Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa
File:                     3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          KLIvWRfFf7r90ry7xRNOxnFZNcA+GAKMHsCb5hkINWo=
Subject key identifier:   06:79:1E:F9:25:67:6F:EA:6F:B6:4E:A8:30:24:96:43:C5:05:50:2C
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       399A9066A526CEA586DC2102CA7B3DEADC7247C6
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:02:09 +0000
ROA not before:           Fri 03 Nov 2023 12:57:09 +0000
ROA not after:            Fri 01 Nov 2024 13:02:09 +0000
asID:                     28669
IP address blocks:        186.225.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9a:90:66:a5:26:ce:a5:86:dc:21:02:ca:7b:3d:ea:dc:72:47:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:57:09 2023 GMT
            Not After : Nov  1 13:02:09 2024 GMT
        Subject: CN=06791EF925676FEA6FB64EA830249643C505502C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:af:64:50:62:e4:2b:f6:83:41:9f:a7:58:
                    fc:68:80:7e:8b:4e:95:57:bd:69:87:c0:fb:34:17:
                    3e:01:a6:cb:27:f7:b0:b3:98:87:ac:5f:80:32:46:
                    3c:27:bf:b8:ac:e6:b9:ff:d5:dd:91:d7:9e:d5:97:
                    f4:bc:ed:8e:31:aa:b8:3f:6c:33:2f:97:73:87:98:
                    81:70:77:31:5c:5b:03:28:b4:1b:f6:5b:fc:36:f3:
                    66:00:17:98:91:9a:c9:bb:53:8e:8f:7c:c2:bb:c4:
                    24:f5:20:51:d3:ed:68:cd:85:d6:a4:4a:dd:9b:45:
                    73:c4:1d:20:7c:80:c5:83:59:9a:01:00:40:68:fb:
                    1d:1a:b5:4a:58:e6:87:d3:c2:71:78:8e:07:c0:58:
                    14:dd:50:43:27:bc:49:b2:68:bd:da:6b:51:11:c1:
                    3d:8c:ef:00:fc:9d:a1:76:fd:7f:97:8f:57:02:08:
                    4a:39:d8:7b:d9:ec:e4:a3:ff:82:bd:1d:d4:84:0b:
                    db:b2:66:9c:52:1f:e5:6d:28:64:fc:ad:16:a9:2a:
                    23:48:2b:79:21:49:f2:30:af:80:0f:68:4f:00:91:
                    09:e1:77:ae:85:3d:48:8c:9c:72:24:f4:47:7d:58:
                    1e:89:8d:7a:6a:87:73:5d:d6:06:7d:79:73:4c:57:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:1E:F9:25:67:6F:EA:6F:B6:4E:A8:30:24:96:43:C5:05:50:2C
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:10:02:e7:6a:1c:0a:af:7b:c8:88:2f:d6:ba:eb:26:ff:
         69:54:2c:65:03:69:d3:f3:8c:e0:92:e6:72:90:a1:b9:79:fe:
         7d:13:c0:c6:49:b2:a2:da:93:bf:ec:a2:6d:30:f8:01:57:5c:
         74:c8:4d:33:f1:60:a4:1e:00:e0:5d:4d:05:81:d3:7b:f3:31:
         b0:cb:07:99:94:13:70:fa:0e:08:b1:0a:ca:3b:a3:4d:01:c6:
         69:49:7b:8c:74:1d:90:b9:03:fa:0f:14:97:54:fb:72:c0:b7:
         dd:60:74:43:ef:d1:8b:fa:95:69:2e:3a:6a:7e:2d:a3:44:1e:
         ff:c0:69:22:40:32:d7:65:97:72:e7:80:b8:bd:e2:b2:8b:e3:
         1e:11:2e:56:1f:07:04:5f:5a:ca:80:45:86:11:8b:a0:16:e5:
         1e:ca:aa:46:0a:c6:77:f3:a7:5c:f7:51:ac:61:7b:94:fb:2f:
         19:e0:7b:34:f4:86:13:29:e6:0c:3b:6d:98:b9:ea:2e:dc:35:
         e1:1d:88:71:98:97:54:d5:f5:fe:f2:3b:28:ed:58:b0:db:c5:
         a0:ed:61:cc:07:a0:71:e5:ec:fa:b2:0e:6e:a4:0d:30:3a:70:
         06:55:99:24:42:48:67:37:c5:bb:6a:9e:7f:b5:de:33:39:c7:
         c9:cf:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:18:23 2025 by rpki-client