Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32332d3233203d3e20323633303833.roa
File:                     3138362e3233332e31322e302f32332d3233203d3e20323633303833.roa (raw, json)
Hash identifier:          x6GcPPwOs6CjzmQxLlpAp8Zy5BHkePqMfqvhq6HcnpE=
Subject key identifier:   A7:6A:54:1E:AB:53:C8:CC:FA:C5:21:A5:E2:B8:69:0A:46:C5:27:04
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       2AF1C630B3BEBB6B5F65B0263F27610FFD0181FC
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32332d3233203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:19 +0000
ROA not before:           Wed 25 Jan 2023 19:39:19 +0000
ROA not after:            Wed 24 Jan 2024 19:44:19 +0000
asID:                     263083
IP address blocks:        186.233.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f1:c6:30:b3:be:bb:6b:5f:65:b0:26:3f:27:61:0f:fd:01:81:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:19 2023 GMT
            Not After : Jan 24 19:44:19 2024 GMT
        Subject: CN=A76A541EAB53C8CCFAC521A5E2B8690A46C52704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:1d:73:08:07:5a:57:cf:35:01:b8:5b:01:
                    08:ce:2c:0e:bc:f1:17:28:d7:d1:28:9b:1c:c5:02:
                    48:db:6f:65:c9:31:43:32:5f:0a:4b:79:3f:54:73:
                    00:b4:fb:14:a8:70:4d:eb:8c:ee:98:d5:ba:cb:93:
                    07:61:42:90:8d:dc:2a:0d:51:07:de:75:2b:b2:b3:
                    1a:a8:04:38:10:09:90:a5:e6:3c:6c:73:32:23:40:
                    2d:3b:59:8e:a3:4b:f6:85:8e:87:a8:06:59:b9:5a:
                    fa:74:b2:2c:e0:19:8c:f1:51:ed:1c:e7:0d:37:62:
                    3c:db:c6:46:0c:89:51:c4:55:d7:96:10:c8:1d:43:
                    e3:27:ac:a1:d0:31:ad:55:87:5b:80:12:49:0b:26:
                    8e:92:8b:63:99:25:b8:33:71:2f:ba:f4:c6:34:1c:
                    da:e0:c2:44:fb:0d:5b:96:1b:3b:b7:4c:b6:d5:d8:
                    7d:ac:d9:e6:cf:dd:1d:e6:5a:da:d4:cf:2d:cb:d8:
                    01:f8:67:c9:f3:56:8e:56:e3:c2:46:e1:38:32:be:
                    ee:44:af:4d:05:de:ac:df:a6:c4:35:1e:52:77:0c:
                    d1:a4:4b:db:40:0d:46:96:e0:f6:69:c9:cc:29:bf:
                    3f:8d:30:c0:1f:c2:5a:51:6e:55:b3:ff:fc:03:12:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6A:54:1E:AB:53:C8:CC:FA:C5:21:A5:E2:B8:69:0A:46:C5:27:04
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32332d3233203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:36:ed:ef:08:52:c2:12:6f:b8:68:24:dc:b6:7e:5e:fc:
         71:89:ca:9a:07:db:96:77:40:d4:86:78:55:5c:08:16:5c:09:
         64:d6:76:64:00:84:5a:5f:20:a9:1c:94:16:1a:12:70:1a:8a:
         9d:f2:14:9c:aa:6c:20:66:ac:f9:a5:f1:4b:50:cb:5f:c2:a2:
         39:80:25:27:0d:9c:fb:16:65:5d:d6:66:8a:b2:6c:cc:e6:48:
         df:74:f7:fb:6d:8b:6e:8b:c0:15:79:79:5e:9f:c1:23:9b:f4:
         b4:43:d0:b4:c1:c3:ae:c3:8f:5c:33:b7:86:f2:b6:5d:79:57:
         84:56:08:8a:cf:b9:b4:f1:f7:0b:09:52:c4:1d:30:e9:d7:1f:
         d3:3e:74:f5:f7:e9:b3:0c:ab:62:1c:f9:2a:27:2b:cf:79:bb:
         2c:1c:36:a5:9b:3d:d8:d5:50:06:25:3a:b4:5b:dd:c7:39:e1:
         04:0d:fc:be:7b:25:47:72:4f:d4:b0:a9:8a:2f:65:8b:20:07:
         3b:a5:2a:35:5f:de:55:3f:b9:08:38:ac:ef:97:cb:bb:a8:38:
         64:6e:e9:1b:66:7a:82:64:77:cb:c7:fa:a8:1a:26:82:cb:9b:
         e9:91:41:60:60:ec:27:9a:a0:51:17:b0:a9:f6:a9:cb:8a:80:
         35:76:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:42 2025 by rpki-client