Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e342e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e342e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          tv+iXEw16Mja92NxRDCEMiirfRNGSbnfYr3jHC8PAvE=
Subject key identifier:   08:28:2D:29:21:6F:0B:55:D0:37:EB:A9:DF:4B:E2:56:D4:6A:A9:F7
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       64DBD1082467C21778FB067984F19FC4D04C9AF0
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e342e302f32332d3233203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:05 +0000
ROA not before:           Tue 12 Sep 2023 04:55:05 +0000
ROA not after:            Tue 10 Sep 2024 05:00:05 +0000
asID:                     262713
IP address blocks:        186.208.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:db:d1:08:24:67:c2:17:78:fb:06:79:84:f1:9f:c4:d0:4c:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:05 2023 GMT
            Not After : Sep 10 05:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:27:bb:3e:8f:8a:e8:98:8f:3b:4e:71:8f:
                    e5:72:5a:e0:dd:24:f2:29:c5:5f:f3:81:c8:e3:34:
                    c8:0a:3a:1b:f1:15:cd:1f:ac:b8:52:23:91:ce:ad:
                    71:56:07:95:0a:a7:ba:90:bb:de:6c:ec:fa:a2:f4:
                    97:82:07:33:b9:fe:42:65:a8:66:57:a1:ac:c2:1f:
                    7b:14:19:f8:d8:37:df:16:f9:c2:9b:4a:5b:b1:8f:
                    64:c4:67:1f:36:3f:63:58:b9:80:82:71:e7:cd:d0:
                    89:66:8c:45:b4:28:b1:2b:d9:f8:86:23:c4:02:e4:
                    88:7f:4f:ab:d1:50:86:63:87:5a:ca:0e:da:df:87:
                    7b:3d:70:0f:f8:df:76:a7:20:01:95:c7:fc:09:8b:
                    7d:b4:f3:05:e5:cb:5f:50:7c:62:69:a3:4a:fa:fc:
                    6c:c9:bc:c8:a6:bb:ba:e3:b2:2c:f1:ed:f4:7c:bf:
                    7c:15:f8:9c:ad:0c:02:a5:51:4a:40:90:8d:cc:1d:
                    0f:31:69:ae:7f:37:b2:33:ac:d8:5d:56:21:01:22:
                    f1:57:c2:1f:af:34:ee:ff:5f:5b:23:38:60:b2:2f:
                    91:1e:56:8d:69:06:8f:d2:c2:18:01:b1:f0:d7:9a:
                    a0:30:dc:74:4b:fd:b3:35:6a:86:0a:d7:00:ef:96:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:28:2D:29:21:6F:0B:55:D0:37:EB:A9:DF:4B:E2:56:D4:6A:A9:F7
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e342e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:cc:3e:15:66:e7:1b:fb:13:6f:57:c9:b3:b6:8c:4c:60:
         cc:6b:6c:8f:10:0e:8e:68:25:47:3c:f7:89:57:bd:4e:61:03:
         c5:68:bc:db:cc:ab:17:3b:8f:de:6f:b1:79:6d:f4:30:c5:08:
         be:aa:d7:ed:dc:56:6d:9c:b4:8a:88:54:9d:49:01:64:29:9c:
         4d:b0:d2:1c:ca:08:65:d2:08:14:28:89:cc:c1:d6:77:51:86:
         44:dc:a4:29:7e:fe:66:5b:9d:e4:62:cf:2b:2a:10:42:01:cb:
         a3:39:de:8d:fd:6e:b7:94:29:e5:79:62:be:19:a4:d1:93:b1:
         c8:77:de:78:52:de:be:86:b4:04:51:29:57:25:2a:48:01:c5:
         6d:8c:86:02:b9:fc:e3:fd:70:89:27:be:c3:0f:db:18:11:b8:
         87:81:ce:4f:9f:d1:d5:cc:2d:25:02:26:8b:bf:7a:95:44:e7:
         15:b8:1d:44:e1:7b:50:5b:13:1f:4c:c4:25:1e:95:9a:54:6c:
         7d:8d:72:2b:3f:f6:30:84:b8:61:aa:02:2f:c7:55:3f:1c:7c:
         68:17:13:1c:97:d4:f7:07:c7:f0:af:b9:67:95:40:0b:f2:e4:
         ce:a8:17:1e:d5:7a:ab:ca:5e:9a:2b:65:91:a0:2d:32:35:6f:
         f4:7e:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:09:44 2025 by rpki-client