Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          YbBDW/JqJGwpOA/el80bnBdZ1hVu/ArMd8wTYysrfNQ=
Subject key identifier:   7A:67:D3:4A:BE:22:F0:95:2E:91:31:8E:6C:29:CA:26:0A:87:11:3E
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       2CA4063A0D51C31689F660850DC874A508782FF7
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:35 +0000
ROA not before:           Wed 17 Apr 2024 11:37:35 +0000
ROA not after:            Wed 16 Apr 2025 11:42:35 +0000
asID:                     28191
IP address blocks:        186.193.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a4:06:3a:0d:51:c3:16:89:f6:60:85:0d:c8:74:a5:08:78:2f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:35 2024 GMT
            Not After : Apr 16 11:42:35 2025 GMT
        Subject: CN=7A67D34ABE22F0952E91318E6C29CA260A87113E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:36:1c:97:11:9e:03:ef:de:17:1a:65:14:
                    bc:fc:cd:ae:be:6b:d7:9e:e8:92:ea:40:55:2d:0d:
                    84:85:fb:cf:4a:1c:88:9c:42:79:66:2b:2a:78:3b:
                    26:6e:c6:4c:a4:d7:14:7c:c3:23:63:95:7d:27:fa:
                    bc:33:28:15:a2:89:31:b1:0c:56:30:00:0b:9b:97:
                    7d:42:b4:38:44:d0:65:67:58:70:e3:f9:91:33:04:
                    b9:18:b0:9c:99:b5:ec:ab:17:ec:84:45:e0:b0:a1:
                    ec:ef:22:f9:e8:4b:1a:d5:21:a1:ec:cc:cc:f2:a4:
                    02:6b:74:1b:6a:89:7c:f4:b1:0e:6e:34:a3:97:5e:
                    0e:00:74:cf:53:dc:68:d0:19:da:81:38:94:eb:3d:
                    6c:96:4a:63:20:ba:bd:a3:7d:a0:53:e5:19:60:1f:
                    9b:d0:ec:e1:75:e7:28:7c:d4:45:3d:1d:64:08:af:
                    eb:30:ff:69:5f:4e:8d:6f:66:49:9c:f6:15:7b:e3:
                    31:5a:e1:6f:67:f8:eb:03:1f:61:dd:5d:94:87:1f:
                    c7:33:64:21:61:ac:8d:a7:57:8e:69:3d:55:83:72:
                    06:14:2a:6f:83:b3:ae:ab:82:23:49:81:be:c3:14:
                    55:99:9d:4f:d9:0e:0f:77:58:0d:be:58:43:78:12:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:D3:4A:BE:22:F0:95:2E:91:31:8E:6C:29:CA:26:0A:87:11:3E
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:c3:dc:97:91:b8:f9:aa:78:ba:cd:48:68:84:55:9f:d9:
         ab:1b:e0:a2:bf:5a:e8:52:04:e4:c7:4c:02:1e:a9:24:6e:50:
         69:8a:b8:b0:8c:81:97:99:2c:88:f3:3d:b3:80:18:1f:d3:21:
         d1:03:40:5e:4c:25:be:30:cf:70:6b:02:13:6b:fc:72:ae:44:
         66:23:7f:e7:d1:b7:6d:13:92:ce:5d:41:31:2e:03:78:0b:bb:
         f7:e4:51:be:4c:13:f3:67:98:3f:dc:b9:0d:62:6f:d9:2e:d6:
         27:1f:ce:3d:8e:53:d8:b8:d3:1d:e5:37:2f:ad:50:37:d7:26:
         ac:4e:2a:f6:0a:89:bd:cb:da:8d:59:37:12:2c:c7:a0:a8:8d:
         89:a9:c7:42:a6:cd:96:01:a5:ea:58:83:b4:d9:fc:71:5c:99:
         1a:96:6d:e2:cc:7a:fc:2a:13:4c:6f:6a:16:d2:fe:53:93:94:
         83:93:07:83:86:43:47:6f:50:ba:a5:d3:d9:2c:ce:14:7a:ce:
         ad:12:1d:5c:49:9c:87:01:bb:37:c8:b6:c1:85:39:14:3f:a0:
         70:03:d9:9c:0f:cd:67:81:e1:cf:9d:3f:fb:53:48:b3:99:8a:
         c1:3b:0f:a5:6d:d0:98:50:76:22:bd:23:98:23:00:2c:9d:14:
         77:d5:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:35:27 2025 by rpki-client