Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136392e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136392e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          7M4h40B17LJEgAidmEiPxM7alo1xCuA6qzhhf2ap9wg=
Subject key identifier:   79:AA:7B:53:43:A0:C9:57:32:09:E0:00:BD:3F:9B:93:CE:0A:36:E7
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       506CB28662193A3932747AC33D6B1B48FF935269
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136392e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 22 Mar 2025 09:59:25 +0000
ROA not before:           Sat 22 Mar 2025 09:54:25 +0000
ROA not after:            Sat 21 Mar 2026 09:59:25 +0000
asID:                     262784
IP address blocks:        186.235.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6c:b2:86:62:19:3a:39:32:74:7a:c3:3d:6b:1b:48:ff:93:52:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar 22 09:54:25 2025 GMT
            Not After : Mar 21 09:59:25 2026 GMT
        Subject: CN=79AA7B5343A0C9573209E000BD3F9B93CE0A36E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:c0:df:03:2a:22:3f:eb:9c:9a:a1:9e:69:
                    25:e5:82:74:dd:79:09:38:7b:42:e2:6b:7e:39:85:
                    72:55:bb:62:17:a0:b4:9f:fa:39:d3:21:08:b4:32:
                    74:eb:3e:71:ab:ed:bc:9d:ee:cd:f7:2c:b4:3f:a7:
                    be:e5:75:2a:2d:fb:46:38:60:2f:dd:af:b6:5f:0d:
                    b0:0e:87:96:78:49:71:83:dd:74:1b:92:c7:c0:95:
                    0d:d7:61:16:95:df:ad:2e:7a:46:33:94:72:41:99:
                    5c:9f:e3:bc:6e:5a:6f:97:45:c7:c2:77:88:37:aa:
                    f5:92:bc:2f:c4:48:e9:c0:dc:00:7a:82:d2:68:c5:
                    fb:75:92:24:aa:0d:f6:04:61:4b:97:3e:c6:12:64:
                    74:16:62:bd:ef:49:b9:26:80:85:e8:db:8f:ff:a0:
                    79:6f:bb:e4:dc:e8:1f:9a:e4:9e:da:b3:c4:08:6f:
                    26:6d:9a:5d:05:0a:a6:97:4a:ab:74:c4:83:2e:b8:
                    6d:d7:fb:91:35:9c:4a:56:fa:3b:0e:42:20:fe:00:
                    8b:eb:bb:21:51:21:b3:e1:45:21:c8:4d:84:c1:64:
                    09:9c:52:6d:29:e1:d2:dc:e7:61:92:fd:fe:ea:04:
                    de:7d:83:51:55:da:98:66:60:40:a4:5c:c6:4f:3e:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:7B:53:43:A0:C9:57:32:09:E0:00:BD:3F:9B:93:CE:0A:36:E7
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136392e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:16:cb:12:8c:8c:89:87:7a:f8:9f:c9:84:34:6b:d0:a3:89:
         d9:b3:e7:75:0a:f8:e7:82:e2:b2:5f:ec:b4:ab:41:19:eb:bf:
         e6:e5:1c:7f:eb:10:bc:62:e2:c9:98:00:a4:58:f5:4e:cb:0c:
         a5:0a:88:99:aa:fc:57:87:29:96:bc:dc:b0:d7:43:b9:73:fa:
         c9:1a:ca:ee:79:f9:0b:24:4d:f2:b0:49:f6:98:77:3a:e6:6f:
         e2:a5:9a:e1:91:aa:14:38:f3:f5:e9:61:69:ce:bc:7f:a1:20:
         44:b5:bb:92:d6:bb:df:98:37:42:9b:2e:f7:a9:bc:38:6a:ec:
         f0:a0:c3:78:29:fd:64:ca:a5:41:f6:ab:1d:7a:0c:ae:ef:3d:
         91:65:3e:e3:10:08:7b:4b:e5:d7:80:a7:11:5d:25:cc:93:05:
         13:73:84:a4:86:c7:96:a2:b4:1c:a1:4b:94:bc:65:65:4a:f2:
         3c:e9:e6:78:b4:2c:38:f8:ff:42:6e:bc:bc:6b:2f:09:1e:4a:
         f2:bf:85:ba:a8:84:9f:c1:3c:64:54:58:69:53:c7:88:20:b8:
         0a:32:79:8f:69:c5:f2:7a:4f:7b:44:ea:f6:a2:fb:7b:c8:d1:
         a3:ba:d1:54:2b:9c:47:e0:7c:32:92:f5:39:9e:28:ce:ab:f8:
         b1:4e:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:32 2025 by rpki-client