Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa
File:                     3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          knlSiayZa56wfBQZY3T2ldMHiUPHLzr5JjZ7MOWKcqQ=
Subject key identifier:   C2:BE:01:44:17:9D:54:8D:C1:96:E9:E5:A4:A3:CD:77:C3:24:82:33
Certificate issuer:       /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial:       2A5F12E37C42EA2069BEFEDD7995B0F540BA2469
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa
Signing time:             Wed 29 Jan 2025 13:27:44 +0000
ROA not before:           Wed 29 Jan 2025 13:22:44 +0000
ROA not after:            Wed 28 Jan 2026 13:27:44 +0000
asID:                     263047
IP address blocks:        186.237.24.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5f:12:e3:7c:42:ea:20:69:be:fe:dd:79:95:b0:f5:40:ba:24:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
        Validity
            Not Before: Jan 29 13:22:44 2025 GMT
            Not After : Jan 28 13:27:44 2026 GMT
        Subject: CN=C2BE0144179D548DC196E9E5A4A3CD77C3248233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:45:2e:4e:af:b2:c9:e4:78:7e:5d:58:f4:
                    0c:ee:da:fc:5c:75:35:06:f5:71:47:0a:25:15:78:
                    2a:7d:28:69:7a:2e:b0:6e:12:f0:1b:14:c5:10:63:
                    87:94:c6:c0:08:59:04:6c:84:8e:dc:68:9e:1b:55:
                    10:b5:93:0f:43:28:73:73:2b:83:28:5d:e8:9b:68:
                    01:e0:d0:e9:e2:d4:20:f2:4a:7d:44:d6:c3:bb:54:
                    62:88:b1:3e:97:c8:82:3e:3a:c0:88:53:49:09:a9:
                    be:52:37:60:10:04:8c:9c:d9:df:53:7b:36:56:1e:
                    01:35:b1:ed:7f:7b:3c:31:4d:c3:7e:fa:16:bb:0d:
                    3e:75:95:dc:cd:bc:21:30:58:18:cc:b3:5c:47:43:
                    1a:03:4b:50:dd:e5:85:0e:e4:ea:e1:4e:53:8b:26:
                    a7:ac:3c:2c:c9:4b:1a:7e:6c:d8:00:db:29:5c:07:
                    2f:d6:6f:14:3a:e7:3f:c5:bc:59:7f:10:1a:be:7d:
                    29:61:7d:d0:1b:6d:e1:d8:74:30:ed:42:7b:6b:5a:
                    39:26:d0:b1:7a:9b:71:8d:2c:99:f4:99:19:ec:fd:
                    4e:2a:40:36:d2:9d:3e:08:2d:6f:7a:1b:c1:a8:e6:
                    f4:39:83:27:2c:de:c5:ab:5b:eb:06:8d:e2:1a:1e:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BE:01:44:17:9D:54:8D:C1:96:E9:E5:A4:A3:CD:77:C3:24:82:33
            X509v3 Authority Key Identifier:
                keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:4e:fe:32:a0:0c:80:47:69:48:da:92:d9:f5:2c:80:36:
         35:a7:79:77:e5:b4:f3:a3:c3:26:d0:38:d1:b9:99:24:74:7d:
         20:e8:66:67:22:21:33:e5:04:bd:d4:6b:9a:d6:00:21:b7:b3:
         fd:21:35:a6:51:1f:80:85:16:69:ba:7b:2c:d0:f3:f9:47:f0:
         80:79:21:88:17:c3:5f:ff:fe:5a:8c:37:76:38:80:99:89:e0:
         a3:3b:0f:00:91:7a:ca:85:8e:03:a1:23:69:62:e2:7b:19:4c:
         14:08:7b:b6:7a:f7:de:47:c1:9b:61:78:7e:b9:3c:85:ae:9b:
         5a:5d:38:ab:0b:16:df:8c:c0:50:22:7e:48:fe:09:ec:a8:f3:
         a8:c0:12:6d:f7:b5:10:2a:3f:fe:10:77:34:6b:a9:de:5c:3d:
         3d:fd:8f:db:a0:ed:70:1e:7c:82:d6:c2:6d:19:2e:8f:a8:e2:
         43:e1:ba:68:f1:92:64:23:ec:2d:d7:a9:6f:c1:24:22:07:24:
         6e:e4:2b:d5:35:a7:81:59:d5:03:12:8d:25:87:9b:e2:0f:e3:
         ae:c7:46:bb:7d:f5:84:03:2a:b7:7b:f6:89:8c:42:e3:74:88:
         34:7a:25:1a:ff:a9:c3:da:38:80:f7:19:0c:52:71:51:4d:98:
         41:82:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:52:21 2025 by rpki-client