Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3138362e3233322e38302e302f32322d3332203d3e203533313836.roa
File:                     3138362e3233322e38302e302f32322d3332203d3e203533313836.roa (raw, json)
Hash identifier:          gsMPCz02219rBW6DEJIG2ZMRK4bwCGKvj1QtHigVdpU=
Subject key identifier:   98:32:5D:F2:C4:22:F2:92:4E:67:05:0E:AB:65:6B:4A:E1:42:8C:84
Certificate issuer:       /CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
Certificate serial:       53C053050CAE67EA2059AFF8C4F1B334BCBA19C8
Authority key identifier: 6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3138362e3233322e38302e302f32322d3332203d3e203533313836.roa
Signing time:             Thu 13 Mar 2025 17:11:55 +0000
ROA not before:           Thu 13 Mar 2025 17:06:55 +0000
ROA not after:            Thu 12 Mar 2026 17:11:55 +0000
asID:                     53186
IP address blocks:        186.232.80.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c0:53:05:0c:ae:67:ea:20:59:af:f8:c4:f1:b3:34:bc:ba:19:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
        Validity
            Not Before: Mar 13 17:06:55 2025 GMT
            Not After : Mar 12 17:11:55 2026 GMT
        Subject: CN=98325DF2C422F2924E67050EAB656B4AE1428C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:38:9a:a3:9d:0e:d0:5e:cc:33:d6:ca:e0:
                    f4:76:c0:84:69:08:01:9d:eb:10:75:e4:80:38:85:
                    a6:1c:d2:0a:68:8c:b4:9f:07:d8:f4:fb:47:0c:e4:
                    66:c5:23:1b:57:7f:01:30:0f:41:85:24:70:ff:86:
                    09:fe:eb:00:71:c4:8d:be:90:13:6c:d5:c1:49:cb:
                    e9:b2:12:69:02:c8:28:1e:67:a1:fe:db:07:8e:af:
                    23:55:fa:38:18:c1:d1:cf:60:e0:78:d9:a1:87:35:
                    21:da:aa:08:f1:ca:35:dc:08:6d:1b:50:38:b8:49:
                    5a:9f:dc:d5:cf:f4:b7:a8:8a:84:a4:c8:49:5c:e5:
                    d0:7f:f3:24:73:41:7e:91:d3:91:d9:9f:b1:9b:94:
                    d1:4c:e5:74:3e:c7:ab:87:34:4c:dc:04:80:91:6a:
                    19:7d:d1:fc:0d:38:eb:4b:55:82:bc:4b:33:c7:e2:
                    29:d8:d2:83:f6:20:57:f7:2a:2d:3b:e8:5b:6b:42:
                    d7:20:8f:cb:ac:8d:02:2c:e2:64:fc:31:d0:5e:e7:
                    3b:60:9a:8c:69:3c:2e:80:16:c2:9e:01:54:70:f6:
                    44:21:44:08:8c:30:bc:d6:3b:88:3d:8e:69:0c:bf:
                    47:cb:ba:27:01:13:b6:31:19:d3:32:bd:eb:b9:24:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:32:5D:F2:C4:22:F2:92:4E:67:05:0E:AB:65:6B:4A:E1:42:8C:84
            X509v3 Authority Key Identifier:
                keyid:6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/6F6E41F37AB48469D1CE88AD1951EB232B517B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/3138362e3233322e38302e302f32322d3332203d3e203533313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:46:5a:dd:d2:6c:94:36:f5:6d:07:07:a4:32:1e:51:28:16:
         c3:57:87:07:0c:d0:85:29:1d:b7:58:5d:56:d6:e4:ff:b6:40:
         95:cc:3b:be:5f:9e:8d:35:e9:6a:90:7e:a5:8d:7e:f0:96:f0:
         a4:18:4e:79:16:c1:bf:c9:0c:56:f9:fd:5a:82:69:fe:62:27:
         51:02:49:7d:ba:9e:85:14:5b:0b:ad:af:21:2e:b0:94:1a:55:
         7c:e8:8f:e7:ff:e7:13:75:1c:b1:a4:db:2c:4e:4d:14:57:0d:
         29:02:d0:4e:73:9b:12:20:ce:2c:2e:10:86:a9:d0:bf:e7:55:
         52:15:4c:32:49:35:36:35:c7:ae:0e:85:a7:f2:a3:77:c4:fb:
         e0:6d:10:99:e3:31:22:bf:d8:91:e2:25:72:c3:41:db:1a:fc:
         50:1a:c7:56:cc:ae:3d:e0:55:36:1a:d7:6d:91:f7:60:26:73:
         dc:2a:22:f1:8d:de:ce:8c:9b:35:4e:c8:92:b7:33:15:78:7c:
         34:ee:9c:0d:cc:70:8b:d3:e7:7d:ab:1d:49:9f:70:09:1d:d9:
         0b:11:c1:8a:2b:f5:b0:0d:9a:a7:8a:98:ca:b5:02:20:a0:78:
         0f:20:f8:07:48:c8:84:ff:e0:97:2d:52:ed:f9:7c:d4:39:0d:
         ad:07:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:13 2025 by rpki-client