Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
File:                     3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          mINQcu3+a18r29P2stfpXBkhmbKAwWWSTw/Prna/efg=
Subject key identifier:   2B:CB:31:E2:B9:E5:B1:7B:9B:37:1B:C1:00:A9:57:45:99:64:74:D3
Certificate issuer:       /CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619
Certificate serial:       287F2A2D40C89F9109D447FF27DB0FCF9424B617
Authority key identifier: 9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
Signing time:             Mon 03 Mar 2025 12:41:21 +0000
ROA not before:           Mon 03 Mar 2025 12:36:21 +0000
ROA not after:            Mon 02 Mar 2026 12:41:21 +0000
asID:                     262675
IP address blocks:        186.233.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7f:2a:2d:40:c8:9f:91:09:d4:47:ff:27:db:0f:cf:94:24:b6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619
        Validity
            Not Before: Mar  3 12:36:21 2025 GMT
            Not After : Mar  2 12:41:21 2026 GMT
        Subject: CN=2BCB31E2B9E5B17B9B371BC100A95745996474D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:0e:cd:e8:0d:16:7c:c2:78:8f:ba:18:7d:
                    c9:18:a1:8e:34:a4:7e:96:34:e7:15:94:11:48:94:
                    c4:97:7a:38:84:4a:ba:b6:4b:e4:37:eb:0d:2e:61:
                    04:32:ee:69:33:12:0d:19:3e:06:c1:81:15:87:13:
                    4b:d9:33:1b:fd:b6:7a:16:99:e5:1c:c1:4b:fd:55:
                    57:6f:2b:64:44:ac:c7:33:a8:be:9f:7c:fa:9e:71:
                    c1:20:b8:84:06:ee:db:5a:f1:1c:08:15:cc:48:52:
                    70:b6:45:ee:61:13:56:d0:41:15:a8:26:70:fc:21:
                    e5:f7:1b:98:52:5c:48:0e:e6:95:bd:04:2d:6a:90:
                    fa:70:04:be:a6:5e:53:be:95:ce:d1:10:db:3a:94:
                    0b:f6:5d:a4:57:30:0c:f3:9f:c8:05:d3:96:d4:09:
                    ff:5f:de:70:8f:8b:cb:a1:cc:d4:84:54:9f:f0:f3:
                    2a:1e:1a:c4:5d:55:5c:d9:fb:9c:36:00:af:38:21:
                    6b:dd:b5:b4:08:5d:1b:d2:f3:9f:0e:0f:bd:0a:e4:
                    81:f9:47:68:ef:f8:4c:3b:6b:7e:b1:b8:5b:ba:b7:
                    42:dd:5b:75:f3:40:ce:33:73:fb:e7:4f:4f:e3:c9:
                    90:2f:19:4e:cb:bf:97:c6:fb:62:70:c3:b4:5a:20:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CB:31:E2:B9:E5:B1:7B:9B:37:1B:C1:00:A9:57:45:99:64:74:D3
            X509v3 Authority Key Identifier:
                keyid:9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:d9:ce:bb:f7:96:27:fa:b8:b8:1d:fd:93:1d:17:ec:01:d8:
         53:14:14:f5:5b:34:63:0d:e4:9b:35:c2:5b:19:33:20:15:d5:
         3e:fd:2d:6b:79:5d:08:97:9b:85:39:83:60:48:44:a7:aa:52:
         67:a7:21:c9:e3:dc:57:5d:03:ea:38:17:49:79:e9:ed:88:5c:
         cb:c4:cc:96:05:93:53:38:e1:68:c3:5d:4b:2f:10:57:f0:f8:
         f5:af:1f:15:c1:d3:dd:87:5b:91:37:c2:e6:a5:1f:94:79:8a:
         c5:43:73:76:ac:21:28:eb:59:5e:bc:7e:19:08:5d:e4:91:2b:
         88:69:1c:29:75:27:7a:80:7b:2b:ec:31:78:ed:c3:99:5e:49:
         4a:fc:47:85:a6:e5:24:3b:ea:df:0f:16:c3:7c:be:a6:c4:9a:
         79:2f:14:2d:eb:db:e0:4b:e5:f8:9b:38:27:b9:fd:1b:60:b2:
         2a:e4:8b:dc:c4:d7:ee:7c:de:12:b1:13:c4:cd:6d:bb:9a:44:
         f2:16:e0:b7:dc:9d:eb:5c:96:5e:23:a2:88:1d:d4:b7:43:db:
         84:53:1a:5d:f2:10:35:45:32:14:8f:1f:ab:e0:8f:8c:67:85:
         e4:f1:57:8c:76:90:d4:14:92:13:d5:60:48:bd:a7:96:7c:8b:
         75:b1:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:49:57 2025 by rpki-client