Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa
File:                     3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa (raw, json)
Hash identifier:          6xV42GKRzUfQl/QSTsRDBY4UxI27EpLUwnZiwdplKLQ=
Subject key identifier:   82:AC:EE:46:7D:D2:84:93:8D:D8:6D:90:D8:E9:44:C5:0E:FE:E6:BA
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       33A58E803344BFDBDB9985677D391F463357E34A
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa
Signing time:             Thu 16 Jan 2025 15:59:40 +0000
ROA not before:           Thu 16 Jan 2025 15:54:40 +0000
ROA not after:            Thu 15 Jan 2026 15:59:40 +0000
asID:                     262989
IP address blocks:        186.216.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a5:8e:80:33:44:bf:db:db:99:85:67:7d:39:1f:46:33:57:e3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Jan 16 15:54:40 2025 GMT
            Not After : Jan 15 15:59:40 2026 GMT
        Subject: CN=82ACEE467DD284938DD86D90D8E944C50EFEE6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:50:ca:15:e3:91:d7:28:34:41:75:bf:c5:
                    e1:13:00:74:dd:60:3f:20:13:68:ec:6f:f7:14:e0:
                    51:f3:4c:94:8f:3a:1b:f4:87:fd:3d:bb:ab:9b:e8:
                    d9:87:15:76:20:1c:9c:b9:6c:07:12:f6:6e:d5:ff:
                    21:89:b5:b2:bd:a4:77:e1:36:49:ed:67:d3:fc:b0:
                    38:1e:b0:bb:b1:33:26:2d:7f:10:56:fc:80:53:b4:
                    55:ec:91:a5:2e:d6:ff:59:fc:6e:a5:e2:d7:07:3c:
                    0a:04:ed:76:b8:41:29:31:20:4f:aa:58:24:31:20:
                    28:79:61:89:86:3b:7c:80:e5:d7:7d:39:f1:df:08:
                    e3:d3:4e:d0:fc:de:02:6b:f5:dd:ba:ab:b7:97:3b:
                    64:a3:20:07:18:0f:8f:be:2f:8b:8c:3f:c3:0f:7e:
                    c0:2c:b6:e1:62:93:bb:8c:de:c9:d0:b4:43:15:74:
                    48:a7:c4:db:69:3c:ef:7d:cf:b9:86:e5:dd:31:0a:
                    0e:4d:e4:ca:15:ff:8a:d7:08:47:59:77:36:0c:79:
                    d1:e2:d0:a1:87:5c:98:9a:c4:9f:6a:28:4b:df:c8:
                    b2:17:7a:97:f9:b5:7c:71:a7:0a:34:c9:77:32:14:
                    3a:1c:6e:7f:d9:23:37:45:d5:25:72:5b:24:77:bc:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AC:EE:46:7D:D2:84:93:8D:D8:6D:90:D8:E9:44:C5:0E:FE:E6:BA
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138362e3231362e3230382e302f32312d3231203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:6a:a4:16:8f:f3:5d:e7:0f:a8:f0:c9:cf:26:55:d3:e7:
         58:a5:3e:27:c7:fd:30:f5:30:87:9d:66:e4:b3:46:fc:5b:8e:
         4e:96:4e:62:48:3c:22:87:ea:da:86:d9:ed:ba:d3:dd:a0:8f:
         78:a4:eb:b8:54:9b:8d:e9:c8:45:04:57:64:89:45:34:db:25:
         36:71:f5:4b:9b:b5:53:90:1b:94:a2:81:aa:02:bc:00:37:e1:
         ec:0b:be:b6:7c:a9:c1:86:12:60:73:ed:6c:ed:e0:c6:b2:4d:
         10:de:1b:64:f7:31:f8:02:71:60:97:ef:5a:13:d7:23:7f:ce:
         d0:cf:db:28:6e:b6:c2:a1:26:dc:2a:ef:32:1c:be:be:b9:f3:
         c7:8b:3f:4d:41:33:61:9c:85:f2:7c:e0:0a:73:ce:a5:f3:00:
         c4:bb:e6:b8:7f:58:9a:b3:38:cf:11:f1:8e:3a:e7:be:55:bb:
         ef:d0:d2:70:59:dc:82:80:ff:5f:8c:1b:50:a6:4a:83:dd:9c:
         9d:74:03:f6:a5:7a:68:63:da:d8:3e:bb:2b:8e:de:96:39:9a:
         1b:77:dd:44:41:24:1e:41:f3:df:84:36:09:56:f9:f0:3d:d0:
         07:18:9a:93:50:c6:9d:5e:13:2f:1a:b0:a4:84:b8:24:eb:77:
         c9:c0:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:02 2025 by rpki-client