Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32342d3234203d3e20323730393236.roa
File:                     3138362e32362e38382e302f32342d3234203d3e20323730393236.roa (raw, json)
Hash identifier:          GTb6VissBeNUP4hUPNUF5/XMaSyMv6j/4YTai4SyZt4=
Subject key identifier:   34:02:83:F2:70:78:18:9B:0B:F5:59:DE:12:73:33:66:96:1C:18:BD
Certificate issuer:       /CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
Certificate serial:       3CF2E0D8A654D6EFEDABECEC9D73C50855000AE4
Authority key identifier: 5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32342d3234203d3e20323730393236.roa
Signing time:             Thu 06 Mar 2025 09:41:14 +0000
ROA not before:           Thu 06 Mar 2025 09:36:14 +0000
ROA not after:            Thu 05 Mar 2026 09:41:14 +0000
asID:                     270926
IP address blocks:        186.26.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f2:e0:d8:a6:54:d6:ef:ed:ab:ec:ec:9d:73:c5:08:55:00:0a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Validity
            Not Before: Mar  6 09:36:14 2025 GMT
            Not After : Mar  5 09:41:14 2026 GMT
        Subject: CN=340283F27078189B0BF559DE12733366961C18BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:37:cc:8c:8c:d7:d0:92:d7:d5:19:19:0a:
                    e2:57:a3:00:83:41:3a:d4:25:12:2c:63:2e:4d:96:
                    d7:f0:28:0d:b6:22:ed:04:7a:23:38:c8:54:43:6b:
                    2d:a0:10:44:bf:43:40:68:5e:d5:75:8f:53:6a:13:
                    4e:c6:95:e8:32:03:f4:e5:f5:32:40:e2:b7:d8:23:
                    5f:03:dd:f0:82:a2:fd:74:89:5e:22:88:1e:f4:a2:
                    1c:92:21:9e:f2:dd:b6:75:01:26:86:c9:23:53:c7:
                    0a:42:81:10:0a:de:8c:6f:e0:67:28:c8:39:ea:d7:
                    5b:47:63:e6:ae:3e:50:14:60:18:20:18:d0:e6:02:
                    48:55:b2:12:02:c6:4a:53:2f:dd:44:11:a6:a9:39:
                    39:c4:ec:07:60:41:7c:c1:cb:94:43:2a:ab:84:3d:
                    23:a4:c2:b8:4f:8c:23:94:1d:6d:06:af:43:64:4c:
                    60:9d:26:8d:5a:6e:fe:30:7c:50:5a:f8:22:9e:6b:
                    64:6b:4f:54:c1:a5:c4:7c:f8:d4:3b:9f:16:37:71:
                    5b:63:5e:3b:92:d2:38:8d:e5:98:47:23:91:09:c6:
                    15:25:32:78:ee:7c:f9:7b:f6:f9:c8:e9:df:2e:a8:
                    da:fe:08:84:96:73:ab:c8:a4:dc:33:6e:35:a7:33:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:02:83:F2:70:78:18:9B:0B:F5:59:DE:12:73:33:66:96:1C:18:BD
            X509v3 Authority Key Identifier:
                keyid:5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32342d3234203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ee:43:8b:4a:84:67:b9:9a:c8:78:63:bb:bb:1b:a9:bc:10:5d:
         cd:4b:8c:05:0b:62:89:03:72:ee:b5:c7:c6:e4:cf:ae:e6:8d:
         90:e9:ef:24:63:23:e7:fe:bd:d4:e8:6e:24:e4:4d:63:01:d2:
         bf:26:ea:36:d5:b9:05:03:fb:4b:e7:e9:85:71:b3:f3:43:0d:
         f0:cf:d3:70:ee:c1:e9:f3:b1:dd:ad:4b:92:a7:cd:5c:cb:c8:
         aa:bd:cf:18:ef:04:dc:8d:ae:3e:46:47:ba:74:80:cd:38:29:
         a1:4d:b2:4f:90:65:39:3f:d0:6f:4d:c9:77:c0:21:35:e4:a8:
         f0:54:eb:ea:a5:09:4f:24:35:92:a7:bc:d7:c3:1d:f0:11:55:
         3c:15:d0:42:f5:35:cf:b0:58:e5:9a:e8:31:db:f0:f3:79:43:
         82:e3:7c:48:3d:8d:58:49:e1:d8:92:7d:3a:a7:c4:87:fc:6a:
         cb:62:09:f1:62:1d:5e:22:94:a3:ad:a9:fb:ba:ca:d8:3a:5c:
         50:f5:4c:2d:8a:65:8a:f0:8a:50:5b:93:8d:57:23:d6:4d:14:
         15:0c:b0:af:bc:02:21:13:d2:64:3e:8f:8b:b3:4e:4f:00:67:
         73:31:aa:45:13:9f:8e:cc:51:a0:c4:f0:6f:eb:db:04:f8:1d:
         c3:73:7c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:40:09 2025 by rpki-client