Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          feM+2M3okbc+osrU4OP1bsP4Pi7d3dCV7FLKtKGmN14=
Subject key identifier:   D1:35:C5:E4:2E:1A:93:7D:08:1B:CF:12:DF:0F:3B:55:83:F8:89:AD
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       6C9D08B27B5D8C3C3AC93B46F812038C2047840C
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:06 +0000
ROA not before:           Tue 12 Sep 2023 04:55:06 +0000
ROA not after:            Tue 10 Sep 2024 05:00:06 +0000
asID:                     262713
IP address blocks:        186.208.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9d:08:b2:7b:5d:8c:3c:3a:c9:3b:46:f8:12:03:8c:20:47:84:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:06 2023 GMT
            Not After : Sep 10 05:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:22:13:24:72:ab:3c:40:4d:a1:2d:93:25:
                    25:3d:0a:a4:fb:95:db:a0:7c:c1:bf:de:8e:f6:15:
                    d3:a9:1f:fe:7d:7f:17:55:fe:35:b8:fc:e6:72:3d:
                    5a:fe:78:ba:67:e0:ce:18:c1:5e:f4:de:2d:f7:09:
                    99:68:7f:06:51:63:dd:26:3b:57:c6:47:32:86:85:
                    a7:c7:77:41:f5:3f:c6:8c:06:47:11:95:2a:03:a9:
                    2d:79:84:58:c2:50:41:10:85:ae:72:5f:ca:4a:c1:
                    32:70:0d:d7:92:7d:32:f4:7a:be:1d:22:e8:4d:fc:
                    a4:52:34:ff:5a:82:70:03:dc:7c:91:cd:a3:c7:df:
                    84:60:13:c7:2d:9b:b1:73:db:a4:91:87:f3:00:1d:
                    5a:0a:71:b4:cc:37:19:fe:ae:4a:c5:41:6d:65:ab:
                    c1:48:46:32:ce:8b:d0:d9:c6:90:85:dc:e2:66:dd:
                    ec:52:f5:f8:2b:cd:66:13:c2:c3:90:f3:f8:6c:5f:
                    7c:d2:48:00:9f:ef:52:02:26:f2:47:91:a0:12:c5:
                    3e:8e:ad:fb:ba:26:f0:b8:09:78:93:42:e6:d1:2a:
                    45:4f:72:cc:44:25:5c:03:d9:d8:8f:fb:75:2b:20:
                    f0:5c:5a:d3:3f:8d:69:ca:f5:b3:b0:67:05:67:2b:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:35:C5:E4:2E:1A:93:7D:08:1B:CF:12:DF:0F:3B:55:83:F8:89:AD
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:f6:b9:82:98:bd:89:e6:4c:99:84:6a:a9:5d:23:c7:7e:
         7f:4d:13:c9:63:fb:7d:5e:a9:5b:c7:1d:a9:cc:f8:59:99:74:
         79:71:79:bd:47:d8:fe:0c:35:a7:bb:de:00:92:41:14:88:03:
         2d:1b:fa:4f:0b:5b:c6:e1:93:80:e6:ac:2f:97:b3:26:fb:67:
         bc:99:39:67:e1:62:19:0a:be:89:d5:a1:cf:2b:e0:3f:fc:5c:
         b7:b0:97:83:f2:76:40:f5:43:43:05:97:f5:69:ff:98:ee:fd:
         5a:cb:1e:a7:41:af:31:df:99:f2:00:1a:f1:68:f6:f3:9d:99:
         19:b4:bc:d9:94:9e:56:68:56:94:b8:c3:f8:f8:05:6c:bb:10:
         60:c4:bf:fa:56:3c:09:7a:fa:ce:be:fe:ba:7b:a7:4a:30:5d:
         59:3c:51:e0:8f:c6:a9:68:5a:3a:88:61:96:b8:d8:6d:c6:5a:
         85:5d:00:b1:2e:97:fa:e0:fb:e5:53:fe:d4:9b:bb:ff:f5:78:
         c3:01:19:44:dd:4d:6b:92:88:72:d7:ca:15:4c:aa:50:70:05:
         0f:27:79:c6:31:80:80:e3:b4:9e:7d:cc:c6:fc:66:d8:23:60:
         56:5c:eb:94:5e:b5:d8:82:9a:2a:e8:fa:8d:9f:44:06:49:25:
         16:b2:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:36:35 2025 by rpki-client