:51:e2:bb:36:23:3c:f0:44:01:68:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B80D450923FBAF7E31D41324FA2A66D766846C
        Validity
            Not Before: Jul  4 20:50:02 2023 GMT
            Not After : Jul  2 20:55:02 2024 GMT
        Subject: CN=32A3E631392780BA7C395FA601AA00D13BC38288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:b2:fb:92:6a:ec:81:86:ad:b4:96:24:16:
                    0d:2e:62:38:6c:9f:6f:1c:f9:2e:6c:cf:c0:49:44:
                    25:11:2b:c3:87:5f:34:a1:5e:90:96:e4:46:8a:a5:
                    d2:c0:9a:a0:1c:c2:81:39:23:7d:12:76:4f:e1:34:
                    72:39:5a:1b:3d:ad:cc:4d:5f:34:50:fa:8a:8c:18:
                    75:71:4b:f2:00:7e:a8:31:17:54:cc:4e:41:f4:17:
                    54:4b:e7:14:17:dc:49:72:63:1e:0c:ca:a2:46:6b:
                    2f:84:68:43:ab:20:bd:86:77:19:30:41:2d:cb:67:
                    16:fe:6e:dd:ef:26:a9:59:8f:8d:f9:df:d7:58:84:
                    99:85:94:f8:af:8d:0c:d2:78:3e:b4:0d:fb:26:a5:
                    9e:7e:63:42:6c:4d:3e:20:10:eb:08:8f:93:37:71:
                    80:41:6f:3b:15:ad:08:2a:6e:6f:d5:11:54:0d:c5:
                    a2:62:f3:c9:de:47:d1:6c:40:95:b0:e2:21:93:74:
                    ce:fb:04:2f:f8:ea:9f:00:31:72:bc:92:22:50:bd:
                    73:a2:1b:6f:f4:3a:c6:79:bd:f4:b3:21:9f:22:9d:
                    5f:05:60:22:d0:12:79:88:7f:f8:65:a1:50:95:62:
                    cd:d8:40:57:a3:2b:92:22:e6:a3:d7:0e:62:25:d4:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:E6:31:39:27:80:BA:7C:39:5F:A6:01:AA:00:D1:3B:C3:82:88
            X509v3 Authority Key Identifier:
                keyid:25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/25B80D450923FBAF7E31D41324FA2A66D766846C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38312e302f32342d3234203d3e20323932393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:2c:68:2f:2b:c8:f0:84:d7:f0:7f:22:75:3f:0b:2e:29:
         40:02:a5:ec:2b:4c:df:31:c2:35:c9:2f:bd:be:2d:f1:ba:1f:
         11:17:9c:47:63:e9:01:1d:cd:d1:60:85:7b:d9:94:b4:fb:6c:
         da:28:2a:61:f7:1d:57:34:e5:cd:5c:19:ed:e0:77:79:f8:95:
         73:71:d0:a9:ec:6e:2c:89:fc:b8:05:1d:4b:4d:09:a3:72:8e:
         7c:7d:50:ce:ec:f0:56:f7:13:e1:a6:3c:ac:d4:05:63:2e:59:
         21:99:31:bb:7c:c4:5e:c8:6e:81:ac:d6:47:74:46:f8:06:2b:
         34:b5:2b:d7:f9:f6:75:34:c2:c5:34:ec:f7:0b:c7:ed:bf:a1:
         1f:44:42:69:af:44:af:95:d1:f5:d0:0d:5c:59:44:c4:5f:86:
         6d:38:1a:dd:cc:9f:46:bf:f2:70:01:f5:7c:3a:6b:70:69:02:
         31:22:8f:f6:0c:f7:1a:0f:84:97:d3:61:e6:86:c1:20:cc:b6:
         ba:b3:05:84:09:fc:75:db:3e:88:b5:bf:fa:f1:91:ce:86:45:
         cc:3c:c2:c0:c2:67:a3:8f:c7:00:6c:d2:62:5b:b3:5b:ea:59:
         f0:4f:78:83:c6:02:8b:23:9f:65:d4:29:ea:ad:76:4f:b9:be:
         28:c0:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:41:23 2025 by rpki-client