Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          dbrZMKsE60132DZUUTkFlnTpGTX8MBeJXxLl2qW428M=
Subject key identifier:   65:10:A3:DF:E3:AA:0F:F3:40:1D:CA:F0:CE:61:B3:B6:7C:11:CE:78
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       21BF8706151317A7B55EC626C4DDDEB60344AA44
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 14 Oct 2024 01:49:49 +0000
ROA not before:           Mon 14 Oct 2024 01:44:49 +0000
ROA not after:            Mon 13 Oct 2025 01:49:49 +0000
asID:                     262992
IP address blocks:        186.219.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bf:87:06:15:13:17:a7:b5:5e:c6:26:c4:dd:de:b6:03:44:aa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:49 2024 GMT
            Not After : Oct 13 01:49:49 2025 GMT
        Subject: CN=6510A3DFE3AA0FF3401DCAF0CE61B3B67C11CE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:6a:0f:88:9d:9e:56:a1:7d:21:56:16:e2:
                    73:74:1d:7b:70:d0:90:2b:a9:3c:cd:b6:54:59:f6:
                    8c:79:b4:b3:0c:ae:10:40:3e:af:74:56:c3:45:1e:
                    e6:22:21:89:69:f0:08:91:59:c5:35:b5:70:6e:99:
                    25:12:9b:44:ba:39:5a:5d:45:e6:d5:b8:b2:85:92:
                    08:0a:a3:e7:d7:2d:57:e7:f8:ab:40:f8:d3:98:7e:
                    18:02:12:ad:e9:a3:91:2c:3b:08:39:dc:64:50:33:
                    ac:c2:94:2e:17:e3:f7:60:85:e2:dd:92:30:b4:ea:
                    ca:43:79:ae:e6:59:67:bb:06:8b:ca:9d:2d:6a:31:
                    b4:eb:a4:63:80:17:ed:69:c5:c7:64:f9:48:fe:b9:
                    e6:ba:f2:2b:db:65:b6:89:73:3c:d5:01:78:00:58:
                    86:1b:ca:c6:e8:48:18:84:77:59:8c:6e:03:6b:5e:
                    71:eb:9f:3d:77:c8:38:39:db:b2:4b:17:00:b7:74:
                    26:4d:c2:8c:05:b9:b5:f8:7a:a8:6a:2f:90:3f:1b:
                    6e:db:07:fa:b2:00:cf:33:a4:0a:c6:e5:e9:06:8f:
                    60:92:77:7b:0e:73:9b:90:c1:cb:05:8c:23:02:02:
                    d3:5a:9e:ad:1e:7e:85:0a:db:99:a8:f6:cf:da:75:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:A3:DF:E3:AA:0F:F3:40:1D:CA:F0:CE:61:B3:B6:7C:11:CE:78
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:34:9d:58:0c:a2:38:78:fa:fa:9e:d9:f0:73:7e:9f:a3:
         da:35:b6:55:36:ad:df:53:89:63:84:56:52:db:e6:9f:bf:57:
         3a:02:58:e7:e8:aa:40:85:e9:d4:b6:21:2e:3b:99:8e:41:53:
         4c:8f:57:2f:c7:e0:87:fc:c0:31:fc:02:e4:dd:20:da:59:05:
         fc:78:a5:a2:f7:1c:2a:c7:ee:26:57:8a:e9:94:42:72:ff:a7:
         a9:b7:be:54:a6:b7:ce:1c:74:3a:7e:56:8b:1a:a4:15:79:0b:
         4c:30:ca:2e:97:4b:83:60:c9:80:ab:e6:04:50:ee:39:4d:fd:
         09:10:dd:59:90:3d:8b:6c:4c:3d:d8:f7:ec:2c:b7:65:13:76:
         ec:31:f0:be:93:4d:b3:b4:29:06:7a:3f:dc:06:6e:8f:f6:96:
         05:b4:37:95:7f:66:87:db:6e:94:95:07:9d:35:ad:12:d7:af:
         12:d5:6f:94:cf:9d:09:5a:79:45:a4:9c:5c:4c:8c:7e:5a:7a:
         1c:70:86:ee:97:dd:65:09:bd:2f:9e:72:33:70:b9:fa:85:42:
         cb:36:4b:b5:89:d0:cc:f9:04:cf:65:0a:4b:11:e9:1e:b4:cd:
         e6:dc:d7:4f:24:33:d8:fc:2b:51:e9:4e:aa:68:3f:1a:73:a5:
         2a:a0:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:03 2025 by rpki-client