Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32312d3231203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32312d3231203d3e20323632373133.roa (raw, json)
Hash identifier:          q5mJNd6O6JgH2NXV4MrwfGkXF//1D5XcF2tq6C6X/Ck=
Subject key identifier:   15:DF:75:66:6F:4E:5B:C1:67:C5:B1:9A:24:56:74:AC:B9:30:05:C0
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       6602D6544B05E03FCC17D33763D14A93456C9CF2
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32312d3231203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:05 +0000
ROA not before:           Tue 12 Sep 2023 04:55:05 +0000
ROA not after:            Tue 10 Sep 2024 05:00:05 +0000
asID:                     262713
IP address blocks:        186.208.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:02:d6:54:4b:05:e0:3f:cc:17:d3:37:63:d1:4a:93:45:6c:9c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:05 2023 GMT
            Not After : Sep 10 05:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:5e:55:c3:32:32:16:3b:72:ef:08:e4:3b:
                    72:e9:99:ac:4c:2d:4b:cd:fd:cb:7f:fa:b4:93:f7:
                    70:c7:e9:03:59:01:a4:b7:18:d8:b1:c9:8c:8e:5d:
                    50:11:df:99:d7:e8:a1:ba:61:40:a2:08:d8:a0:32:
                    d7:c2:78:29:42:f3:25:5f:bd:a2:ca:fa:00:a1:61:
                    79:0c:83:9e:cd:e7:dd:e6:67:04:a2:ee:d1:38:ad:
                    32:c5:ed:01:2c:21:37:28:59:88:5b:c8:ec:c7:54:
                    e4:25:b8:f0:85:ae:4e:f5:4b:03:e0:04:f7:32:1c:
                    e9:b4:fc:6d:33:c6:63:78:ea:7a:fd:c4:06:9b:cd:
                    68:b9:5f:0a:71:9d:87:b5:3a:d1:1f:46:c6:f3:fd:
                    ad:39:b6:09:40:56:8c:76:be:a5:aa:2b:20:46:61:
                    2f:b5:47:99:1d:7a:a9:88:a3:56:03:32:d2:41:70:
                    e9:85:2d:24:cc:9a:8e:d4:ac:2f:1f:1c:9b:3a:9f:
                    91:5c:5a:20:49:bd:30:3c:e8:46:07:08:f3:88:89:
                    1c:e0:c4:be:c9:6b:81:a0:35:b0:51:cf:2b:e5:1a:
                    68:58:62:cf:51:9f:60:81:aa:11:87:10:f1:2f:04:
                    61:84:d0:75:99:45:26:93:af:e9:6a:d0:3c:16:cf:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DF:75:66:6F:4E:5B:C1:67:C5:B1:9A:24:56:74:AC:B9:30:05:C0
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32312d3231203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:e2:96:c4:59:38:b5:d8:f7:52:46:3d:13:6a:19:56:f3:
         c1:1c:95:e3:f1:7f:55:68:ed:6e:75:36:58:71:c7:c9:05:fc:
         15:5f:2a:2c:36:b0:29:04:2c:5b:01:17:6c:ed:b2:f0:ad:81:
         67:07:87:1a:69:85:ab:7a:b8:40:d3:7a:69:9f:53:14:a2:dc:
         65:64:aa:4e:80:32:8a:fc:4e:96:60:77:2e:2a:a0:38:61:f7:
         64:5f:07:4f:cd:76:26:86:89:c4:70:57:9e:3d:94:70:4e:91:
         40:4a:8f:4f:bb:4f:8a:1f:69:10:5d:f0:33:d2:1d:1e:75:a5:
         3f:04:a3:dd:0a:ca:7b:8c:ae:01:42:32:7b:6b:cb:4c:15:78:
         1b:cc:86:f0:70:14:9c:5c:5b:22:50:47:cf:fd:de:e1:8d:80:
         45:12:e9:5a:71:8c:78:fb:14:2b:60:2a:95:81:1f:f4:52:1c:
         b8:6d:c3:92:e9:23:cd:19:7c:e8:04:3d:23:c4:d5:ad:c3:0d:
         b9:30:76:47:2f:b3:4c:04:6a:60:37:e8:93:f6:02:58:3b:86:
         59:c5:7d:21:df:ae:5f:93:b2:1e:d2:d7:e0:a1:1e:24:b1:06:
         f9:8b:66:bd:23:68:c8:b4:47:aa:73:43:05:83:a4:aa:3a:d4:
         d7:ac:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:23:25 2025 by rpki-client