Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/3138362e3235312e34342e302f32342d3234203d3e20323632383235.roa
File:                     3138362e3235312e34342e302f32342d3234203d3e20323632383235.roa (raw, json)
Hash identifier:          2wZzuM4R8SiihlZtoHXVCbELK2kzUzWn1fm98+xWfiI=
Subject key identifier:   AA:81:32:C8:7E:3A:7F:17:22:D7:5D:8F:D1:FC:B1:76:7A:A9:42:5C
Certificate issuer:       /CN=86F6303867F3852D21929CF29FA61F3A746FC984
Certificate serial:       65AFA92C55C81054BEB6470B930D2107695A36A0
Authority key identifier: 86:F6:30:38:67:F3:85:2D:21:92:9C:F2:9F:A6:1F:3A:74:6F:C9:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F6303867F3852D21929CF29FA61F3A746FC984.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/3138362e3235312e34342e302f32342d3234203d3e20323632383235.roa
Signing time:             Tue 14 Dec 2021 18:46:10 +0000
ROA not before:           Tue 14 Dec 2021 18:41:10 +0000
ROA not after:            Tue 13 Dec 2022 18:46:10 +0000
asID:                     262825
IP address blocks:        186.251.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:af:a9:2c:55:c8:10:54:be:b6:47:0b:93:0d:21:07:69:5a:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F6303867F3852D21929CF29FA61F3A746FC984
        Validity
            Not Before: Dec 14 18:41:10 2021 GMT
            Not After : Dec 13 18:46:10 2022 GMT
        Subject: CN=AA8132C87E3A7F1722D75D8FD1FCB1767AA9425C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:26:43:f9:dc:0f:3a:fa:01:74:8e:b3:4f:
                    d5:af:d8:eb:dc:30:c5:d7:3e:6c:a0:32:8b:de:1d:
                    ec:ad:2c:6c:f4:57:c4:17:fa:0f:e8:1d:52:5b:58:
                    4f:f0:c8:83:43:48:00:89:ef:d2:a3:ae:41:b6:fd:
                    62:ae:23:02:83:f3:03:7a:5c:a3:a1:65:70:9d:34:
                    7d:a5:e8:24:8e:53:3b:43:e0:59:8a:38:7d:62:2a:
                    d4:32:2a:d6:77:1b:b7:a7:78:a5:36:88:d9:6e:cd:
                    4c:38:69:10:61:6e:e7:8d:35:26:0f:7a:95:14:7c:
                    97:ed:ad:76:87:c1:f4:54:37:ab:86:8b:66:0b:fc:
                    02:47:f7:72:3b:60:65:1d:ea:bf:5f:16:37:28:b2:
                    7f:6e:6d:28:c6:d3:0c:56:a9:09:8e:22:59:ec:ad:
                    8b:30:3a:5c:b6:c0:67:af:7b:16:97:08:1d:7e:5a:
                    da:22:c7:dc:b6:96:69:7d:ae:d2:13:1e:2f:6d:23:
                    32:ce:39:38:41:a5:79:8d:c5:95:0b:1a:dc:22:4e:
                    fe:9b:2a:76:4f:2b:b4:d0:2c:c6:74:ef:3f:bc:b4:
                    61:d7:28:f3:33:af:e0:b6:07:1b:32:80:cd:2c:dc:
                    98:e2:52:3f:25:ba:4e:c4:2e:8b:2d:17:d4:13:fd:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:81:32:C8:7E:3A:7F:17:22:D7:5D:8F:D1:FC:B1:76:7A:A9:42:5C
            X509v3 Authority Key Identifier:
                keyid:86:F6:30:38:67:F3:85:2D:21:92:9C:F2:9F:A6:1F:3A:74:6F:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/86F6303867F3852D21929CF29FA61F3A746FC984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F6303867F3852D21929CF29FA61F3A746FC984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/3138362e3235312e34342e302f32342d3234203d3e20323632383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:50:69:f2:2d:2c:c4:9f:94:9a:f1:a3:42:c3:23:a6:82:b1:
         13:b5:49:51:5c:be:54:27:ae:45:de:47:1a:f1:de:85:71:a0:
         52:e8:78:74:8b:f9:db:ab:82:25:f9:74:44:c1:75:ee:52:96:
         2a:ce:be:97:96:1c:f6:fa:7f:14:c4:28:48:4d:11:18:a3:6e:
         83:7f:82:87:43:3e:7c:ae:f7:2a:95:1f:44:aa:45:36:6c:4c:
         73:6e:fa:e0:bc:26:63:5a:2b:f4:6b:ea:67:8a:aa:db:9c:f6:
         b4:c8:59:0e:f7:44:7f:02:dd:05:05:e0:fa:9a:be:6a:06:9f:
         9b:96:18:64:c3:f9:06:6b:56:a5:7a:5e:8b:fe:13:c2:a5:ba:
         2e:ab:73:d9:c7:1f:8e:0f:83:e3:c5:e5:11:72:a7:37:7a:9b:
         9e:b4:9b:bb:f5:06:5a:f7:10:91:e8:fa:29:af:a2:ba:0d:6c:
         d1:21:d1:ac:12:31:7e:50:01:88:35:65:2c:d3:9f:6c:65:9e:
         68:27:56:f1:db:81:77:eb:5a:fc:93:73:3b:68:97:3d:b4:b0:
         9a:01:17:2f:80:4d:9e:09:ea:8f:1b:fe:1f:bf:7b:e0:09:46:
         ab:64:68:af:38:d4:0a:bb:16:31:c7:90:76:aa:55:53:38:6a:
         5f:00:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:46 2025 by rpki-client