Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3233332e37322e302f32312d3234203d3e20323632393932.roa
File:                     3138362e3233332e37322e302f32312d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          1wAqGbBjLkhPrIdUQOiC2eFd9A1eamnRSCMZECHiQfo=
Subject key identifier:   81:8F:30:EF:EC:54:1D:79:31:D7:D0:CD:A4:86:C9:28:60:27:2E:B6
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       63E10793CC95147F4F9914608E5BFCC8E83C4CF3
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3233332e37322e302f32312d3234203d3e20323632393932.roa
Signing time:             Thu 06 Oct 2022 17:39:57 +0000
ROA not before:           Thu 06 Oct 2022 17:34:57 +0000
ROA not after:            Thu 05 Oct 2023 17:39:57 +0000
asID:                     262992
IP address blocks:        186.233.72.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e1:07:93:cc:95:14:7f:4f:99:14:60:8e:5b:fc:c8:e8:3c:4c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:57 2022 GMT
            Not After : Oct  5 17:39:57 2023 GMT
        Subject: CN=818F30EFEC541D7931D7D0CDA486C92860272EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:0b:25:65:45:2b:5a:50:28:e8:55:61:76:
                    56:45:40:ec:27:39:05:d3:5e:6c:53:43:23:8d:4b:
                    44:6a:03:96:0b:d5:e1:4e:90:94:90:27:b9:61:f9:
                    d7:70:50:0a:a7:fb:c5:19:d7:33:fc:de:b5:e8:5f:
                    e7:fd:0f:db:e0:6c:c8:48:2d:69:ce:39:bb:7d:48:
                    8a:9a:3d:a5:95:ea:0e:65:ba:9f:81:40:38:6a:58:
                    5c:2e:60:b7:75:61:91:fa:b1:76:f8:2d:7d:d0:e7:
                    bc:79:15:86:ab:ae:f8:f8:e2:8b:33:2b:f2:9b:e2:
                    23:90:9d:99:62:e6:df:0e:4b:cf:85:60:4b:e0:75:
                    3f:db:82:88:65:f1:ee:4d:f6:14:ec:9f:cb:ad:df:
                    64:b9:44:00:06:a9:73:04:45:da:21:06:06:22:3e:
                    05:d7:cc:f0:fc:27:65:21:af:90:e0:82:ee:40:1b:
                    44:f2:dc:7b:73:dc:13:45:76:96:76:60:1b:cd:ab:
                    e7:d4:de:2f:42:17:e6:fb:14:37:be:bf:0a:db:7a:
                    0d:ff:46:bd:ae:df:37:44:f9:3e:d6:d7:6e:87:86:
                    04:4e:8a:9e:a1:15:7f:b0:e6:7f:d4:d7:83:98:1b:
                    2b:15:07:c9:bb:ae:85:bc:ba:16:3b:4b:4b:b4:fd:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8F:30:EF:EC:54:1D:79:31:D7:D0:CD:A4:86:C9:28:60:27:2E:B6
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3233332e37322e302f32312d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:8f:f3:2f:b1:ac:03:95:80:12:4e:46:4b:e7:9c:6d:ed:ba:
         9a:a0:b1:a5:ef:6e:03:f2:31:b2:3d:ff:95:3b:fa:1a:88:20:
         e5:80:34:54:12:5f:6a:92:3f:cd:b3:31:b2:05:8a:90:91:64:
         f4:93:fa:f1:e4:c5:84:92:50:60:85:66:c7:24:98:e7:0a:c4:
         41:9c:30:de:75:c5:ef:c3:3a:b0:4a:ad:1d:1b:70:99:bd:f0:
         63:3b:eb:49:23:ee:45:62:58:b3:bd:ad:10:46:40:91:59:ff:
         c4:6a:a5:40:bf:9a:ed:ed:d5:d6:c6:af:7a:52:f3:d8:b1:5b:
         47:91:07:3c:39:22:b4:99:7c:bf:f2:06:43:3d:da:8f:8c:1b:
         1d:f8:ab:42:38:4e:bd:cd:5d:0f:32:ea:3f:5b:77:be:e7:f4:
         32:23:cb:82:03:85:4a:3f:2a:5f:8a:61:3e:9c:58:0d:b6:3d:
         49:60:fc:bd:e8:d3:7f:f4:38:0a:24:8b:6b:85:69:86:bb:b1:
         85:66:62:43:37:76:cc:77:db:ad:9c:36:c1:e3:ee:af:0d:3a:
         0b:ef:d7:7c:d0:87:9f:d2:2d:88:76:49:03:db:6e:51:46:2b:
         5e:bf:d5:44:1c:1b:c3:55:2a:4e:53:e3:88:ba:27:8a:f1:f2:
         08:f3:97:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:48 2025 by rpki-client