Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa
File:                     3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (raw, json)
Hash identifier:          JUTzTvlYexnFPNLeYVV246OABhn5H9fI6Qm9dt6BRsY=
Subject key identifier:   ED:E7:16:10:A5:56:2C:D1:CF:30:9F:BB:7B:57:25:42:25:3B:27:F1
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       7314A088D4BF8B0B73AFF27CF889D26260801B19
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     61888
IP address blocks:        186.235.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:14:a0:88:d4:bf:8b:0b:73:af:f2:7c:f8:89:d2:62:60:80:1b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=EDE71610A5562CD1CF309FBB7B572542253B27F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:53:20:c9:4e:ca:ea:ee:a0:ad:c6:04:38:
                    53:c2:30:b1:d8:78:1b:20:82:40:fc:28:14:11:7d:
                    cb:56:90:6b:74:62:37:eb:e9:8e:c9:d9:6b:2c:47:
                    e2:a6:51:ff:4a:fe:be:60:83:b5:52:ed:77:95:50:
                    a8:51:15:04:77:a4:2c:d4:83:7f:b5:6d:b3:14:92:
                    cd:61:b8:1c:b9:02:77:dd:5b:b0:24:37:0f:a8:17:
                    35:19:61:30:b8:bc:31:c1:1a:8f:74:10:03:8b:47:
                    d3:d9:d1:be:ca:e2:c0:f9:23:64:d8:f8:eb:e8:93:
                    0e:03:55:38:62:0f:53:2f:cd:7d:3f:ac:f6:5d:4c:
                    71:2b:87:e8:93:3b:44:24:05:f9:b5:45:7d:90:85:
                    d7:d4:1e:5f:ff:92:22:4a:a2:b5:03:c5:35:cb:63:
                    c6:6f:f1:95:b7:da:11:28:40:f1:ef:b0:17:59:af:
                    3d:0e:c8:f7:68:84:b4:41:9b:0e:9c:1f:05:c5:ff:
                    2f:52:44:97:d8:61:af:41:6a:0b:8c:c0:f7:ae:ae:
                    ce:15:a3:b0:23:0c:b5:87:15:28:e4:3b:33:28:5e:
                    30:b2:a0:b6:4b:46:82:cb:36:29:0f:63:14:cf:9f:
                    d0:c3:65:fd:8b:ab:a9:67:3e:2e:37:1f:ad:ce:8f:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:16:10:A5:56:2C:D1:CF:30:9F:BB:7B:57:25:42:25:3B:27:F1
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:cf:a4:15:e7:d3:b9:54:9a:c1:70:f1:8f:7b:ee:1d:96:a9:
         91:5a:9e:4d:6d:3d:50:66:af:09:87:9c:97:dc:74:2f:cf:ea:
         0d:59:89:4f:c9:bf:4c:55:bf:27:2f:2c:8e:e9:ba:f6:5a:0d:
         ca:f3:16:cc:55:2f:ad:e8:f2:c4:3d:32:c2:ad:6e:e5:68:fa:
         b8:e5:31:be:43:58:1b:f2:60:ee:47:f8:45:eb:1c:20:38:33:
         0b:ec:98:e7:ce:1b:3d:66:18:ea:fb:04:54:34:ee:b4:b2:de:
         27:09:36:6f:69:0f:f2:48:77:b3:23:42:72:d5:d5:a5:dd:7c:
         bc:4e:2d:e6:29:4a:43:b6:1f:93:30:3a:5e:bd:ed:2f:e8:a8:
         04:f2:c7:12:c1:c3:ec:f7:88:b7:8c:5e:8b:1d:4f:17:8c:f7:
         64:15:66:c6:20:14:c1:5f:30:b9:fb:61:81:ee:3c:a7:57:83:
         59:7b:db:42:af:d7:9b:54:dc:92:dc:bd:a1:90:e8:bd:2f:56:
         26:0e:88:59:27:7b:b4:39:bc:91:f7:e0:d3:b7:c9:3c:69:f1:
         9d:28:94:7e:79:43:26:a5:10:95:40:ff:18:8c:f0:7c:7f:7a:
         e9:d5:0a:39:80:43:1d:30:e6:95:cd:74:c6:0d:2f:75:f5:40:
         45:73:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:21:38 2025 by rpki-client