Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39312e302f32342d3234203d3e203238363130.roa
File:                     3138362e3230392e39312e302f32342d3234203d3e203238363130.roa (raw, json)
Hash identifier:          Z4Rlrx5iDeU/Mkg/GpYTI8Ray8rKZT4rZSwFt2y/wtI=
Subject key identifier:   62:65:7A:33:27:2D:F3:56:6C:8A:90:65:94:56:91:75:1E:F9:8C:AE
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       03DA4AF85A6DF25DAA6905B0AB6762F04A017786
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39312e302f32342d3234203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:16:12 +0000
ROA not before:           Mon 11 Mar 2024 17:11:12 +0000
ROA not after:            Mon 10 Mar 2025 17:16:12 +0000
asID:                     28610
IP address blocks:        186.209.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:da:4a:f8:5a:6d:f2:5d:aa:69:05:b0:ab:67:62:f0:4a:01:77:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:11:12 2024 GMT
            Not After : Mar 10 17:16:12 2025 GMT
        Subject: CN=62657A33272DF3566C8A9065945691751EF98CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:07:28:1b:8b:82:7f:6e:e7:00:10:22:8d:
                    c7:78:2c:2e:21:03:61:25:1a:5b:9e:88:f2:e7:5f:
                    90:b3:71:13:e0:50:3e:c7:3f:e7:89:b6:a5:7e:0f:
                    e0:de:d9:64:f0:a3:55:8b:8a:ac:3f:b8:a3:d3:b0:
                    da:6d:82:ec:12:ff:8c:b5:18:fa:ad:94:f8:e6:b5:
                    26:f3:97:df:ec:3c:5f:cd:ba:3c:ba:ca:01:15:6a:
                    91:f6:6e:72:8f:d6:ff:32:98:73:2c:87:64:3e:ce:
                    e3:a8:1a:92:c9:bc:1d:27:51:b5:e0:fc:be:65:67:
                    e1:33:63:25:31:95:e8:dd:38:e7:3b:2c:62:b6:56:
                    b6:77:92:73:1e:44:21:d8:dc:35:b1:56:54:c4:c3:
                    34:fb:15:a4:02:6d:a5:e0:69:06:a3:7e:7c:9b:d3:
                    28:4f:9f:ea:8b:b8:ca:b6:48:27:bd:5c:d5:62:47:
                    a7:8f:cf:3c:4d:ff:8d:36:5a:d4:32:29:14:45:61:
                    6d:61:59:bd:99:d9:ab:2d:97:b0:9a:22:e8:87:25:
                    d7:76:08:36:53:49:ee:fa:cd:ca:e4:2d:80:44:1b:
                    e1:d3:d7:c4:31:78:d5:2a:0e:1e:47:39:9c:8a:0e:
                    48:77:31:35:0b:e2:56:bc:09:cb:8f:40:6c:5b:bb:
                    5e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:7A:33:27:2D:F3:56:6C:8A:90:65:94:56:91:75:1E:F9:8C:AE
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39312e302f32342d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:74:06:2c:e7:33:67:0e:25:14:33:12:9c:60:2a:91:44:
         6c:2e:7d:67:2a:92:f3:bf:c0:b0:e5:d3:8c:f6:02:8a:12:36:
         c9:2a:1d:cf:bb:7a:f1:c1:d2:2d:ba:cc:55:6d:18:f1:87:c6:
         67:d5:17:ac:a0:58:0f:02:ac:7a:11:94:c0:09:de:2d:8c:c0:
         33:b0:d1:aa:b9:c0:26:be:af:8b:5f:44:0d:6b:f7:d0:51:9e:
         81:d8:92:7a:f1:f2:70:83:c3:44:66:d2:51:da:12:44:15:a6:
         b8:a4:09:e6:ab:19:e6:b3:9e:08:ab:31:84:6b:04:53:28:e0:
         ca:c0:02:43:00:6d:02:46:77:fc:ae:3d:a7:43:2c:45:36:9e:
         6d:bb:47:4e:b1:09:49:63:c6:0c:37:78:58:b4:bd:20:4e:8e:
         2e:78:23:27:ee:66:ec:81:6f:dc:4b:e9:69:c5:21:b8:c4:cf:
         8e:6e:59:55:fb:4f:59:08:d9:3b:12:e2:43:2f:55:f8:9b:87:
         23:ad:2b:c4:af:4c:24:5c:4d:c3:cc:3a:2c:af:54:5c:81:2d:
         3c:ab:49:0d:d7:68:65:77:8a:66:66:be:5a:86:2d:58:98:e8:
         cc:19:af:f9:42:87:59:7b:31:55:f0:26:89:cb:1c:b2:57:5a:
         4d:97:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:19:38 2025 by rpki-client