Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137342e302f32342d3234203d3e20323730373636.roa
File:                     3138362e3139342e3137342e302f32342d3234203d3e20323730373636.roa (raw, json)
Hash identifier:          1/vDM4OEHhPOSuQF6ElKMF25KGYef1dzZAo4z4a/nwk=
Subject key identifier:   AE:8C:A4:E0:A5:F8:72:67:07:EF:6D:0F:E4:77:C8:1C:F7:1C:36:3D
Certificate issuer:       /CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
Certificate serial:       4EAF8BC17FE7D2CFA30FBB7BB774BDBB2393BC76
Authority key identifier: F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137342e302f32342d3234203d3e20323730373636.roa
Signing time:             Sat 14 Dec 2024 23:04:27 +0000
ROA not before:           Sat 14 Dec 2024 22:59:27 +0000
ROA not after:            Sat 13 Dec 2025 23:04:27 +0000
asID:                     270766
IP address blocks:        186.194.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:af:8b:c1:7f:e7:d2:cf:a3:0f:bb:7b:b7:74:bd:bb:23:93:bc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0
        Validity
            Not Before: Dec 14 22:59:27 2024 GMT
            Not After : Dec 13 23:04:27 2025 GMT
        Subject: CN=AE8CA4E0A5F8726707EF6D0FE477C81CF71C363D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:78:af:76:ab:47:bc:82:5b:a3:10:da:53:
                    01:2a:df:33:9e:cf:75:1e:18:7e:e6:20:30:07:55:
                    f4:f1:95:b1:b7:dd:80:a6:ba:6d:13:2f:15:52:2f:
                    64:38:26:68:d8:cc:75:fa:89:31:ce:a4:69:d7:8f:
                    46:4f:dc:a3:55:8b:51:c9:b7:f1:71:af:0e:90:50:
                    5b:b6:c2:40:ef:16:6e:98:6a:97:14:eb:c1:7c:de:
                    e8:e7:4d:14:49:b5:66:ed:78:b1:f4:ac:c1:96:2d:
                    96:6c:0b:c5:39:cf:3c:82:39:d1:6b:75:d3:b3:7b:
                    21:db:49:70:26:a7:a1:48:33:6b:3a:6b:95:fa:7c:
                    31:4d:6c:86:ad:29:f6:b1:b2:eb:47:4a:7a:ca:af:
                    6f:3c:b1:68:8e:be:a9:d0:d1:c4:f0:ae:1a:77:23:
                    3f:42:7c:34:f1:1e:7c:0d:fc:24:a2:b9:5e:53:85:
                    a0:8c:80:15:73:be:f6:08:ac:24:e4:37:ba:c3:4c:
                    e7:b7:3a:8e:a4:ec:bd:58:9f:75:e1:86:73:b7:d5:
                    2a:4c:8e:c3:e2:64:3e:28:a3:c9:89:1a:ad:01:84:
                    87:a1:75:4b:81:6f:93:47:34:c9:e7:d5:24:53:7e:
                    3f:62:5b:9e:f3:1f:c0:eb:26:0a:8b:9c:4e:c7:77:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:A4:E0:A5:F8:72:67:07:EF:6D:0F:E4:77:C8:1C:F7:1C:36:3D
            X509v3 Authority Key Identifier:
                keyid:F7:18:1E:90:C1:9D:91:80:E4:38:89:9E:F8:D4:E3:E5:A2:BF:2C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7181E90C19D9180E438899EF8D4E3E5A2BF2CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/3138362e3139342e3137342e302f32342d3234203d3e20323730373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:97:f7:b7:bd:dc:44:55:53:14:90:44:34:1d:8b:51:c0:4a:
         b6:1e:37:bb:5f:9e:fb:1b:24:36:d8:56:cf:0f:6a:e3:3e:7b:
         86:81:f6:d8:e1:74:05:ea:d7:47:97:1d:5b:0e:21:95:93:26:
         88:d3:1c:78:57:4a:33:b8:33:3b:fd:02:88:39:be:6f:0f:05:
         2b:ab:37:76:a0:91:6e:24:b7:b8:c3:d4:ec:1f:8a:27:e8:8d:
         21:86:70:9d:92:74:87:8b:d9:0b:6c:47:58:3d:db:63:2d:a4:
         c7:5a:7e:53:ca:15:89:33:b2:c8:03:f3:58:89:85:5b:ac:40:
         3b:62:1e:4c:18:0c:2f:2c:2f:a6:10:22:d7:28:b1:f7:f3:b0:
         7e:80:c1:a4:ae:79:e7:d7:5c:be:92:85:ee:b7:55:dc:bc:f0:
         25:a2:c0:d1:ea:c2:07:ee:c2:63:5a:0e:73:ce:25:1f:c6:f1:
         bd:ef:73:39:47:bc:b8:74:b6:bb:24:72:31:c2:24:81:58:5b:
         eb:49:87:bc:cf:de:86:03:f0:fe:37:b2:8c:8d:b0:c1:2b:31:
         86:8e:d4:20:01:53:88:b9:21:d7:02:d2:69:32:b0:22:7d:ac:
         36:a7:a5:b4:73:8a:61:ed:ee:8f:f9:e4:a4:97:75:02:e9:fe:
         a3:c3:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:19:23 2025 by rpki-client