Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/3138362e3231312e34382e302f32302d3332203d3e20323632393836.roa
File:                     3138362e3231312e34382e302f32302d3332203d3e20323632393836.roa (raw, json)
Hash identifier:          niftcxpHn24TQVwvd52OUm/YNZKVM7clHy3Wy05EJ1o=
Subject key identifier:   61:EA:E0:A1:F3:14:03:75:61:74:EB:B5:39:2C:B0:4D:BB:00:41:31
Certificate issuer:       /CN=F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23
Certificate serial:       5DA305C253CDFE0A650D3F3C59D98436E65FFAD5
Authority key identifier: F3:ED:C3:17:68:BA:5D:D3:FB:E7:42:38:F1:A5:5E:36:A0:DB:FE:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/3138362e3231312e34382e302f32302d3332203d3e20323632393836.roa
Signing time:             Thu 11 Jan 2024 18:32:50 +0000
ROA not before:           Thu 11 Jan 2024 18:27:50 +0000
ROA not after:            Thu 09 Jan 2025 18:32:50 +0000
asID:                     262986
IP address blocks:        186.211.48.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:05:c2:53:cd:fe:0a:65:0d:3f:3c:59:d9:84:36:e6:5f:fa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23
        Validity
            Not Before: Jan 11 18:27:50 2024 GMT
            Not After : Jan  9 18:32:50 2025 GMT
        Subject: CN=61EAE0A1F31403756174EBB5392CB04DBB004131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:e2:14:9d:48:ed:3a:dc:1d:83:b0:ba:5f:
                    38:96:8c:71:9a:a5:bc:f6:9d:f4:fa:77:3b:98:a2:
                    f5:2b:b7:ba:85:63:ec:1a:4d:1c:06:b5:2a:09:fe:
                    71:38:ec:8a:fd:ee:0f:b6:0e:20:5c:73:99:51:2e:
                    7d:e4:7d:7f:b3:f7:41:dc:4d:5e:92:b8:b4:e1:f8:
                    cf:a4:56:1f:e8:87:22:1c:62:8b:02:8c:af:a4:52:
                    f2:63:4c:c0:e6:97:11:3e:51:55:f9:c0:58:a7:3e:
                    16:22:ee:b5:16:2e:ac:6d:3b:b4:1c:57:b9:86:0e:
                    83:9c:3b:75:5e:50:3c:bf:b1:8f:7c:e3:b1:7c:83:
                    c3:0a:08:56:f2:c2:39:43:12:e4:d0:c9:24:55:a1:
                    08:c7:62:23:5d:cf:f7:b2:d0:8a:70:a8:d4:35:d1:
                    27:d7:64:90:b6:4d:b5:7b:1b:56:e2:0c:c9:65:5d:
                    3c:b6:40:51:c6:00:39:23:6d:93:2d:c5:1d:8f:e3:
                    ee:29:85:a1:8b:e0:9c:2a:e9:5f:83:7e:32:b6:ad:
                    df:b5:bd:66:83:2c:27:16:13:30:0a:36:9d:37:9b:
                    6d:6e:11:89:d6:57:e1:9a:0b:ad:45:52:f0:d7:0e:
                    56:c2:17:5d:0b:ca:55:dc:f4:21:b4:21:c0:36:44:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:E0:A1:F3:14:03:75:61:74:EB:B5:39:2C:B0:4D:BB:00:41:31
            X509v3 Authority Key Identifier:
                keyid:F3:ED:C3:17:68:BA:5D:D3:FB:E7:42:38:F1:A5:5E:36:A0:DB:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3EDC31768BA5DD3FBE74238F1A55E36A0DBFE23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/3138362e3231312e34382e302f32302d3332203d3e20323632393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:a7:05:63:44:ab:35:a8:1c:78:17:69:e8:dd:e9:44:cd:50:
         c5:38:6a:cc:b6:19:fb:d1:59:75:35:ab:93:a9:7a:50:56:9a:
         d7:d4:5c:e6:03:a6:33:b8:ff:64:fb:4e:ad:7f:1c:0b:53:d8:
         11:00:fa:c9:af:e9:ea:a3:f9:d5:d4:2f:64:a1:59:77:f8:f7:
         85:bc:2e:4d:fe:e0:d8:26:60:e1:41:12:3a:8b:b3:77:e7:5f:
         7f:eb:2a:ed:d6:9d:88:d6:fd:67:fc:b2:29:ca:71:aa:21:f7:
         74:39:66:f2:33:38:23:b3:bf:45:e3:4d:84:39:09:10:49:61:
         91:a4:f5:a1:3b:b8:f0:74:3b:c4:7d:87:83:26:37:79:bf:63:
         c1:6f:65:3a:54:92:59:c9:8b:bd:9a:be:9c:3e:76:51:41:67:
         30:78:c6:fb:d9:36:0b:35:11:4b:6a:64:11:e2:b0:95:0f:b2:
         89:b9:2a:88:ce:bb:2d:35:48:16:da:f1:dd:bc:ce:1a:f9:26:
         6a:94:db:97:08:4e:a8:33:d4:56:1a:93:e6:8a:f6:f8:1b:94:
         cd:f0:9d:e5:95:00:17:c7:c5:c4:17:a9:7e:d5:27:cf:53:92:
         ec:56:e4:d1:10:f7:af:7e:eb:b7:ee:6c:da:08:8e:36:f7:84:
         af:71:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:38:01 2025 by rpki-client