Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137342e302f32342d3234203d3e203237303636.roa
File:                     3138362e3139342e3137342e302f32342d3234203d3e203237303636.roa (raw, json)
Hash identifier:          U1ihFTN0i02AxP+0bYPNlUqqDwwiIhaEacRWASH06ho=
Subject key identifier:   CC:F8:91:95:EE:E1:3E:73:41:04:79:EA:87:2F:6F:B8:EE:18:55:14
Certificate issuer:       /CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
Certificate serial:       0C430A200298EC03AF666EB14F01D65B64C745FF
Authority key identifier: F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137342e302f32342d3234203d3e203237303636.roa
Signing time:             Sat 14 Dec 2024 23:05:48 +0000
ROA not before:           Sat 14 Dec 2024 23:00:48 +0000
ROA not after:            Sat 13 Dec 2025 23:05:48 +0000
asID:                     27066
IP address blocks:        186.194.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:43:0a:20:02:98:ec:03:af:66:6e:b1:4f:01:d6:5b:64:c7:45:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
        Validity
            Not Before: Dec 14 23:00:48 2024 GMT
            Not After : Dec 13 23:05:48 2025 GMT
        Subject: CN=CCF89195EEE13E73410479EA872F6FB8EE185514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:b4:7a:1a:9a:92:37:0e:ae:2b:3f:38:40:
                    d4:b5:1f:10:08:52:90:6a:f8:99:29:30:2a:57:f8:
                    5f:94:33:e0:08:14:64:5a:ab:aa:86:a0:10:c3:96:
                    9e:b8:05:f9:09:18:1c:56:f2:48:07:1b:81:42:77:
                    73:40:34:5a:b2:72:ba:ac:38:bf:e6:6c:17:5a:bb:
                    b1:55:2b:83:0b:78:7e:63:26:37:16:a7:56:49:58:
                    6b:86:90:31:c9:11:69:76:16:e6:8d:4b:83:51:b3:
                    b4:86:ee:bf:89:d4:99:13:7e:a0:cb:8c:b8:ba:de:
                    71:b9:75:01:90:21:38:73:39:00:d3:c6:6e:82:cd:
                    19:90:98:b5:68:a7:38:51:ec:ac:7c:2d:dd:71:74:
                    26:64:b4:ec:9e:0b:0e:c2:e5:9a:fe:f5:d5:03:fa:
                    c4:34:56:9d:d9:f1:d8:cf:ab:32:a3:89:ff:6c:93:
                    29:f7:0a:22:f3:a5:6b:60:02:c8:28:d8:87:9e:fa:
                    6a:79:ac:77:44:f1:94:ef:58:48:71:f5:af:a7:6d:
                    26:a2:17:68:5b:25:de:ff:0f:7c:9f:40:ac:91:32:
                    dd:ac:eb:c3:51:3c:c5:24:6a:9d:9b:b2:e7:63:3e:
                    1b:e1:a3:4e:60:96:4e:d0:bb:a8:ab:30:97:80:99:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:91:95:EE:E1:3E:73:41:04:79:EA:87:2F:6F:B8:EE:18:55:14
            X509v3 Authority Key Identifier:
                keyid:F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137342e302f32342d3234203d3e203237303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:49:f7:42:72:7d:a3:2b:99:28:61:a1:75:e1:45:53:c3:3e:
         df:62:f2:5e:61:2b:65:1d:c4:bb:01:e3:80:ba:28:33:d7:0c:
         52:8a:9f:c5:34:60:d2:65:ce:a1:19:93:c2:b5:3d:af:9f:87:
         89:a6:9a:2c:a2:76:fa:35:5f:f3:5a:db:87:2a:d4:f7:e8:cd:
         fd:bc:ec:08:4e:d8:18:72:2c:f7:e2:41:73:48:a9:02:26:55:
         39:15:b7:32:6e:00:34:71:bf:10:fa:0e:bb:f4:e5:71:40:e2:
         4b:45:81:c9:df:c2:8a:8d:c8:dc:67:fb:80:6f:35:1b:83:e2:
         07:8b:ae:ab:d3:6c:16:41:05:4b:de:1b:cd:62:4a:c2:90:27:
         56:d8:12:93:21:21:31:62:ff:49:5d:1e:a1:59:a8:be:23:87:
         43:e3:86:d6:cc:ee:a9:0b:02:32:37:48:ca:17:e8:38:ae:0c:
         99:97:4a:5e:34:b7:79:e2:40:f9:ba:ec:22:f2:b6:e2:87:55:
         d3:27:05:19:12:b9:e9:0a:21:e3:ed:ab:0b:ba:23:1e:34:bc:
         95:78:35:c1:0a:aa:49:8f:48:b0:ed:e8:ca:5f:01:6d:71:80:
         6f:80:a9:31:dd:b3:87:18:ba:1e:d0:a9:c7:32:b6:6d:b7:31:
         18:56:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:41 2025 by rpki-client