Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3232352e39362e302f32302d3234203d3e203238363639.roa
File:                     3138362e3232352e39362e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          U9rOFRyOBlwF+TwDD7vddPbfNOuBMqffSu79AjsMHPM=
Subject key identifier:   60:F9:79:F4:AA:C9:CA:26:17:DF:56:ED:15:86:F0:4B:52:E5:11:51
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       01F50D4E27BA20DD68CBD0F92D7509A8751201B8
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3232352e39362e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:01:33 +0000
ROA not before:           Fri 03 Nov 2023 12:56:33 +0000
ROA not after:            Fri 01 Nov 2024 13:01:33 +0000
asID:                     28669
IP address blocks:        186.225.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f5:0d:4e:27:ba:20:dd:68:cb:d0:f9:2d:75:09:a8:75:12:01:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:56:33 2023 GMT
            Not After : Nov  1 13:01:33 2024 GMT
        Subject: CN=60F979F4AAC9CA2617DF56ED1586F04B52E51151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:e9:06:0a:3d:27:5b:5a:45:dd:d8:ff:96:
                    3c:3c:b2:7c:9e:49:af:7d:71:2a:65:cb:db:d2:78:
                    97:ce:39:21:b8:5a:4d:cc:36:3a:27:9f:0d:4c:ba:
                    de:4c:f5:f2:ba:8f:59:54:ca:7c:2f:1b:04:14:f5:
                    71:96:a7:ef:50:cd:4f:7f:be:5c:f2:da:c3:0f:5d:
                    48:9d:67:46:fa:c0:48:1d:fd:81:86:73:cd:2a:8f:
                    ca:5b:6e:27:c2:3f:f8:f4:ad:39:77:77:e2:e4:0f:
                    f6:ee:91:d1:4f:37:03:f2:03:5a:0f:99:a2:3f:a5:
                    1b:65:1d:d4:22:7e:a7:7c:aa:98:1c:a1:e6:14:3a:
                    5d:90:4b:bd:bc:44:6c:44:c6:c6:19:8c:3b:4a:8d:
                    10:f4:03:f1:ab:aa:f7:59:9d:b2:99:c0:9b:a7:ca:
                    3d:02:2f:96:51:8b:69:f0:44:28:f9:78:2c:4d:83:
                    df:d6:73:3a:7d:27:78:a0:c8:85:89:7b:b8:a1:15:
                    83:e1:3a:7a:ae:21:65:6d:3c:34:d0:cd:e5:d3:f9:
                    52:14:8a:a4:a2:36:28:22:be:2b:4b:ca:50:83:29:
                    f3:b4:15:75:d0:5a:70:61:1f:f7:6d:3d:d1:e5:62:
                    2e:e0:c8:c2:46:8f:4c:b7:81:77:c6:eb:8b:af:cd:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F9:79:F4:AA:C9:CA:26:17:DF:56:ED:15:86:F0:4B:52:E5:11:51
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138362e3232352e39362e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:63:a2:e7:26:46:d2:e4:a6:e0:53:52:c4:61:5a:8e:3f:
         14:fc:06:67:bb:c5:13:5f:39:0e:22:a5:1e:dd:25:b7:19:3b:
         58:2b:fc:ab:51:08:b3:2c:8b:3e:c2:28:69:fc:31:9d:b3:4c:
         f2:d8:c4:78:3b:44:4a:44:82:aa:68:b3:32:df:b8:b4:c8:91:
         f6:66:9f:49:84:ea:14:79:f8:ce:cb:5a:3a:4b:e2:3e:0c:f3:
         c4:77:81:6c:1f:d4:7d:a4:44:1b:6f:11:00:64:51:63:e7:bd:
         a0:fe:1c:45:b1:e3:12:fa:3f:59:4d:83:e3:a7:13:4f:04:76:
         1f:fd:d5:08:e4:d4:e7:b1:ec:68:18:82:88:5e:5a:be:5e:24:
         79:d1:86:a1:ca:59:34:8e:90:10:a9:23:a9:a8:99:15:9f:5c:
         2d:72:1c:c8:14:a8:2a:97:eb:c0:8a:a6:54:4d:d6:f3:86:32:
         e9:0e:19:97:46:28:08:cb:44:42:86:f5:c5:af:ec:30:61:eb:
         4e:d8:7b:d9:ce:4e:00:59:b4:b3:74:2f:0b:ae:e5:76:05:cd:
         71:8a:e3:35:d7:2e:cb:e3:19:24:a2:6a:e6:1c:ea:cc:39:59:
         e3:e0:95:e3:ac:45:3d:ba:2d:ae:1d:5b:94:eb:c4:7c:65:13:
         05:c2:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:07:10 2025 by rpki-client