Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/3138362e3232372e31362e302f32302d3234203d3e203533313832.roa
File:                     3138362e3232372e31362e302f32302d3234203d3e203533313832.roa (raw, json)
Hash identifier:          32Mxl6+r3TpOJTqBxY5am7N5PPtDAAULURmLWPlQzM8=
Subject key identifier:   52:33:F8:54:15:15:9E:59:1E:69:67:07:1E:DE:E7:87:5D:A4:41:17
Certificate issuer:       /CN=5CB9E888F81253676155F413B2AE484B47AF5245
Certificate serial:       6F2162E0D73F3D0ECBE3DE5BBCD48D135524E913
Authority key identifier: 5C:B9:E8:88:F8:12:53:67:61:55:F4:13:B2:AE:48:4B:47:AF:52:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB9E888F81253676155F413B2AE484B47AF5245.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/3138362e3232372e31362e302f32302d3234203d3e203533313832.roa
Signing time:             Fri 22 Mar 2024 19:17:03 +0000
ROA not before:           Fri 22 Mar 2024 19:12:03 +0000
ROA not after:            Fri 21 Mar 2025 19:17:03 +0000
asID:                     53182
IP address blocks:        186.227.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:21:62:e0:d7:3f:3d:0e:cb:e3:de:5b:bc:d4:8d:13:55:24:e9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9E888F81253676155F413B2AE484B47AF5245
        Validity
            Not Before: Mar 22 19:12:03 2024 GMT
            Not After : Mar 21 19:17:03 2025 GMT
        Subject: CN=5233F85415159E591E6967071EDEE7875DA44117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:f5:28:4a:e7:40:bb:26:2f:d3:0c:83:60:
                    01:9a:a2:48:2a:ca:30:d1:bf:8f:86:96:83:a3:91:
                    2e:db:d5:d7:5c:54:62:cb:48:47:ca:5e:79:a8:fb:
                    ed:11:f5:a7:19:ee:f5:0b:d3:85:bb:72:2e:a8:14:
                    de:02:6f:e0:b4:e9:68:0d:ac:01:20:e2:0d:db:0e:
                    cd:a2:48:ab:a4:07:27:e4:60:13:36:61:cc:51:ca:
                    c8:40:14:e8:83:d6:54:cf:83:27:23:00:5f:28:10:
                    85:87:cf:b2:00:33:2d:fc:40:08:02:e9:4c:8c:da:
                    97:0f:7b:19:37:74:8d:c9:a1:b7:75:12:ce:f5:01:
                    dc:89:52:5b:9a:a5:f2:61:42:b8:7d:d7:31:0b:ed:
                    a8:a6:1d:c1:fd:5a:71:e0:18:9f:4b:fa:de:86:94:
                    4f:a0:e4:9d:09:95:a6:67:01:cf:00:f5:d9:f4:bc:
                    a6:67:86:ec:4c:b6:28:59:df:54:03:48:47:74:2d:
                    25:a4:cf:ad:a7:9a:1a:2f:bb:dc:28:e6:80:b4:60:
                    fe:db:0b:97:33:a0:76:b9:64:28:a6:28:23:cb:79:
                    3e:32:84:59:03:74:96:d5:f2:39:41:a7:26:12:11:
                    48:c5:a0:5a:c6:27:be:7b:3c:bb:e6:d7:72:a7:fc:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:33:F8:54:15:15:9E:59:1E:69:67:07:1E:DE:E7:87:5D:A4:41:17
            X509v3 Authority Key Identifier:
                keyid:5C:B9:E8:88:F8:12:53:67:61:55:F4:13:B2:AE:48:4B:47:AF:52:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/5CB9E888F81253676155F413B2AE484B47AF5245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB9E888F81253676155F413B2AE484B47AF5245.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/3138362e3232372e31362e302f32302d3234203d3e203533313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:9e:de:a4:47:c4:63:1e:79:fa:6f:71:19:ab:b6:86:4a:
         fb:3c:28:94:66:fc:b0:18:fb:49:d0:fe:49:19:ab:80:c9:c1:
         14:07:b0:97:34:b0:f0:f9:5a:ee:71:cc:79:82:fc:3d:83:c6:
         3d:c2:df:0b:54:53:31:f5:ee:8e:04:ff:8b:37:da:ee:06:9b:
         94:4f:47:bd:d5:84:ab:8e:89:41:ce:fd:3d:72:8b:04:4d:f6:
         f8:36:a8:71:bc:ba:a3:83:23:00:19:eb:90:28:62:6e:6a:5c:
         d0:8e:36:dd:64:1c:a3:39:09:c4:5e:a4:71:0d:31:d7:aa:fb:
         d3:69:df:91:bf:e5:51:7b:1f:6f:fb:0e:ee:89:05:cd:0f:f1:
         e4:65:1a:1f:75:50:26:8f:ed:d4:4e:38:30:14:d4:2b:cc:89:
         a9:9a:ef:ff:5b:94:c2:64:bc:1c:59:3c:7d:e9:08:84:ee:3d:
         c8:51:4e:c7:5b:7a:2f:32:6c:a7:5a:ca:db:fe:3e:f5:b3:1f:
         c8:3c:d3:04:81:63:78:d9:6e:63:6d:85:5b:d0:1c:da:93:63:
         a6:03:43:fc:d1:ca:b1:42:41:3f:dc:12:27:c1:b5:ba:72:33:
         19:58:71:d5:65:cb:90:4b:34:0b:ae:97:de:a7:f4:d4:2b:43:
         a6:99:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:48:12 2025 by rpki-client