Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e312e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e312e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          qDTkxBKrNvGPDOHVhvGgrHejT55FxSWYOrsYpFpSCAk=
Subject key identifier:   A6:D9:FE:3C:28:8B:E0:D6:69:0D:19:10:C6:ED:07:F2:D4:07:78:C3
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       16671CAD892E325650657A1F5EEE704BFC965E1F
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e312e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:02 +0000
ROA not before:           Tue 12 Sep 2023 04:55:02 +0000
ROA not after:            Tue 10 Sep 2024 05:00:02 +0000
asID:                     262713
IP address blocks:        186.208.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:67:1c:ad:89:2e:32:56:50:65:7a:1f:5e:ee:70:4b:fc:96:5e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:02 2023 GMT
            Not After : Sep 10 05:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:54:25:06:cc:15:3a:ff:1d:ba:90:2f:c3:
                    b0:6b:1f:a1:6f:3f:0b:17:8c:0a:f4:d1:1e:9a:8a:
                    ec:60:f4:98:9d:b7:a8:69:30:db:14:65:5e:34:89:
                    61:ba:f0:b5:62:b8:77:b1:6a:88:c2:52:3e:ef:23:
                    92:05:d4:be:f6:5f:45:b2:ca:45:c6:b4:13:95:ca:
                    47:1e:9d:16:82:4a:5a:63:ee:37:1f:16:8e:41:58:
                    b5:1d:83:df:77:6f:3d:bb:f3:e4:22:e1:cf:dc:63:
                    94:c6:76:88:43:ba:06:0f:2b:3b:e8:89:47:db:51:
                    89:46:16:9c:75:05:c3:b2:77:02:23:f9:b6:6f:1e:
                    ea:eb:c6:ea:c9:b3:49:3e:2e:f3:59:4c:4c:e1:bb:
                    7c:19:23:fd:7a:bb:ce:22:90:ad:33:c6:58:bc:c2:
                    83:3a:2f:be:33:66:16:71:08:6f:d8:3c:1f:8c:ae:
                    19:e9:aa:54:de:7d:35:4f:ac:be:f8:c1:c8:7c:48:
                    4e:2a:38:25:7d:ae:3f:c0:99:09:9b:87:d4:a7:c8:
                    ce:ee:e9:c9:d0:df:a8:29:1a:fd:3e:c6:29:d5:c8:
                    0c:9f:6f:c7:78:13:0f:15:75:9c:5b:06:7e:98:d0:
                    ed:03:7e:2d:2c:76:9b:f8:b3:b8:64:8f:eb:f7:f5:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D9:FE:3C:28:8B:E0:D6:69:0D:19:10:C6:ED:07:F2:D4:07:78:C3
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e312e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:11:83:48:d1:4f:4d:86:81:a2:cf:87:81:55:dc:cb:cc:e6:
         56:52:5d:df:13:35:89:87:87:52:ae:35:fa:a6:5b:97:ad:28:
         42:09:7c:a9:a5:0a:30:6a:2a:56:1e:08:87:6b:c7:36:17:2b:
         f9:41:f5:a4:29:95:06:06:21:bf:60:c8:f1:85:be:70:68:27:
         9a:a1:ca:18:a6:43:9a:83:a3:5e:08:d5:76:6b:fd:a5:0a:d1:
         08:cb:ad:c0:01:02:49:32:97:a8:95:c8:73:f0:60:31:33:a2:
         eb:45:81:f0:cb:94:ae:11:8e:72:6c:70:bf:a3:f5:d9:5d:ca:
         0e:44:e2:d4:b3:17:17:76:54:bd:10:ee:ae:40:3a:ee:ee:88:
         51:25:5d:12:52:01:a1:07:ae:d7:e3:52:09:94:bf:70:5e:6b:
         2b:28:5c:4e:a2:95:cd:83:b5:54:e2:bd:ec:2a:80:c1:82:89:
         b2:30:fa:cd:4a:ae:31:19:c1:3c:d5:eb:d4:e9:62:40:3a:31:
         9a:a6:7f:91:7c:27:27:40:09:45:d1:6b:8f:cc:8a:1e:6b:42:
         86:c1:0a:bc:b0:4a:19:2e:37:70:c1:ef:22:a3:4c:28:2b:3b:
         8b:42:f1:06:19:6f:5e:74:4b:77:cd:f8:4a:44:f6:64:06:1a:
         ad:1b:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:55 2025 by rpki-client