Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230362e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230362e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          X6QLHOdWrLNyCw/cMKLMFSQM5oYPvT1xSk+17/CdJMY=
Subject key identifier:   9D:CE:A9:6D:5C:F5:BA:C1:68:81:B3:44:DB:C6:80:49:5B:8A:9E:BC
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       399BAA324892ADB75A9CC704D86683D84B49F0D9
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230362e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:32 +0000
ROA not before:           Thu 06 Mar 2025 08:15:32 +0000
ROA not after:            Thu 05 Mar 2026 08:20:32 +0000
asID:                     263146
IP address blocks:        187.86.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9b:aa:32:48:92:ad:b7:5a:9c:c7:04:d8:66:83:d8:4b:49:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:32 2025 GMT
            Not After : Mar  5 08:20:32 2026 GMT
        Subject: CN=9DCEA96D5CF5BAC16881B344DBC680495B8A9EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:77:73:8b:ad:3f:ff:9d:56:76:6b:6e:49:
                    30:97:63:04:e2:e8:e3:a8:75:33:0a:a4:a9:bf:36:
                    4f:be:bb:d8:e3:58:34:9d:fa:82:32:cf:a8:ce:a8:
                    7f:71:8a:1c:46:ce:41:17:8f:8b:16:c3:86:27:01:
                    89:0b:d8:fb:8d:d5:9e:67:e7:4b:6d:11:27:0b:0e:
                    8a:7f:d4:e0:47:0a:d7:c8:71:06:8f:ba:cd:06:5c:
                    68:64:d1:40:29:95:35:e5:4f:d8:96:c7:cb:0c:08:
                    b6:22:d7:87:f3:36:37:e4:6f:1d:36:48:5f:15:6e:
                    5f:78:c1:fd:8a:f4:a9:8b:7d:83:e8:82:01:ee:22:
                    27:b5:83:2a:f4:5f:b8:81:37:48:b5:3d:3d:d2:50:
                    36:dc:38:fb:c4:28:01:b1:5b:e8:56:b9:19:5d:26:
                    47:4d:04:e0:57:a6:b9:a0:48:2c:22:1c:ea:bf:d1:
                    58:ba:3f:14:be:c0:ea:c5:ee:c6:b1:6b:5f:86:10:
                    ea:f4:90:cf:35:78:a7:e4:c0:e3:5d:f1:e0:98:28:
                    c4:c2:1e:04:e1:d6:21:d9:4c:80:18:44:bb:e8:8c:
                    3b:7f:e6:6a:5b:eb:25:75:e6:62:8b:db:49:92:65:
                    32:58:b5:7d:24:d9:62:3b:63:9f:44:4f:ee:f8:c2:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:A9:6D:5C:F5:BA:C1:68:81:B3:44:DB:C6:80:49:5B:8A:9E:BC
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230362e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:c1:e4:30:12:a5:d0:31:12:5a:19:5f:e2:1a:1d:e1:81:
         74:30:59:64:8d:00:e6:58:12:f1:e7:0d:7b:df:00:01:8b:f7:
         01:cb:e9:87:49:53:c6:7f:19:84:b9:e6:41:75:75:fa:62:15:
         37:e0:69:c3:aa:8d:50:6e:7a:67:b5:9a:be:94:c6:84:e3:e1:
         d0:d8:08:e8:e6:f0:03:71:e8:3e:65:28:24:00:67:ac:cd:77:
         ea:30:e9:07:4d:19:f6:1c:35:3e:7b:c8:f4:d6:c6:d4:d5:77:
         8e:24:5f:63:6f:ba:89:e3:e3:5a:db:ea:59:c2:a9:e5:52:ee:
         67:a7:17:4a:da:00:1e:6d:9b:32:d8:1d:2a:52:ac:cf:31:71:
         6e:4d:63:a3:25:43:82:11:5b:ae:88:09:1e:8e:ff:93:ca:ac:
         c7:83:db:5f:a3:38:eb:15:06:fc:d5:44:8a:6a:9c:ba:6e:1d:
         b8:49:b1:9f:78:f7:ca:ea:c7:70:2c:76:01:0d:f4:02:43:60:
         72:4a:b1:d1:7c:03:83:a1:73:f9:23:8a:bc:f4:44:ec:9f:f8:
         a0:a6:8d:be:25:00:90:80:13:18:e1:87:a1:3c:2b:bf:0b:61:
         7e:58:27:d2:ba:63:9d:7c:19:69:97:70:b7:5b:62:fa:da:5f:
         d3:80:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:30 2025 by rpki-client