Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa
File:                     3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          gF5wkMxrfYNxQscNxIAE0HOVsT8aFaXHA5Mf5VOw81g=
Subject key identifier:   16:54:63:19:71:2C:75:47:48:AF:C7:6D:8F:CD:9F:CC:EC:D6:38:47
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       096C79BFB339D3570AF06A6083C84BF736DD5684
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:14 +0000
ROA not before:           Thu 07 Nov 2024 20:35:14 +0000
ROA not after:            Thu 06 Nov 2025 20:40:14 +0000
asID:                     28270
IP address blocks:        186.219.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6c:79:bf:b3:39:d3:57:0a:f0:6a:60:83:c8:4b:f7:36:dd:56:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:14 2024 GMT
            Not After : Nov  6 20:40:14 2025 GMT
        Subject: CN=16546319712C754748AFC76D8FCD9FCCECD63847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:9e:a2:d8:a5:28:34:d6:5d:b9:ee:38:ed:
                    5f:db:42:73:1a:09:7e:3b:9b:6d:07:37:d9:dd:14:
                    c1:53:0f:5c:d7:ff:65:33:04:3b:b8:8b:eb:98:bf:
                    1f:81:56:cf:2e:b0:99:a3:dc:aa:0b:5c:42:c9:b1:
                    20:56:7c:8e:d9:45:5f:ea:e1:b7:6b:02:4e:74:9c:
                    b8:f2:45:ed:ee:ba:b2:a2:fe:a8:b7:5a:35:4c:c6:
                    6a:66:69:80:1a:56:cf:6b:87:2b:b4:21:bc:12:a0:
                    72:55:62:bf:f1:ae:7a:12:70:c5:a9:25:84:cb:ed:
                    60:02:1c:da:29:d5:41:0c:49:85:9d:3c:83:0c:d2:
                    31:51:ac:1c:72:37:eb:9c:f8:fe:90:b6:19:e1:a7:
                    a9:02:94:e8:25:66:89:e6:5b:50:d2:9a:9c:f3:80:
                    b9:e4:d5:0c:9e:ff:ce:88:3b:b8:b7:bd:27:e6:a3:
                    40:43:a2:88:3c:d9:ab:7f:53:6b:9b:65:a2:f8:07:
                    4c:a2:15:68:54:5f:77:e2:51:67:7b:0a:b3:1f:2f:
                    af:f3:b2:59:b6:94:b7:60:aa:90:2c:4f:b3:9f:5e:
                    48:3a:03:dc:d5:bb:ef:5a:f2:81:2b:81:53:ec:44:
                    31:d3:9d:4f:81:94:3d:92:7a:d9:d5:64:7d:d8:5a:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:63:19:71:2C:75:47:48:AF:C7:6D:8F:CD:9F:CC:EC:D6:38:47
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:95:a7:12:68:fc:ec:d8:1c:57:af:36:70:f2:1e:4e:8d:3f:
         54:20:09:3f:35:bc:b5:f7:6f:d1:e0:07:e4:70:99:06:5b:5c:
         54:b2:64:13:b8:29:4d:92:76:ed:8d:a3:9e:36:02:59:3d:bb:
         5d:5d:2d:0b:bc:eb:8b:69:df:64:c7:50:4b:25:43:d5:72:95:
         c5:43:0d:84:21:4d:8e:c1:71:05:29:59:22:23:fd:3b:d6:f2:
         4f:45:c3:ae:be:21:cc:8a:66:e5:c3:2a:1b:58:f5:62:0a:a3:
         47:9a:b6:46:f8:80:07:b6:dd:e2:7f:3d:88:26:be:bc:fc:f0:
         0a:e0:96:f9:c4:58:07:cd:e3:28:da:60:ef:97:9d:df:78:c7:
         0c:63:1e:79:e4:97:d3:86:75:5a:43:81:ba:13:09:78:2c:8c:
         ef:e1:b1:76:b1:43:30:3e:f0:00:f0:a7:90:53:72:47:95:0f:
         70:ff:e9:8a:15:20:5d:2e:b5:77:45:f8:73:8f:48:94:dc:f4:
         19:c4:be:39:1a:1a:4b:31:48:12:c4:58:af:2a:5f:35:02:63:
         7d:9a:06:30:33:1f:bc:24:30:74:37:9c:ed:d9:39:df:d7:d1:
         d3:7c:b9:c5:03:eb:76:c7:10:2e:ec:61:65:78:b9:ef:b7:06:
         ea:ee:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:09:54 2025 by rpki-client