Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa
File:                     3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa (raw, json)
Hash identifier:          OghAuGoX8vZDLRv/0sW6u7mYvEBWUas5B+outqbwCvc=
Subject key identifier:   7B:F3:6B:2D:AB:86:8F:E5:67:CF:D6:BD:0B:55:2D:87:14:48:AD:5B
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       16ABB38A85C6192DC13A0C527B1E55CF04F13380
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     61888
IP address blocks:        186.235.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ab:b3:8a:85:c6:19:2d:c1:3a:0c:52:7b:1e:55:cf:04:f1:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=7BF36B2DAB868FE567CFD6BD0B552D871448AD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:10:1e:0c:52:12:33:23:4d:5b:0b:00:8b:
                    91:a0:b0:9e:a4:19:b7:15:25:39:ab:4d:9c:3a:08:
                    33:e1:5c:d2:c5:f4:72:eb:25:bb:7b:9a:6f:e6:fa:
                    c8:ef:7c:33:d8:7b:4b:7b:8b:c2:9e:e8:9e:07:da:
                    4a:5b:55:76:63:bd:66:1b:d4:0d:81:da:89:02:89:
                    f8:d2:ea:cd:d9:e5:5d:b7:a2:f9:ec:ef:8a:14:21:
                    f6:d8:7b:83:2e:85:71:4b:e0:99:90:29:9d:12:3e:
                    8f:8d:9d:fb:67:44:a7:9d:78:ee:dd:64:13:85:3b:
                    d2:77:20:c3:96:7b:79:87:2a:33:ed:ae:78:2d:d9:
                    30:6e:b5:80:bf:07:49:72:46:cc:dc:a9:e1:e0:54:
                    c3:26:43:a3:df:be:1f:9d:dc:92:f8:9c:c1:7a:de:
                    02:56:90:c2:2a:05:b5:bc:ea:f6:14:d7:4a:fe:a6:
                    2a:f8:ac:02:76:8c:53:ef:aa:bd:94:3b:02:37:28:
                    c3:49:53:06:48:fd:b7:31:41:d4:c2:45:14:76:e4:
                    4e:ca:55:6b:6f:10:62:51:6e:ad:b2:3d:81:ec:19:
                    1e:5d:3e:cf:fd:05:06:79:46:94:db:94:a5:5e:a0:
                    41:a9:be:26:e3:58:42:30:1b:69:19:0f:63:cf:b3:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:6B:2D:AB:86:8F:E5:67:CF:D6:BD:0B:55:2D:87:14:48:AD:5B
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:a3:7d:fa:ef:7c:e6:55:74:93:c4:d2:22:68:eb:23:af:
         36:b8:ee:73:74:b8:82:73:de:3b:9b:e7:4f:24:ad:5a:52:56:
         45:73:d7:26:da:2d:5e:69:b9:d7:bc:2b:2f:b3:93:ce:0e:8b:
         8a:e7:fd:d8:db:eb:6f:a7:5d:01:b4:8c:95:62:67:17:a8:a2:
         0f:6d:e0:44:70:99:2a:90:11:96:87:0d:00:89:bd:20:30:03:
         e4:3e:3a:95:70:f2:ab:2b:c1:65:00:dd:79:70:89:ea:c3:55:
         21:a2:40:46:8a:7f:63:0e:c2:6d:ad:a9:67:8e:e8:bc:b9:97:
         cb:6f:2c:65:1a:2e:4c:b4:43:41:7d:e8:3c:de:89:0e:6f:15:
         67:e3:8a:35:77:87:a6:08:c1:f0:76:f7:ce:7e:7d:a6:ef:dc:
         b8:ee:46:a7:43:8d:6a:4a:3c:e8:0d:d6:54:a6:b3:ed:d3:60:
         a1:66:e0:85:2e:74:ab:43:b8:b4:06:66:c9:e0:6b:81:82:27:
         c5:95:b3:4d:09:7d:9d:a7:4e:ca:bf:06:47:68:60:af:83:35:
         42:c7:d0:97:44:f5:60:67:c6:e6:41:db:63:4a:e1:b6:c2:ab:
         65:8f:1a:4a:81:84:54:59:14:09:5d:48:5d:69:19:71:1d:26:
         1c:82:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:54:50 2025 by rpki-client