Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3332203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32302d3332203d3e20323632373133.roa (raw, json)
Hash identifier:          J40oQlTqLcupCc70/s85O6rXlk3bC+cpsKhoZwcLLTk=
Subject key identifier:   61:62:44:3C:FD:37:17:24:07:4E:8A:E7:36:D0:B0:41:32:32:91:A5
Certificate issuer:       /CN=D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08
Certificate serial:       6B342044D8F6439A1979362B4B256B9B99D13DF7
Authority key identifier: D3:0A:7F:0D:5F:EF:AA:89:69:BA:F3:36:EF:F4:2D:A0:F4:69:AC:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3332203d3e20323632373133.roa
Signing time:             Tue 27 Aug 2024 16:04:16 +0000
ROA not before:           Tue 27 Aug 2024 15:59:16 +0000
ROA not after:            Tue 26 Aug 2025 16:04:16 +0000
asID:                     262713
IP address blocks:        186.208.0.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:34:20:44:d8:f6:43:9a:19:79:36:2b:4b:25:6b:9b:99:d1:3d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08
        Validity
            Not Before: Aug 27 15:59:16 2024 GMT
            Not After : Aug 26 16:04:16 2025 GMT
        Subject: CN=6162443CFD371724074E8AE736D0B041323291A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:de:c7:24:d3:87:95:73:4c:ba:c1:2a:d5:
                    e7:b6:14:68:8c:fe:d7:b4:75:11:b8:31:c7:3b:cc:
                    c7:14:0c:78:8a:c3:a1:5f:59:82:3c:71:88:ef:5b:
                    41:dd:29:09:87:05:6e:f8:6c:f3:44:ed:02:ed:3a:
                    71:6c:87:bf:0b:fa:61:04:ad:6b:b1:a3:81:1a:dc:
                    18:6f:d6:68:52:b5:d8:05:75:5d:d2:d4:2e:f1:ab:
                    cc:f7:e5:64:95:4e:0d:46:4a:da:67:d3:d3:bd:30:
                    8a:f7:34:2a:6f:6c:61:33:ec:dc:ad:b7:af:4a:65:
                    25:74:88:6a:a4:99:13:a7:c2:7a:07:a8:d3:4c:59:
                    20:b1:a7:9e:ef:b3:85:47:d4:c7:a9:15:a3:e9:1c:
                    f0:66:c2:68:72:58:80:66:a3:a2:22:41:38:87:d3:
                    e9:cd:19:a6:56:70:20:76:22:19:2a:33:3b:21:69:
                    7b:d9:51:05:ff:29:ff:2d:ca:8b:6e:5b:31:ea:42:
                    c6:ee:f8:80:83:60:63:61:f1:25:48:3c:2e:35:3e:
                    af:86:3b:f3:f2:38:d2:29:f4:00:ec:0d:47:a4:e1:
                    f6:0d:ad:33:bb:e7:ca:38:0a:24:b3:47:23:0f:53:
                    9f:bf:43:4b:83:57:2f:fc:cd:5d:f4:b7:c6:51:26:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:62:44:3C:FD:37:17:24:07:4E:8A:E7:36:D0:B0:41:32:32:91:A5
            X509v3 Authority Key Identifier:
                keyid:D3:0A:7F:0D:5F:EF:AA:89:69:BA:F3:36:EF:F4:2D:A0:F4:69:AC:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3332203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:b9:58:0f:f5:43:bd:25:f4:d3:ae:11:68:fc:8f:f8:7f:dd:
         d8:ea:c5:b9:22:61:f3:8c:5e:23:ff:4c:92:84:31:ec:7e:23:
         c9:10:71:2e:91:e5:f5:ac:fd:7f:a2:76:9e:3d:2d:e9:8f:af:
         b4:e8:a9:06:1f:bd:2a:f9:02:d8:12:34:4b:4b:20:da:ef:c4:
         77:f8:e7:34:7f:91:df:c9:6a:93:bd:a2:f6:c3:e4:94:c6:d1:
         b1:b8:2f:45:57:bd:61:f2:fe:37:1f:17:1d:e6:2f:11:07:27:
         5e:11:a7:1a:44:36:f8:47:31:a6:1b:71:65:cc:66:f8:04:e5:
         ea:1c:df:d2:fa:df:b9:db:05:96:a4:fe:26:84:dc:c2:e7:77:
         7c:55:36:d0:84:ac:82:65:74:cb:83:38:e6:42:ef:75:91:5a:
         8e:7b:62:4c:ef:57:d8:67:a0:c3:1a:9b:c0:c2:e8:30:cb:7f:
         42:f7:3b:a9:91:7f:e8:b5:58:81:ba:36:07:b6:b0:a5:5f:67:
         79:d8:0a:3b:56:6b:78:91:02:09:fe:91:f0:d3:1a:86:cf:e6:
         a2:e2:5c:07:b1:39:a7:2a:0c:77:03:58:d5:1e:bc:98:2a:8a:
         d0:d1:f4:ff:fa:86:e6:b9:c8:a2:81:a8:16:db:59:04:31:36:
         ca:7b:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:41:43 2025 by rpki-client