Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37382e302f32332d3233203d3e20323632373235.roa
File:                     3138362e3233352e37382e302f32332d3233203d3e20323632373235.roa (raw, json)
Hash identifier:          z9FjCWBbTSIIgiTTPO44VIpnulWk7cEAvE8eNN5Tp4g=
Subject key identifier:   F0:58:FF:27:7F:6E:F4:95:D0:01:D7:F7:2D:C4:2E:85:49:BD:A1:FB
Certificate issuer:       /CN=803C333301EC067F38343D2375CBA64A4C29FBB7
Certificate serial:       3D1B6174E16D8FE912F10227DCE3675C633E5CAF
Authority key identifier: 80:3C:33:33:01:EC:06:7F:38:34:3D:23:75:CB:A6:4A:4C:29:FB:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/803C333301EC067F38343D2375CBA64A4C29FBB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37382e302f32332d3233203d3e20323632373235.roa
Signing time:             Sat 23 Sep 2023 22:43:52 +0000
ROA not before:           Sat 23 Sep 2023 22:38:52 +0000
ROA not after:            Sat 21 Sep 2024 22:43:52 +0000
asID:                     262725
IP address blocks:        186.235.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1b:61:74:e1:6d:8f:e9:12:f1:02:27:dc:e3:67:5c:63:3e:5c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803C333301EC067F38343D2375CBA64A4C29FBB7
        Validity
            Not Before: Sep 23 22:38:52 2023 GMT
            Not After : Sep 21 22:43:52 2024 GMT
        Subject: CN=3082010A0282010100C70AC40FE1318B6E83E6C81A00D386E3634D82148BF1AE82E00171E09949FD66A4F139906E8C913067A61CEFA641BB050688CE1F19E4DE850C8A2A21764FB5D66B9E241EA747B863334457F164627FA3DBD387E4177FAC3B2CE734E23A0DDA4453314808EC78DB439AE7072BF3E8970C1A8D07B6C017F97620A6D0A03D17352A5925E1F5B198E5B6D5494F4C86E9E9F5268EA1EEBB96BAA733E5F92C87F387C048622147DD09A469B8EB2384F757BBD4F4197F4129D016C1F63AA7FCA8BEE77A1D01DD0469694AEA8896A5DF8A92448AE36E28BF46746B407DFAFE11C0116A630AD11020A225CDD57634566728D78FB0B3106A64D6F9DC13C7EBD3FB9C4799570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:c4:0f:e1:31:8b:6e:83:e6:c8:1a:00:d3:
                    86:e3:63:4d:82:14:8b:f1:ae:82:e0:01:71:e0:99:
                    49:fd:66:a4:f1:39:90:6e:8c:91:30:67:a6:1c:ef:
                    a6:41:bb:05:06:88:ce:1f:19:e4:de:85:0c:8a:2a:
                    21:76:4f:b5:d6:6b:9e:24:1e:a7:47:b8:63:33:44:
                    57:f1:64:62:7f:a3:db:d3:87:e4:17:7f:ac:3b:2c:
                    e7:34:e2:3a:0d:da:44:53:31:48:08:ec:78:db:43:
                    9a:e7:07:2b:f3:e8:97:0c:1a:8d:07:b6:c0:17:f9:
                    76:20:a6:d0:a0:3d:17:35:2a:59:25:e1:f5:b1:98:
                    e5:b6:d5:49:4f:4c:86:e9:e9:f5:26:8e:a1:ee:bb:
                    96:ba:a7:33:e5:f9:2c:87:f3:87:c0:48:62:21:47:
                    dd:09:a4:69:b8:eb:23:84:f7:57:bb:d4:f4:19:7f:
                    41:29:d0:16:c1:f6:3a:a7:fc:a8:be:e7:7a:1d:01:
                    dd:04:69:69:4a:ea:88:96:a5:df:8a:92:44:8a:e3:
                    6e:28:bf:46:74:6b:40:7d:fa:fe:11:c0:11:6a:63:
                    0a:d1:10:20:a2:25:cd:d5:76:34:56:67:28:d7:8f:
                    b0:b3:10:6a:64:d6:f9:dc:13:c7:eb:d3:fb:9c:47:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:58:FF:27:7F:6E:F4:95:D0:01:D7:F7:2D:C4:2E:85:49:BD:A1:FB
            X509v3 Authority Key Identifier:
                keyid:80:3C:33:33:01:EC:06:7F:38:34:3D:23:75:CB:A6:4A:4C:29:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/803C333301EC067F38343D2375CBA64A4C29FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/803C333301EC067F38343D2375CBA64A4C29FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37382e302f32332d3233203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:47:a3:9f:96:76:d0:f1:70:da:ea:4b:ef:5d:71:19:72:48:
         c0:d4:48:b4:5e:d6:3c:16:df:81:98:66:5e:e9:70:94:a4:12:
         8b:40:2a:6c:c7:6c:25:aa:4c:a1:24:c1:18:4f:4d:ba:50:64:
         03:b3:8c:9a:24:42:6e:0e:26:d1:38:37:f1:af:2a:7f:5e:b1:
         03:d9:71:ea:f7:e3:2c:46:64:4b:e9:91:7e:90:cc:e6:ee:ff:
         7b:ee:b7:b2:b9:ae:9c:c0:9d:56:78:e1:56:d2:3c:fa:9b:56:
         6a:5a:31:05:bc:22:63:12:dc:4a:71:c4:a6:13:e1:0d:46:42:
         9a:cb:51:42:b5:6c:00:bf:04:bd:94:c6:63:78:6c:ae:ea:c5:
         0b:d4:ed:69:42:03:21:30:4c:b7:15:84:f6:d7:1e:e8:39:20:
         02:0c:c3:00:27:6a:ec:ff:7c:a1:2d:4e:fa:19:c2:0c:dc:53:
         bb:54:db:e6:9b:82:7e:11:43:8c:5f:f3:ef:1f:2a:eb:df:a1:
         7a:47:00:c8:7b:3c:18:bb:cf:ed:20:5d:ed:75:34:d8:7b:3e:
         63:4c:5b:ee:61:13:47:b2:f0:4b:68:20:09:4c:77:b5:f3:7e:
         bd:ec:d8:ff:1b:67:06:f6:71:f2:a8:27:60:48:03:c4:49:6b:
         5f:a1:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:17:07 2025 by rpki-client