Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36352e302f32342d3234203d3e20323632373235.roa
File:                     3138362e3233352e36352e302f32342d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          La6r98SoqSNHBRFI5XWSg8eV5jVMS6bnQGplvHV4XNE=
Subject key identifier:   08:1D:E8:C0:2F:B4:D7:5E:EF:55:5D:7D:8A:68:DA:0B:60:B7:2F:D1
Certificate issuer:       /CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
Certificate serial:       35FBEB35F7284DA2CE0AD861CD97EE5BD85D3CCA
Authority key identifier: 93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36352e302f32342d3234203d3e20323632373235.roa
Signing time:             Tue 10 Sep 2024 18:13:12 +0000
ROA not before:           Tue 10 Sep 2024 18:08:12 +0000
ROA not after:            Tue 09 Sep 2025 18:13:12 +0000
asID:                     262725
IP address blocks:        186.235.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fb:eb:35:f7:28:4d:a2:ce:0a:d8:61:cd:97:ee:5b:d8:5d:3c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE
        Validity
            Not Before: Sep 10 18:08:12 2024 GMT
            Not After : Sep  9 18:13:12 2025 GMT
        Subject: CN=3082010A0282010100C1B8D293E6BB843B48AC73EE2A629D00A506AF4E97B070F6EFF5EED347FB5CA51D1FC69B4F2FDE528DEDA75203BA1C5486882FE657647C5A45102BE53DCE24A5D7D29AEFD43C79F974C679A80F881EB6DA2350DA32A354EF53A398EF8D84CC26D410387AEC83C0A0D131A7A0CB40A9BB7A8D6F6EA53C8B851A32931A2A179B145735BDAD3B3A675454465C070CA4AEC074DD506044412D565223DF7E19BF4869E2CBEA201C1374E16365ABC545E531829776D026DA15C1922683ECDF8C62229BFC9A17B0CF3FBE7A7EE1729CBBF9AA404EAA29EBBD0CD3E0786E1C9E02050231B1D7D176B8153D67F52F2EB9DED584EAED015516BE7D84C3AF463EAEC703E2470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:d2:93:e6:bb:84:3b:48:ac:73:ee:2a:62:
                    9d:00:a5:06:af:4e:97:b0:70:f6:ef:f5:ee:d3:47:
                    fb:5c:a5:1d:1f:c6:9b:4f:2f:de:52:8d:ed:a7:52:
                    03:ba:1c:54:86:88:2f:e6:57:64:7c:5a:45:10:2b:
                    e5:3d:ce:24:a5:d7:d2:9a:ef:d4:3c:79:f9:74:c6:
                    79:a8:0f:88:1e:b6:da:23:50:da:32:a3:54:ef:53:
                    a3:98:ef:8d:84:cc:26:d4:10:38:7a:ec:83:c0:a0:
                    d1:31:a7:a0:cb:40:a9:bb:7a:8d:6f:6e:a5:3c:8b:
                    85:1a:32:93:1a:2a:17:9b:14:57:35:bd:ad:3b:3a:
                    67:54:54:46:5c:07:0c:a4:ae:c0:74:dd:50:60:44:
                    41:2d:56:52:23:df:7e:19:bf:48:69:e2:cb:ea:20:
                    1c:13:74:e1:63:65:ab:c5:45:e5:31:82:97:76:d0:
                    26:da:15:c1:92:26:83:ec:df:8c:62:22:9b:fc:9a:
                    17:b0:cf:3f:be:7a:7e:e1:72:9c:bb:f9:aa:40:4e:
                    aa:29:eb:bd:0c:d3:e0:78:6e:1c:9e:02:05:02:31:
                    b1:d7:d1:76:b8:15:3d:67:f5:2f:2e:b9:de:d5:84:
                    ea:ed:01:55:16:be:7d:84:c3:af:46:3e:ae:c7:03:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1D:E8:C0:2F:B4:D7:5E:EF:55:5D:7D:8A:68:DA:0B:60:B7:2F:D1
            X509v3 Authority Key Identifier:
                keyid:93:05:E9:26:87:D8:CE:4B:1D:38:46:CC:7D:DA:49:EC:54:E3:CF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9305E92687D8CE4B1D3846CC7DDA49EC54E3CFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36352e302f32342d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:71:8f:56:58:09:c7:7b:6e:aa:6d:22:bc:0f:74:62:d6:20:
         7b:da:2c:dd:13:72:d0:b5:9f:a0:41:3b:53:a1:9e:35:b3:12:
         ea:08:5a:80:54:a6:46:69:45:06:6a:1a:88:64:dd:b1:ca:62:
         8d:d3:1c:f6:86:c3:56:b2:7d:63:c2:6a:ff:8f:06:2e:5b:77:
         e4:90:52:6e:0e:29:19:b9:c4:d1:8f:51:19:63:9f:5e:3b:bd:
         2f:7f:2a:1b:f8:b9:d2:cd:47:05:0a:99:90:26:2c:79:fb:53:
         42:6f:0e:2b:07:b2:48:6d:17:a1:cb:51:dd:e0:a6:2a:fc:b4:
         22:c2:ed:75:ab:98:ee:3c:a1:1a:4b:b8:12:89:1f:83:8f:bc:
         7a:f4:83:a9:32:45:7d:3b:9e:1c:75:7a:af:a0:52:32:1d:44:
         f3:39:06:b6:42:af:58:0c:9a:ec:ca:07:1a:72:47:c5:be:77:
         6c:ee:be:9e:c1:01:44:eb:9a:9e:92:d1:33:5a:2c:b4:eb:5c:
         cd:31:a4:08:0d:51:24:93:b0:a9:e1:d1:9e:54:c8:0a:02:5b:
         f9:87:3b:d3:a2:42:cb:90:62:f9:9c:49:54:da:c1:a6:79:71:
         60:5a:59:25:3b:14:f7:31:db:9a:1f:1b:5a:d9:03:f0:40:ab:
         81:c3:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:01 2025 by rpki-client