Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136302e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          eJ/ZE5F8Qf3ILqMUOXrLvqXWURQC3ZTEhbDdsDFVw7w=
Subject key identifier:   94:82:F3:41:84:EB:5A:FC:1B:F1:0F:76:9F:CA:DF:6C:60:CF:14:F1
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       2A5DFA21CEA77A58BA3C90AEAC78592752DD2884
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:25 +0000
ROA not before:           Sat 22 Mar 2025 09:54:25 +0000
ROA not after:            Sat 21 Mar 2026 09:59:25 +0000
asID:                     262784
IP address blocks:        186.235.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5d:fa:21:ce:a7:7a:58:ba:3c:90:ae:ac:78:59:27:52:dd:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:25 2025 GMT
            Not After : Mar 21 09:59:25 2026 GMT
        Subject: CN=9482F34184EB5AFC1BF10F769FCADF6C60CF14F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:44:13:3c:6d:b0:4a:8d:23:d1:3b:e6:c2:
                    8c:c1:ca:0c:e8:96:99:99:a8:18:c0:42:12:f6:2d:
                    c0:7c:f1:ca:cc:b0:6d:fd:9d:1c:2d:97:e0:be:02:
                    18:4d:41:8b:01:5b:68:0d:d0:66:a5:89:5c:9a:ef:
                    23:35:70:9d:3b:88:28:7f:4d:04:f5:2a:ac:1b:79:
                    06:9d:34:4b:7b:f5:f9:c9:08:aa:27:a6:ae:06:f5:
                    54:74:9d:0b:b5:62:10:c2:81:ce:66:d7:74:1e:af:
                    ad:03:22:35:db:6d:93:27:ca:cb:82:7b:f2:d1:5f:
                    40:45:b6:27:5c:77:bb:ee:4e:f0:c4:de:fb:a2:66:
                    91:ee:96:ae:6c:ea:3d:d1:0c:6b:ff:5f:dc:d5:57:
                    c5:c9:20:f0:38:fd:4a:a8:4a:42:95:b3:ca:2c:a2:
                    1e:cf:ce:c8:91:64:3b:66:f9:71:64:97:70:00:c9:
                    9f:62:5c:7b:7c:40:7b:c7:bb:ef:22:92:5f:60:b2:
                    f0:ff:c9:ff:94:e1:a9:0a:30:c2:b8:5d:a8:ee:6b:
                    c4:eb:43:5b:fa:db:73:08:88:19:12:c9:c5:f2:b2:
                    58:d8:e0:43:a4:cf:97:f2:50:bd:7c:08:62:89:ef:
                    bf:71:fc:4f:00:75:b3:68:76:5b:46:b0:32:5a:ab:
                    b4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:82:F3:41:84:EB:5A:FC:1B:F1:0F:76:9F:CA:DF:6C:60:CF:14:F1
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:64:00:9e:f0:21:f3:ec:68:99:06:05:68:e4:58:9b:ff:
         8f:65:2c:44:2c:95:4e:7c:5f:2c:f2:65:aa:8e:88:b8:13:e9:
         0a:6f:de:2e:61:01:ac:09:1b:38:38:d2:b0:82:d7:c2:ce:90:
         0f:e0:4f:3e:0c:d3:7a:ff:62:36:70:4f:01:c8:00:64:5d:e7:
         c1:ec:0c:50:fa:91:be:97:de:4a:f0:77:f7:de:c7:2c:cb:95:
         65:8a:36:80:1a:d5:0d:9a:6c:ed:5b:98:68:f6:25:96:2d:d3:
         06:3b:28:58:83:44:dc:57:ec:0b:ba:89:42:f0:a3:e9:6b:32:
         e3:79:e3:41:64:91:de:5a:ca:79:3a:9e:ef:c1:b6:41:e3:92:
         fc:2e:f7:de:00:c3:19:63:3b:cb:55:56:8f:85:01:de:ce:ad:
         49:a0:a2:f8:19:84:01:03:a1:36:6c:17:34:e3:a6:8d:12:62:
         0a:af:54:60:52:af:be:1d:aa:b2:8c:12:3e:ad:86:4f:58:5d:
         98:c1:85:a5:08:05:4f:d6:ae:e3:9e:cd:ca:09:4d:0d:f3:18:
         dc:46:66:d8:09:27:40:af:19:2d:79:17:f4:fb:35:34:87:94:
         f0:68:07:86:a2:ec:74:f0:a8:85:0d:35:d0:c1:87:51:06:7a:
         46:bb:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:24 2025 by rpki-client