Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS53224.roa
File:                     AS53224.roa (raw, json)
Hash identifier:          2+RlotzDAXArZA6cKNMyU2VgO9u32Z6giVBIsP15IFE=
Subject key identifier:   6F:07:6C:72:52:C9:C7:08:3A:E3:2D:66:1E:42:6E:C1:84:DC:EC:94
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       56994DE522AD43D42F6B87A8ACAB26E16DF4E89C
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS53224.roa
Signing time:             Wed 10 Apr 2024 02:17:13 +0000
ROA not before:           Wed 10 Apr 2024 02:12:13 +0000
ROA not after:            Wed 09 Apr 2025 02:17:13 +0000
asID:                     53224
IP address blocks:        186.193.96.0/20 maxlen: 20
                          186.193.103.0/24 maxlen: 24
                          186.193.104.0/24 maxlen: 24
                          186.208.208.0/21 maxlen: 21
                          186.208.209.0/24 maxlen: 24
                          186.208.210.0/23 maxlen: 23
                          186.208.211.0/24 maxlen: 24
                          186.208.214.0/24 maxlen: 24
                          186.208.215.0/24 maxlen: 24
                          186.251.112.0/22 maxlen: 22
                          186.251.113.0/24 maxlen: 24
                          186.251.114.0/24 maxlen: 24
                          186.251.115.0/24 maxlen: 24
                          186.251.117.0/24 maxlen: 24
                          186.251.118.0/24 maxlen: 24
                          186.251.119.0/24 maxlen: 24
                          187.86.96.0/20 maxlen: 20
                          187.86.97.0/24 maxlen: 24
                          187.86.98.0/24 maxlen: 24
                          187.86.99.0/24 maxlen: 24
                          187.86.100.0/24 maxlen: 24
                          187.86.101.0/24 maxlen: 24
                          187.86.110.0/24 maxlen: 24
                          189.45.16.0/20 maxlen: 20
                          200.233.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:99:4d:e5:22:ad:43:d4:2f:6b:87:a8:ac:ab:26:e1:6d:f4:e8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr 10 02:12:13 2024 GMT
            Not After : Apr  9 02:17:13 2025 GMT
        Subject: CN=6F076C7252C9C7083AE32D661E426EC184DCEC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:f9:f7:51:35:41:80:a6:8e:b9:41:9d:51:
                    a8:9b:ea:42:be:a3:15:71:3c:d0:da:a2:1c:1f:4b:
                    fe:94:ef:35:ef:e9:30:42:11:b6:cb:d4:de:ed:65:
                    22:32:ed:e0:14:91:3f:9b:d6:df:41:d6:ee:1c:f7:
                    b6:2d:de:c3:d3:1a:1f:28:d5:30:cb:28:d6:24:c1:
                    67:f3:a5:25:aa:c2:7b:b1:98:6f:53:8a:b1:05:f8:
                    22:22:9f:5d:ba:36:38:74:bb:1a:f0:7a:e3:a2:ac:
                    66:9a:57:7e:08:2b:66:ed:3e:50:23:87:cb:36:4a:
                    5e:ec:10:36:b2:36:07:b6:a3:f0:cd:27:ac:61:df:
                    36:a8:b1:89:7b:7c:d8:66:d8:5d:ba:2f:be:5b:8f:
                    b6:6e:f9:31:c3:c5:5b:fb:59:4c:ba:a2:08:2b:34:
                    03:a5:2d:d2:00:68:b9:6c:ed:ea:84:4d:56:d5:70:
                    51:38:57:dd:9e:fd:2c:32:63:ee:a4:3c:aa:7d:ba:
                    bd:5c:88:f8:1f:3c:ea:b4:c8:12:c6:78:1a:45:e9:
                    80:5d:5b:b4:64:77:73:3a:84:1e:a3:14:c7:b8:df:
                    1e:76:4a:79:a8:03:d1:64:18:3b:21:71:b6:1e:7c:
                    a7:74:2a:8f:44:dd:39:78:aa:a2:41:58:fd:4c:4f:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:6C:72:52:C9:C7:08:3A:E3:2D:66:1E:42:6E:C1:84:DC:EC:94
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS53224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/20
                  186.208.208.0/21
                  186.251.112.0/22
                  186.251.117.0-186.251.119.255
                  187.86.96.0/20
                  189.45.16.0/20
                  200.233.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:6a:0a:95:77:14:2d:d2:30:91:62:46:70:22:b0:9f:37:
         2c:51:12:bd:c9:5a:c3:97:6d:32:a9:82:d3:de:58:5a:23:42:
         ef:1e:4b:f7:42:f8:a5:bd:d0:c6:55:b1:a9:be:30:ff:8e:17:
         71:78:04:c7:43:8d:00:80:92:68:16:75:a0:30:81:38:2d:36:
         6e:56:fe:e6:25:a7:29:6c:bc:ac:b0:2a:91:ee:ad:ad:f1:be:
         1a:0d:63:0e:4a:75:55:39:40:ba:84:97:cd:27:85:b9:42:af:
         5c:a1:7f:51:37:29:00:a2:d0:6c:1d:c9:7f:88:c3:0b:c5:7f:
         5b:2e:85:77:49:f4:e8:56:47:69:1d:72:57:1b:ad:ba:da:71:
         c2:0c:28:27:8a:57:5f:1f:65:00:e5:b4:0c:81:fd:01:91:d6:
         5f:2d:04:a3:9d:09:b2:15:c9:3f:20:29:fc:8c:d0:45:72:c8:
         e6:be:3b:85:8b:cb:db:43:4b:0a:f0:93:86:65:68:a6:f9:00:
         6d:8f:fc:86:bc:1c:fa:1f:ad:30:5e:50:6a:0a:55:31:be:55:
         a1:ce:75:89:df:d5:2e:c7:cf:0b:06:70:08:64:bd:18:64:0e:
         df:27:0d:0b:33:f4:8e:5a:3f:7b:b0:60:24:89:f6:a9:3e:d1:
         34:2e:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:53:19 2025 by rpki-client