Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32322d3232203d3e20323633313436.roa
File:                     3138372e38362e3230302e302f32322d3232203d3e20323633313436.roa (raw, json)
Hash identifier:          ++x0ErR9j77Tz2RhJ5lW7DNwEmGinT3kMr77+qsI9J4=
Subject key identifier:   26:82:B3:F7:42:AA:F2:D4:82:C2:06:80:9D:AD:D6:CB:5F:14:D7:2F
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       3888C3FD7D6D2E0B34623CD1A9D5223E35B5B3E9
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32322d3232203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:25 +0000
ROA not before:           Thu 06 Mar 2025 08:15:25 +0000
ROA not after:            Thu 05 Mar 2026 08:20:25 +0000
asID:                     263146
IP address blocks:        187.86.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:88:c3:fd:7d:6d:2e:0b:34:62:3c:d1:a9:d5:22:3e:35:b5:b3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:25 2025 GMT
            Not After : Mar  5 08:20:25 2026 GMT
        Subject: CN=2682B3F742AAF2D482C206809DADD6CB5F14D72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:9b:be:48:5e:cc:39:0c:e3:c4:7e:37:7d:
                    08:e3:45:09:a6:64:95:d3:43:43:cd:6e:57:d9:5a:
                    81:49:1f:de:42:d9:60:7d:65:d2:31:bd:5c:f8:5d:
                    4e:bb:d9:e6:25:63:cd:81:b2:59:a6:6a:8e:50:75:
                    6b:f7:47:e1:d0:84:d5:24:de:a6:07:19:fe:3a:71:
                    fc:69:3b:75:c3:82:87:5a:a3:b4:8b:18:f0:4e:ef:
                    d0:ee:5a:41:87:cf:b2:58:a0:13:1e:ac:f3:65:14:
                    44:e6:4d:92:40:c2:3d:18:4a:33:bc:dd:c6:12:37:
                    57:b4:df:4b:70:92:ee:92:62:aa:44:15:86:ae:fe:
                    af:7e:59:df:a4:2c:41:b7:a2:60:7a:82:56:58:1b:
                    df:a6:d1:4d:a5:8b:a0:cc:be:c0:82:a3:8e:82:8f:
                    ec:55:72:96:38:c6:1a:8b:fc:d6:a6:f3:46:ef:26:
                    f1:31:6e:c9:5a:64:3d:8a:89:4e:7f:21:90:77:4d:
                    ee:f3:ff:db:c9:69:5a:38:39:ad:22:9a:65:8c:18:
                    6f:2d:53:25:d7:70:69:bb:b6:10:9b:24:b2:af:fd:
                    52:db:d7:e7:2f:a1:b0:07:9a:9f:2b:b3:63:00:f5:
                    e7:30:42:48:b8:16:27:88:e6:10:4b:43:60:d4:dc:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:B3:F7:42:AA:F2:D4:82:C2:06:80:9D:AD:D6:CB:5F:14:D7:2F
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32322d3232203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:88:63:24:23:5c:13:71:49:21:82:69:a3:9f:31:ad:22:
         ed:c4:73:02:4e:90:b5:41:69:cb:cc:17:7c:49:87:71:24:45:
         8d:fa:26:11:93:29:67:dc:6f:22:92:f8:29:76:0a:e0:86:fa:
         18:c3:7b:e2:d1:7e:5f:a0:45:06:d8:18:3b:62:05:69:d1:a5:
         d3:36:1b:dc:b8:ae:c0:5f:f0:31:ac:26:f8:18:c0:07:a1:29:
         45:ca:d9:8f:11:d7:70:d5:db:53:de:af:42:e9:d6:79:5f:8e:
         03:9e:7d:9e:ca:f3:6d:c7:8a:c1:20:ad:84:52:00:e2:b0:66:
         c1:11:4a:64:fa:5a:d2:8c:bc:a4:5b:f2:d9:00:32:00:62:15:
         9d:1b:63:05:c4:1c:c2:8b:9e:dc:a8:26:aa:68:9e:12:2d:f4:
         6b:a9:4d:e9:bd:1b:5d:b1:ba:da:36:ca:75:9b:a6:eb:c8:ea:
         60:fb:43:3e:2c:d3:d4:1a:1f:d3:71:24:0d:e6:d2:1c:7c:4c:
         f7:43:70:03:69:82:5b:20:6b:41:1b:c4:87:ca:5f:27:53:9f:
         81:f5:06:2a:a7:af:e3:57:f5:e9:02:0d:7c:65:cb:7b:04:24:
         ef:ac:32:37:49:ae:30:31:e3:7c:ea:b9:f0:cf:83:23:49:f0:
         68:82:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:31:35 2025 by rpki-client