Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32322d3232203d3e20323730393236.roa
File:                     3138362e32362e38382e302f32322d3232203d3e20323730393236.roa (raw, json)
Hash identifier:          HjjQuYddnQaIhHJRxBST6qveeFydIjy8a2oilHhTC9k=
Subject key identifier:   73:21:BD:D6:20:6C:71:38:D5:DC:A1:30:C0:0F:99:B2:14:0D:CA:A1
Certificate issuer:       /CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
Certificate serial:       4B809943A2631D53D8099B412043F58F4EB1A5CF
Authority key identifier: 5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32322d3232203d3e20323730393236.roa
Signing time:             Thu 06 Mar 2025 09:41:13 +0000
ROA not before:           Thu 06 Mar 2025 09:36:13 +0000
ROA not after:            Thu 05 Mar 2026 09:41:13 +0000
asID:                     270926
IP address blocks:        186.26.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:80:99:43:a2:63:1d:53:d8:09:9b:41:20:43:f5:8f:4e:b1:a5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Validity
            Not Before: Mar  6 09:36:13 2025 GMT
            Not After : Mar  5 09:41:13 2026 GMT
        Subject: CN=7321BDD6206C7138D5DCA130C00F99B2140DCAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:2b:32:f8:42:f0:1a:2a:1f:2a:13:b0:8a:
                    3f:eb:00:a4:4e:b0:ec:b5:21:0b:ca:74:af:b5:04:
                    b9:b6:bf:cd:33:d4:10:cd:34:44:d3:22:30:ad:1a:
                    6b:09:57:15:6f:50:e4:0b:58:f8:aa:e3:5d:dd:87:
                    dd:28:ef:69:f0:48:eb:a0:b2:90:26:74:a3:18:a1:
                    00:7c:4c:d9:b5:f8:4f:ac:49:7f:33:30:67:76:a2:
                    34:65:6b:bf:24:df:de:b3:e6:61:dc:91:c0:7a:fd:
                    91:e4:17:ac:a1:23:63:74:c7:c9:03:68:c1:95:73:
                    af:ec:e7:48:ff:32:0b:69:43:0d:0e:ef:d1:8b:f0:
                    a9:4f:f4:4a:c6:37:23:fa:db:83:36:40:a3:a6:69:
                    14:b5:46:a7:f2:c3:af:5e:48:c2:fa:1e:c4:31:36:
                    92:7f:29:06:46:4d:27:28:c0:5f:ad:bd:1a:1b:d5:
                    c4:ce:7f:3d:67:cf:a7:85:b0:54:e4:f5:be:7e:bb:
                    51:e0:66:26:6d:38:b6:69:24:6c:79:63:2f:6b:87:
                    81:8c:34:3b:51:95:9b:03:33:67:20:c8:c0:93:35:
                    ef:79:7e:48:95:33:0b:4f:3a:02:c0:48:4d:b9:8e:
                    5c:7f:2d:6f:2b:68:13:61:b0:c5:f9:f3:e0:fd:42:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:21:BD:D6:20:6C:71:38:D5:DC:A1:30:C0:0F:99:B2:14:0D:CA:A1
            X509v3 Authority Key Identifier:
                keyid:5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32322d3232203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:55:4c:ed:59:c8:1e:b5:20:35:55:68:4b:2d:04:fb:de:
         4b:01:9c:a2:29:85:7b:55:ab:8c:65:13:96:25:b4:e1:40:8d:
         2a:6e:3c:d9:35:63:f5:38:f0:61:06:ee:64:93:87:16:20:3c:
         06:87:91:d1:4b:3a:cb:b2:66:e5:58:3a:1c:99:f6:90:79:9f:
         11:77:6a:53:c8:d5:ad:ba:d3:4e:35:a8:65:a9:26:67:f5:43:
         70:51:12:56:01:a4:07:43:04:73:cb:ec:6d:2d:f6:a6:6e:f2:
         da:3b:5f:49:70:0e:f7:c0:f3:1c:ea:5c:e6:b6:ef:f6:d7:8f:
         25:4f:54:48:65:a3:5b:7d:9e:9a:6c:eb:44:17:57:1f:90:39:
         54:54:81:94:2c:e7:e4:80:59:d3:a3:5d:1e:de:69:20:00:e0:
         0d:e9:25:bb:21:f3:2d:33:c3:73:8e:fc:96:d6:73:4c:f4:1c:
         d9:01:11:21:a7:dc:27:cc:da:4d:47:c2:d8:9b:16:4f:7e:36:
         a9:81:8d:56:78:d0:cf:11:dc:66:46:c0:67:ec:a3:80:7f:ed:
         6b:61:21:8f:8b:78:05:e8:11:c0:d6:45:e0:e5:3a:73:f2:89:
         24:98:54:0e:85:2a:35:71:75:d9:f0:99:e7:93:ea:6e:30:29:
         34:6e:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:38:15 2025 by rpki-client