Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e382e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e382e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          N5H3jLlBMgEf/hX5fi5Tisd4L/I228CD9Bux0IuousQ=
Subject key identifier:   C9:D8:AE:29:41:BA:37:9E:3E:EE:0B:75:60:16:49:51:FA:94:AE:CA
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       49B99DBCA98F73747D732657AC77A5A63DF508DE
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e382e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:09 +0000
ROA not before:           Tue 12 Sep 2023 04:55:09 +0000
ROA not after:            Tue 10 Sep 2024 05:00:09 +0000
asID:                     262713
IP address blocks:        186.208.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b9:9d:bc:a9:8f:73:74:7d:73:26:57:ac:77:a5:a6:3d:f5:08:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:09 2023 GMT
            Not After : Sep 10 05:00:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:b5:50:dc:ae:4e:f3:79:11:40:9e:6b:cf:
                    da:a3:27:d0:6a:21:61:98:61:b9:0a:2d:13:6b:40:
                    05:25:5b:31:f8:46:af:b7:02:49:4b:12:25:d9:ce:
                    78:bf:1c:47:72:7e:21:4a:9f:cf:4b:0a:da:c3:a6:
                    2e:30:f0:97:a7:41:3e:97:2c:58:a6:a6:4e:2b:9b:
                    de:72:a2:f4:ba:96:20:00:10:6d:0a:e8:48:ee:d1:
                    d0:83:b0:78:ca:3a:5a:8e:04:e7:27:87:57:7d:ae:
                    04:75:ba:89:f3:30:ab:c4:44:bb:e3:7c:ca:c4:9c:
                    5d:96:ec:64:e7:d7:f3:fd:4e:e0:7e:05:ba:5d:03:
                    92:6f:c7:19:a7:d2:a3:66:9c:e4:d3:bf:e6:6a:17:
                    38:34:23:78:4d:f1:c6:42:62:c2:00:01:75:b8:f6:
                    9e:91:eb:91:c6:7b:cb:35:5d:3f:c2:7b:d8:08:d7:
                    08:50:57:42:0b:34:e9:e3:06:1a:ec:23:a5:d1:80:
                    e1:22:0c:34:c0:b8:11:6a:6a:6c:9d:9b:82:a8:01:
                    1c:36:9a:48:27:c8:e5:c3:3b:c7:55:1f:31:1f:88:
                    e7:cf:02:83:0c:bf:35:d5:67:17:b8:4b:fd:d1:17:
                    bc:c4:06:09:5f:92:bf:e4:80:fe:18:68:76:bc:10:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D8:AE:29:41:BA:37:9E:3E:EE:0B:75:60:16:49:51:FA:94:AE:CA
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e382e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:db:33:97:d0:3a:a4:6b:e9:15:43:5b:33:29:66:ab:db:bc:
         59:f4:cb:02:3f:46:2e:65:0e:61:c3:9c:53:9c:f9:08:02:ba:
         e1:7b:44:f5:84:14:ef:eb:6d:2b:40:df:8e:a9:d7:61:68:39:
         65:4a:db:96:aa:8f:3a:fa:b8:d3:10:ec:68:2a:f9:e9:c6:4c:
         01:a6:48:c3:8f:db:47:d0:f7:04:50:94:f4:f2:71:89:26:d8:
         36:3c:21:4b:a2:33:d6:e5:75:d6:0d:bc:96:0b:3a:43:a1:0b:
         dc:9b:30:2b:bb:37:39:50:a4:84:16:62:51:8b:5a:0a:18:6f:
         90:36:6a:8c:f7:3d:4a:2d:5f:3d:94:4e:39:a1:8f:a1:4d:c5:
         01:6a:d3:f4:7b:60:3a:93:8b:84:b2:91:1f:3c:24:5e:97:05:
         c9:95:08:4d:64:44:99:d3:cb:39:33:5c:30:31:07:c9:7c:f6:
         2b:9d:02:d7:45:60:ae:86:87:b2:e2:29:4b:5e:4b:78:eb:b5:
         b4:66:79:2d:9a:76:7f:ba:16:d7:8c:90:3b:a0:7e:77:14:cd:
         0d:b3:f7:65:24:d9:66:06:8c:7f:c8:f9:6a:fc:d0:a6:29:8d:
         c1:34:87:84:6e:94:53:0d:22:08:b3:22:0c:c5:23:77:5b:54:
         06:d3:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:17 2025 by rpki-client