Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
File:                     3138362e3139342e39362e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          /RduexFEMzf9csLFrY/59Ge/Sq8phgAsPlBZEybvzEc=
Subject key identifier:   56:D3:7B:33:3D:FD:85:0E:8E:85:9C:16:08:BE:D7:95:C8:C4:94:5C
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       17398C9AD3333C2B8538003C1F1156585BF6578A
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:11 +0000
ROA not before:           Thu 06 Mar 2025 04:37:11 +0000
ROA not after:            Thu 05 Mar 2026 04:42:11 +0000
asID:                     28210
IP address blocks:        186.194.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:39:8c:9a:d3:33:3c:2b:85:38:00:3c:1f:11:56:58:5b:f6:57:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:11 2025 GMT
            Not After : Mar  5 04:42:11 2026 GMT
        Subject: CN=56D37B333DFD850E8E859C1608BED795C8C4945C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:e2:bd:7b:4b:f4:10:9b:07:22:91:dc:3c:
                    1e:48:af:99:52:9b:37:b4:53:c7:00:27:3a:81:66:
                    b9:17:69:88:9d:48:b5:9a:df:30:31:75:ac:a3:81:
                    6f:2b:d7:7e:14:f0:f2:91:70:af:70:82:9c:bf:aa:
                    30:ce:46:e8:c1:63:6e:a5:e0:89:53:85:f3:1b:9c:
                    fc:98:31:b1:d0:6b:fc:3d:c3:ec:c7:dc:81:1c:71:
                    62:ee:25:7e:33:37:e5:42:c9:7f:3c:2e:22:b0:62:
                    55:f3:3d:d1:65:58:f5:1c:b9:81:44:c5:80:51:1b:
                    bb:d9:c2:36:b0:b6:ad:56:a9:39:a6:da:9c:f0:47:
                    55:ea:6d:99:7b:88:e2:62:32:89:8d:7d:b7:a2:65:
                    54:0e:0f:e1:59:8a:fc:9f:eb:38:1c:42:b2:ca:db:
                    98:fa:c7:e7:ac:64:b4:e1:d5:ef:1a:c5:f2:36:20:
                    ea:1d:d2:01:92:8c:52:69:bb:d4:b1:b9:c6:96:5b:
                    10:1b:65:6b:74:df:a6:71:c5:21:83:a7:c3:13:92:
                    c3:8f:2c:70:8d:b3:d2:16:83:e2:57:b8:14:44:dd:
                    20:19:43:db:4d:14:48:43:ad:1b:6b:38:c4:c3:3f:
                    ac:a1:a2:e9:c9:b6:01:ed:b3:46:6c:2a:e5:12:da:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:7B:33:3D:FD:85:0E:8E:85:9C:16:08:BE:D7:95:C8:C4:94:5C
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:b2:0d:d5:6f:b8:67:7c:bf:94:a3:04:68:b9:e8:68:49:
         eb:20:5b:ba:16:80:26:67:ac:d9:64:6c:79:93:2a:b9:53:d1:
         04:c5:78:a9:dd:92:ed:a5:e0:11:ae:3d:57:7a:d5:8c:12:72:
         bb:2c:c0:0e:d4:be:66:c3:14:ab:e1:9f:21:45:3d:7c:27:d8:
         de:3b:22:46:57:04:71:08:17:aa:0b:c2:a3:6e:74:46:be:cc:
         83:c2:82:7b:aa:cd:87:08:e3:95:a0:5a:6d:75:96:8d:08:39:
         78:8c:9e:ed:1b:3a:93:04:b6:b4:f1:02:74:0c:a8:cc:7c:41:
         0d:99:06:c1:24:c3:ce:7b:d7:5a:71:95:81:5a:ac:51:7e:c4:
         a9:53:6a:7f:79:74:6e:86:fd:93:0f:d1:f1:33:df:0c:84:34:
         3f:80:55:96:66:8f:82:6b:67:b9:c1:68:d5:57:46:b5:30:87:
         1c:a5:f9:75:b6:34:b0:e6:4d:0d:20:53:15:35:33:af:7c:40:
         63:73:c8:2e:ef:60:0d:75:44:7f:f6:a4:e0:f9:08:5b:9b:88:
         b4:4f:0b:7f:8c:57:88:f3:f3:bf:fd:97:96:20:04:21:aa:74:
         d6:da:a4:ef:e4:4f:52:f5:ea:80:a8:77:9a:72:19:11:11:e0:
         93:e3:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:56 2025 by rpki-client