Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3138362e3231392e3134342e302f32302d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134342e302f32302d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          JYtkKOKFusmpUky+pKI04mv8ntWIjj3uL2gfn1Sui+Y=
Subject key identifier:   25:F9:A8:D2:78:C6:EF:55:C2:40:EB:63:4A:D2:F4:BD:FB:B4:F6:84
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       7AE5570632AC9118C570213E0161625AF523E8D4
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3138362e3231392e3134342e302f32302d3234203d3e20323632393932.roa
Signing time:             Tue 24 Jan 2023 14:02:16 +0000
ROA not before:           Tue 24 Jan 2023 13:57:16 +0000
ROA not after:            Tue 23 Jan 2024 14:02:16 +0000
asID:                     262992
IP address blocks:        186.219.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e5:57:06:32:ac:91:18:c5:70:21:3e:01:61:62:5a:f5:23:e8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 24 13:57:16 2023 GMT
            Not After : Jan 23 14:02:16 2024 GMT
        Subject: CN=25F9A8D278C6EF55C240EB634AD2F4BDFBB4F684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:25:f6:bb:6f:4b:b9:5a:2c:42:62:0d:0b:
                    6f:2d:3d:38:72:2c:a9:71:90:98:18:88:63:d9:2d:
                    97:3e:ae:38:1f:42:00:42:af:17:46:76:c4:b0:27:
                    f4:78:5c:8b:4a:d0:59:eb:4f:4a:d6:de:2f:77:82:
                    f5:65:8f:5b:a1:25:a2:4f:65:c7:09:f1:53:ca:1f:
                    a0:1f:a5:5b:62:90:0b:e4:7d:e6:19:3c:03:26:84:
                    90:51:5c:34:8e:bc:6e:c8:65:16:01:69:04:b0:c5:
                    b9:b9:2c:29:c6:0c:e5:52:1d:a5:83:36:b5:8a:db:
                    6d:a3:9f:aa:02:31:ee:47:ba:d2:5f:e6:bc:71:7b:
                    97:0b:39:00:83:c0:91:96:f5:29:23:e3:a4:1d:25:
                    ef:11:7a:8a:d3:23:93:a7:c8:91:10:7e:e9:e8:5f:
                    32:7a:2d:1f:da:31:b3:93:6f:21:c2:2a:0b:05:9f:
                    67:83:8c:ac:cc:74:57:71:fd:84:a6:9e:ff:c9:bf:
                    13:68:e4:54:2b:c0:aa:e2:8f:41:1b:ff:7c:5e:16:
                    a0:17:58:74:f4:d6:bf:8b:f7:09:16:47:a5:00:c7:
                    db:d0:a8:a3:e0:e3:10:db:78:b5:74:53:a6:b2:e3:
                    7f:79:7d:89:e8:0a:02:08:40:81:ac:24:52:92:b2:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F9:A8:D2:78:C6:EF:55:C2:40:EB:63:4A:D2:F4:BD:FB:B4:F6:84
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3138362e3231392e3134342e302f32302d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:3c:9f:fd:78:0f:7b:ad:06:b3:6e:d8:8c:46:80:6b:fc:
         5a:2e:04:2d:72:8c:dd:9d:7a:a0:d2:ba:7f:99:8a:1b:32:12:
         87:b7:35:0f:2a:cd:23:31:0d:4c:e9:a6:3d:88:b9:ef:87:ca:
         2f:05:20:a6:aa:1d:68:55:2f:36:9e:9a:39:bb:41:4a:1f:0a:
         dc:b3:67:26:bc:4a:3f:fd:a6:bd:43:df:8e:71:09:09:21:d8:
         8c:d1:ed:6e:0f:7c:71:ad:f0:52:f0:73:36:f0:1d:0a:26:35:
         00:17:d1:d4:6f:65:5e:07:56:8a:ae:34:7f:2f:f3:3d:6a:14:
         04:43:11:2a:e0:c5:86:03:66:49:ef:20:59:50:ba:18:a8:53:
         6d:32:54:b7:23:c1:c3:6e:e1:0d:41:0b:36:ee:d7:3e:74:a1:
         5a:38:db:d0:16:04:35:c6:01:7d:68:37:2b:d7:de:db:a3:6d:
         be:56:7b:fd:bd:23:e4:12:ca:07:8f:6f:ad:51:87:3f:54:8f:
         e0:6e:25:53:d4:12:74:78:5e:b5:ad:40:a2:e2:f4:e5:57:1b:
         9d:1c:c4:d9:af:8d:8e:27:37:10:52:82:91:d9:91:21:21:92:
         10:ef:51:c6:1b:db:0e:65:6c:65:a6:a0:2f:69:c5:bd:03:9f:
         67:c0:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:02:28 2025 by rpki-client