Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e322e302f32332d3233203d3e20323632373235.roa
File:                     3138362e3139322e322e302f32332d3233203d3e20323632373235.roa (raw, json)
Hash identifier:          y/jZcqoZxIRKVOMckPxBh7vO2HlM4UCWJcX+WHTqqfE=
Subject key identifier:   67:26:C5:29:2A:FC:3F:92:B3:C0:AC:E5:FB:F8:31:F2:26:AE:75:91
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       0CA0793A89B9592119FAD211C2C4DDA3B7529C65
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e322e302f32332d3233203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:50 +0000
ROA not before:           Mon 11 Nov 2024 20:56:50 +0000
ROA not after:            Mon 10 Nov 2025 21:01:50 +0000
asID:                     262725
IP address blocks:        186.192.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a0:79:3a:89:b9:59:21:19:fa:d2:11:c2:c4:dd:a3:b7:52:9c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:50 2024 GMT
            Not After : Nov 10 21:01:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:bd:a6:0b:c0:7a:7f:4b:72:1c:55:00:9a:
                    27:ed:c7:fe:56:80:16:c9:5a:05:dd:4f:17:c7:d3:
                    56:50:d1:47:11:10:ff:77:c6:fa:01:07:35:c3:8b:
                    4b:96:38:ce:c3:8f:a8:e9:80:6a:ed:a3:44:d8:de:
                    d4:07:95:32:0a:62:fa:92:eb:27:7d:f4:53:cf:33:
                    a1:2c:dc:64:52:e7:9a:34:db:65:ac:5a:bb:29:37:
                    ab:d1:37:f2:db:4c:9d:95:fc:5f:df:d0:3d:1a:3c:
                    ac:d7:35:47:70:56:10:9a:7c:bf:e4:fd:65:8a:97:
                    94:e6:ea:87:ee:f0:a5:87:80:cd:85:6a:41:2d:5f:
                    20:4e:2e:35:eb:8a:aa:87:e4:45:db:a7:28:74:03:
                    f7:1a:a1:e6:76:3b:6d:54:c5:6b:11:ec:b8:d4:f2:
                    99:22:69:85:80:95:eb:9c:ee:f7:8f:fc:63:de:d9:
                    7e:79:93:0a:d6:07:38:69:95:b4:31:dc:de:b1:44:
                    8b:fc:e2:a6:b8:71:17:7c:97:33:98:0a:27:45:02:
                    0a:17:f9:5c:d6:c6:c3:84:ef:92:8b:52:58:4c:ab:
                    93:3a:1c:49:c2:7d:a9:18:c5:9a:d7:80:f5:87:da:
                    b1:b2:cc:ed:01:3a:4b:76:53:bf:7a:7b:27:89:25:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:C5:29:2A:FC:3F:92:B3:C0:AC:E5:FB:F8:31:F2:26:AE:75:91
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e322e302f32332d3233203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:52:d4:bb:ed:0d:4c:a6:3f:4e:15:2e:05:1f:20:88:3c:
         90:92:a6:e9:91:3b:14:7e:cd:fd:57:85:96:f1:9e:32:7f:af:
         93:cc:4b:3a:e5:75:a5:ff:39:09:77:b9:07:81:c2:64:e3:79:
         19:79:e0:22:9e:be:25:e6:74:c6:1b:f4:f0:55:fc:9d:ac:6e:
         ae:f3:8d:20:5c:f4:69:f1:8f:56:23:0b:3a:25:03:07:52:b9:
         fa:40:06:37:6b:45:b0:a4:92:5f:dc:fc:4f:ee:b6:b6:68:31:
         e6:09:48:f4:0e:be:cf:8e:b3:8c:3a:3c:d1:63:c3:30:b0:e9:
         b3:4f:56:20:79:8a:7e:b5:07:1c:e9:67:a1:73:e1:36:cb:d4:
         c3:6c:fc:f4:55:61:89:2c:4b:62:df:12:d8:4c:e1:f4:75:80:
         b3:27:03:44:b7:47:96:23:14:99:4b:66:c1:83:27:c9:46:96:
         45:cd:f6:30:4c:70:3b:52:7a:7b:dc:59:b3:7d:d3:7b:e0:81:
         c8:bb:15:b7:64:c3:98:ef:37:42:0a:eb:b1:24:c1:2c:f1:3b:
         2c:83:0c:33:5e:9e:c2:fd:ed:0a:df:7e:85:8e:14:4c:f6:e9:
         08:28:6c:20:55:cd:a3:68:1c:8b:e4:f0:f8:5f:45:1b:3e:1a:
         d0:ce:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:55:07 2025 by rpki-client