Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e36342e302f32302d3234203d3e20323632363539.roa
File:                     3138362e3139332e36342e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          q0HuMekDxX+k9mds3Gjz1l4KZ6Y6o3p21JuprxO0ork=
Subject key identifier:   F4:42:E5:1B:4A:A5:38:03:69:DB:FD:7F:BD:75:E6:E8:00:5F:36:CD
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       4991CDA99B6E3E3E2B844D270AFE13F26317A14B
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e36342e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:15 +0000
ROA not before:           Thu 31 Oct 2024 17:09:15 +0000
ROA not after:            Thu 30 Oct 2025 17:14:15 +0000
asID:                     262659
IP address blocks:        186.193.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:cd:a9:9b:6e:3e:3e:2b:84:4d:27:0a:fe:13:f2:63:17:a1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:15 2024 GMT
            Not After : Oct 30 17:14:15 2025 GMT
        Subject: CN=F442E51B4AA5380369DBFD7FBD75E6E8005F36CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:11:3c:08:f2:f8:f8:1c:3d:b0:a8:04:5b:
                    41:8e:f2:26:91:4e:6e:ce:a3:ce:1b:da:5f:ae:b8:
                    25:6a:0b:f0:4b:cf:56:5a:3b:08:31:bb:5e:56:5b:
                    4e:25:b0:03:42:cb:c4:d0:4f:db:02:f2:90:03:e1:
                    98:f9:06:3c:86:d0:70:90:cd:b4:a7:83:75:40:b4:
                    6b:6e:f7:12:3a:69:f0:49:c1:78:96:34:75:e9:0f:
                    04:48:94:36:7b:0c:f0:74:f4:67:ad:17:72:e0:8b:
                    ca:de:11:f4:16:35:b7:ab:49:e0:6f:f8:1d:7f:78:
                    68:4b:da:69:3b:0a:09:8f:2b:50:f8:9d:2d:8a:47:
                    e2:20:3f:70:bd:b2:51:66:cf:c1:bc:d6:d1:9f:1e:
                    52:7c:f1:c8:36:31:13:37:92:f7:c5:e3:b0:11:21:
                    50:e7:23:ed:1a:c5:80:68:89:bc:f6:f7:1d:01:c5:
                    42:7d:c1:a4:a9:56:49:35:bd:59:ff:1c:48:ac:0e:
                    2e:e8:7c:e7:c8:8c:fb:57:1c:14:fd:de:e0:0f:58:
                    e4:cf:a6:b0:9f:f8:a5:b0:9c:f4:4b:e6:9a:31:2c:
                    c2:7e:40:3a:e4:3a:46:04:80:aa:15:cb:84:80:e6:
                    a8:d5:c3:44:94:9f:53:42:0d:2e:7f:3a:40:29:24:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:42:E5:1B:4A:A5:38:03:69:DB:FD:7F:BD:75:E6:E8:00:5F:36:CD
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e36342e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:8a:13:4c:4a:f0:61:2e:ec:b5:de:65:e7:f5:8c:a5:e5:
         61:14:b6:d3:99:a1:0b:10:ba:62:af:be:f9:40:36:22:85:98:
         13:b8:0d:d4:7c:50:28:78:1f:4c:61:51:88:49:7f:03:1b:1b:
         ef:b5:be:d8:db:d7:19:43:da:0e:c8:0d:23:4c:23:b0:21:47:
         4a:a1:fc:f2:44:6c:d8:79:f4:ab:a3:9a:22:e0:d1:05:35:62:
         16:63:08:b8:ef:2b:50:8d:88:35:46:ce:c0:5a:83:0c:f9:9c:
         f8:dc:2f:1f:e4:66:4f:ab:5c:5c:8d:33:77:b8:a0:4a:56:83:
         19:ab:f1:16:60:6e:ac:70:b9:99:bc:17:b1:01:67:b9:a3:fc:
         3e:0f:d6:f6:1f:37:e0:61:ee:92:3a:37:d8:06:68:83:70:ba:
         0e:ba:b4:43:88:d1:8a:37:64:16:1c:88:ce:1f:03:20:76:f1:
         5c:7d:ff:bf:5e:57:bc:05:20:31:2a:59:54:e6:ed:a1:eb:36:
         65:1c:d4:ed:ad:64:7b:dc:7c:39:95:7c:b1:90:91:7e:e8:fb:
         0c:93:be:66:5a:1f:d1:16:d2:f2:f5:9d:43:1c:12:bd:5d:18:
         e5:f2:47:66:aa:b1:a1:2b:31:dc:57:39:9e:3c:06:5c:48:88:
         47:21:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:52 2025 by rpki-client