Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/3138362e3233352e36312e302f32342d3234203d3e20323633323730.roa
File:                     3138362e3233352e36312e302f32342d3234203d3e20323633323730.roa (raw, json)
Hash identifier:          PmA1pwCTW9WZv8Uly0sWm5qE74A/xn4BkCXrBC92uok=
Subject key identifier:   0F:BC:BB:A6:90:64:41:90:40:69:57:F1:3E:A8:E9:DA:78:9F:A5:E3
Certificate issuer:       /CN=CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7
Certificate serial:       48EFA9F82CAC2A0171744A04FA68AD5C813101A3
Authority key identifier: CA:9B:A3:9C:8B:1F:4F:52:1B:3E:30:5A:B3:FA:F5:44:51:87:E3:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/3138362e3233352e36312e302f32342d3234203d3e20323633323730.roa
Signing time:             Fri 16 Sep 2022 17:24:12 +0000
ROA not before:           Fri 16 Sep 2022 17:19:12 +0000
ROA not after:            Fri 15 Sep 2023 17:24:12 +0000
asID:                     263270
IP address blocks:        186.235.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ef:a9:f8:2c:ac:2a:01:71:74:4a:04:fa:68:ad:5c:81:31:01:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7
        Validity
            Not Before: Sep 16 17:19:12 2022 GMT
            Not After : Sep 15 17:24:12 2023 GMT
        Subject: CN=0FBCBBA690644190406957F13EA8E9DA789FA5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:e3:89:7d:c2:13:ea:a9:f4:9b:f2:a1:69:
                    36:4a:81:d3:cd:30:ec:7c:8b:de:05:ac:67:06:03:
                    ca:51:47:d7:31:6a:fa:1f:22:d0:41:ec:11:f2:04:
                    70:d1:d4:73:d4:35:5a:e1:cd:20:9f:f0:a1:38:47:
                    ff:a7:b6:bc:55:99:2b:05:7d:cd:3c:ae:1e:51:cc:
                    1d:a6:e8:76:d7:58:d2:6a:0a:91:61:43:00:e3:b3:
                    9c:4b:97:0e:4b:29:2a:99:57:1c:02:1a:a4:49:74:
                    30:f4:df:1a:f4:eb:42:c1:20:1e:ce:4b:1f:ca:79:
                    f6:ab:7b:a4:c5:24:17:55:91:ed:2b:48:9d:7a:35:
                    88:09:d6:a3:c2:6a:50:40:a5:a4:58:ad:c4:96:43:
                    f4:54:55:c0:9b:08:0b:a6:c2:6c:0e:e7:2c:75:54:
                    58:67:c1:81:eb:50:d6:47:94:cd:06:1b:ab:d0:8d:
                    65:3c:8d:58:08:c9:c4:52:43:07:6a:3b:23:7a:3e:
                    71:fb:b6:cb:69:3d:46:0a:95:0f:6f:bc:7e:76:ae:
                    78:70:f9:4b:1c:1d:04:50:e3:d3:d0:f8:55:c1:70:
                    e0:1a:4e:f3:2f:c7:4b:95:fc:8f:57:c1:4c:8d:b3:
                    93:db:aa:69:90:57:6c:b6:5c:d5:b9:b1:6c:d8:37:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:BB:A6:90:64:41:90:40:69:57:F1:3E:A8:E9:DA:78:9F:A5:E3
            X509v3 Authority Key Identifier:
                keyid:CA:9B:A3:9C:8B:1F:4F:52:1B:3E:30:5A:B3:FA:F5:44:51:87:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/3138362e3233352e36312e302f32342d3234203d3e20323633323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:02:64:f5:f6:e6:d5:0f:6c:7e:dc:5e:35:cb:91:86:39:
         23:b8:b6:df:ec:2e:a9:99:c0:ca:f7:01:74:d0:aa:5d:e7:47:
         50:37:32:c1:04:d7:d6:df:e0:d3:b3:2e:3b:26:43:ea:c4:f4:
         2a:c0:17:4d:fe:ad:81:29:97:99:09:c6:10:7f:8b:31:d9:2e:
         38:c5:77:7a:ba:f1:9b:d8:56:25:47:b5:09:2c:a4:d6:c2:52:
         4f:f6:dc:cb:22:00:3b:98:dd:df:87:73:da:76:09:4b:4f:5c:
         41:e8:91:48:92:72:25:43:64:f3:e4:21:94:ea:ba:cb:52:94:
         2a:13:eb:c7:0f:01:aa:fa:fc:47:3e:71:8b:fa:d7:71:ba:9c:
         c1:4c:b9:2b:13:b3:d6:af:cb:ea:2a:61:4d:ff:d5:2a:53:f3:
         8b:b9:a1:cc:fe:2f:21:33:3e:93:93:88:b2:fa:47:02:bf:d8:
         2a:e8:4f:2a:fb:e0:43:73:4f:32:d2:27:52:80:97:7a:3c:53:
         ac:86:ef:b1:02:74:dd:b8:b5:38:5a:67:a8:ae:a4:5b:46:2a:
         8f:c8:f0:05:28:d4:77:bf:e6:89:09:f5:2e:8d:1d:6c:17:cb:
         eb:4e:1a:b4:5a:3b:f5:6c:bc:1a:cc:a8:26:64:fd:33:db:b3:
         05:ad:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:23 2025 by rpki-client