Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          gc6Xm6/L1dXYBZ1rg7nVcaGpIhYFQ9HUP+XV+erRVro=
Subject key identifier:   D2:4A:21:10:EC:B5:B0:D7:93:F2:75:2B:FB:82:78:A1:1B:62:89:16
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       6EC28CABF3F1FEAB7D19C84417617CCBA754C444
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:03:46 +0000
ROA not before:           Fri 03 Nov 2023 12:58:46 +0000
ROA not after:            Fri 01 Nov 2024 13:03:46 +0000
asID:                     28669
IP address blocks:        186.195.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c2:8c:ab:f3:f1:fe:ab:7d:19:c8:44:17:61:7c:cb:a7:54:c4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:58:46 2023 GMT
            Not After : Nov  1 13:03:46 2024 GMT
        Subject: CN=D24A2110ECB5B0D793F2752BFB8278A11B628916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:e8:9b:55:6f:ce:22:7d:33:56:fe:2b:84:
                    31:94:5d:cc:f1:35:b5:4e:64:0b:b1:02:c6:06:ae:
                    f9:5f:d6:b4:6d:2a:7b:04:1c:da:72:65:f8:a2:0c:
                    2d:e5:09:50:50:1e:c0:95:cc:c6:f4:1a:64:d3:e5:
                    6b:d9:53:d0:c7:92:49:36:30:d3:a5:d9:3c:86:7e:
                    f8:29:6c:ad:56:78:12:0b:b7:55:d4:09:64:2c:21:
                    47:79:fe:97:cf:c0:98:72:26:c9:80:c1:90:f7:54:
                    b8:95:6b:47:98:3c:3d:33:c0:97:a6:69:72:ff:88:
                    de:d0:5f:d9:c1:40:10:65:96:b8:89:bc:22:5f:d8:
                    94:66:7f:b0:dc:a6:5d:55:8d:97:33:53:68:f7:ef:
                    6d:e3:f7:90:2a:75:c4:17:db:10:e3:ce:f6:c6:80:
                    bf:f5:ab:9b:47:b5:49:93:d7:c2:51:f1:03:28:7d:
                    85:84:eb:94:fa:91:94:3d:08:5d:57:a0:e3:c4:77:
                    ae:28:4a:79:26:3a:62:67:26:84:c3:32:34:58:85:
                    2f:5e:e4:fd:8e:18:03:61:ec:4a:62:58:3c:a8:04:
                    79:6f:56:e6:f6:71:c7:a2:27:2e:5b:0e:7a:70:7e:
                    9d:81:cd:f4:30:ca:8c:c8:18:bc:8a:50:a0:64:f5:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4A:21:10:EC:B5:B0:D7:93:F2:75:2B:FB:82:78:A1:1B:62:89:16
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:d7:b6:31:c9:3e:db:42:e5:6d:6f:7a:01:ad:ff:71:40:4a:
         36:7d:0b:e9:5c:78:f8:1b:75:d7:8b:18:14:83:1c:a2:52:e1:
         e2:71:71:96:9b:e7:81:a2:01:72:39:ed:07:47:3f:f9:ea:91:
         49:cb:54:3c:d8:f2:cd:d8:7e:8b:9a:5a:27:c7:1f:77:5c:46:
         1b:6f:22:7e:61:3e:25:45:0d:6e:72:dc:80:8c:1c:0a:98:61:
         93:0e:1d:d7:11:29:e4:e6:f1:5c:77:0e:83:80:a3:54:2a:f5:
         16:89:f8:f5:87:d8:12:9c:db:eb:07:b5:1b:70:83:d3:95:90:
         fa:b9:be:f9:5c:4d:99:51:41:df:0b:1b:a4:0f:71:be:bd:30:
         eb:70:a1:0b:38:ad:81:9d:28:66:b7:a8:d4:e8:56:54:d1:9c:
         c6:ac:87:32:0f:3e:54:2f:12:d2:28:43:12:9a:5b:83:d4:f9:
         13:67:b7:00:d5:ae:85:50:59:93:9b:65:b6:9a:4b:26:86:df:
         ae:aa:73:b5:65:d1:c3:72:a9:1d:e1:b2:8d:45:d3:7c:9e:16:
         31:b4:e9:0f:64:43:e8:5c:e0:d9:82:75:f2:e8:ac:f9:64:dc:
         7b:18:42:8b:45:3a:9f:7d:a4:01:89:ac:f2:94:74:52:ca:fd:
         cd:01:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:49:30 2025 by rpki-client