Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3138362e3233352e3132302e302f32312d3332203d3e20323634303735.roa
File:                     3138362e3233352e3132302e302f32312d3332203d3e20323634303735.roa (raw, json)
Hash identifier:          B/RgHfboyf+FWMJv0IdyWCeTPk8uZm2HaHO+H4GCvRA=
Subject key identifier:   01:B3:07:A9:A1:F9:60:96:C4:2D:C0:8A:A4:ED:DA:C6:B4:8E:26:9C
Certificate issuer:       /CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
Certificate serial:       4C27A58644632F121CD77CB4F769EC7BE6818709
Authority key identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3138362e3233352e3132302e302f32312d3332203d3e20323634303735.roa
Signing time:             Fri 21 Feb 2025 16:24:46 +0000
ROA not before:           Fri 21 Feb 2025 16:19:46 +0000
ROA not after:            Fri 20 Feb 2026 16:24:46 +0000
asID:                     264075
IP address blocks:        186.235.120.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:27:a5:86:44:63:2f:12:1c:d7:7c:b4:f7:69:ec:7b:e6:81:87:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
        Validity
            Not Before: Feb 21 16:19:46 2025 GMT
            Not After : Feb 20 16:24:46 2026 GMT
        Subject: CN=01B307A9A1F96096C42DC08AA4EDDAC6B48E269C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:f1:c8:d2:8b:e0:c3:14:e9:ba:ab:cf:0c:
                    fd:c8:a4:b7:94:16:33:bb:bd:71:93:d7:58:72:12:
                    73:b2:e9:20:07:06:06:0f:7c:f4:97:47:a8:ec:43:
                    1c:8a:35:2c:56:e5:5d:d1:08:4c:14:4f:32:30:c7:
                    0d:6f:de:91:9d:0a:4d:d4:2f:45:bc:f6:fb:b4:fa:
                    01:88:f0:f4:f1:a4:bd:0c:8d:41:ae:a2:62:f4:12:
                    0f:ad:ea:44:90:30:7d:df:ba:41:50:4e:86:35:9c:
                    54:f6:05:0d:c7:6c:a4:05:8c:f2:07:32:8b:6b:65:
                    b3:b0:86:0d:36:fd:3d:96:2d:3d:69:c9:8c:6e:27:
                    44:bc:d1:12:bf:49:a8:30:eb:3c:4e:c1:70:2f:01:
                    fc:d3:bd:c6:09:97:22:b3:fd:bb:9a:08:52:41:a7:
                    1f:45:8e:78:d8:a3:b2:b1:d0:18:2f:5a:ec:6d:99:
                    89:d8:51:ac:f7:14:56:58:5d:ff:2d:5c:14:b1:43:
                    76:68:5d:cc:b7:34:d8:44:39:d9:ca:31:29:5f:f7:
                    08:10:4a:a7:4d:a2:76:39:04:14:aa:b1:33:7e:df:
                    66:c3:fd:84:ff:64:4a:b9:2b:1f:5d:6f:f7:ae:a3:
                    ba:9d:53:e7:81:8f:c3:8f:d3:c4:1c:90:21:1f:a1:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:07:A9:A1:F9:60:96:C4:2D:C0:8A:A4:ED:DA:C6:B4:8E:26:9C
            X509v3 Authority Key Identifier:
                keyid:1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3138362e3233352e3132302e302f32312d3332203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:71:b8:07:c8:eb:2a:5c:d8:44:b6:42:3b:cc:92:47:3e:
         ac:a3:b7:b4:c0:93:3c:ed:c0:0e:e1:bf:9b:13:5c:f7:47:8f:
         fc:72:ab:6c:15:a3:0c:e7:8e:06:f9:87:44:da:e9:41:47:21:
         89:b3:5c:d7:34:9c:3d:d0:b1:88:d2:15:c4:38:45:45:50:93:
         bd:96:28:54:5d:99:6a:24:b2:cf:aa:c7:14:51:e1:c2:a4:42:
         ca:5f:fb:21:3d:12:ed:a8:dc:6f:74:2d:66:65:4d:ff:e4:bd:
         3d:64:6e:55:31:b7:2d:7e:18:f8:59:4f:ef:1e:70:95:9a:61:
         d7:3e:8b:b9:33:10:f4:10:d1:00:80:fd:33:60:18:bf:45:80:
         f4:35:0e:ca:41:52:cf:5d:ee:fc:e3:a5:d7:f9:5c:c3:ff:5b:
         82:da:e2:4c:fd:ae:ec:1a:5f:80:d2:7b:e8:df:29:4a:f5:31:
         c9:c2:1f:72:ef:21:86:4d:4a:0a:76:be:c0:4e:63:ae:45:95:
         c9:c8:15:33:6c:85:1b:2e:41:79:90:40:62:5c:be:9c:a5:94:
         7c:8f:a0:2c:71:61:3b:e1:43:ec:97:cc:d0:1a:62:c3:aa:48:
         27:5e:6b:63:f6:26:80:ea:12:7e:06:41:d4:b1:4a:d8:67:4c:
         e3:9a:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:40:08 2025 by rpki-client