Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235322e302f32322d3232203d3e20323730383139.roa
File:                     3138362e3139352e3235322e302f32322d3232203d3e20323730383139.roa (raw, json)
Hash identifier:          fea0xdFy3CEE4Fy/ToJt/2JWfK3USMTjrdtTHuyZ5BI=
Subject key identifier:   24:D6:D6:A6:38:6E:D4:E5:8D:32:F6:0F:15:34:14:4C:35:46:08:4B
Certificate issuer:       /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial:       5EDE0601223D511DA105FE9BB8E77F09D67A36DC
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235322e302f32322d3232203d3e20323730383139.roa
Signing time:             Tue 10 Dec 2024 13:01:24 +0000
ROA not before:           Tue 10 Dec 2024 12:56:24 +0000
ROA not after:            Tue 09 Dec 2025 13:01:24 +0000
asID:                     270819
IP address blocks:        186.195.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:de:06:01:22:3d:51:1d:a1:05:fe:9b:b8:e7:7f:09:d6:7a:36:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Validity
            Not Before: Dec 10 12:56:24 2024 GMT
            Not After : Dec  9 13:01:24 2025 GMT
        Subject: CN=24D6D6A6386ED4E58D32F60F1534144C3546084B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:b8:98:13:4c:9d:d3:04:e5:cc:c4:cd:81:
                    76:d8:43:aa:cb:e3:58:42:fe:54:14:2b:71:fc:44:
                    6a:f3:85:89:48:b0:42:37:ff:65:13:bb:ff:77:87:
                    f5:d6:e1:cc:11:5a:11:62:f1:34:91:6f:25:4a:de:
                    20:1f:03:9e:e4:51:3f:4f:b1:ee:a8:32:9f:c1:b9:
                    d1:61:d9:f9:fa:47:64:8b:f6:d3:91:fa:11:9c:13:
                    e9:b1:b1:96:ef:9c:e6:19:76:2b:a7:7a:6f:91:f7:
                    47:23:8b:01:24:ea:9b:41:43:09:98:ee:8d:a9:ad:
                    fe:cd:2f:73:61:a8:db:46:f0:d3:d8:e1:c8:c9:df:
                    14:40:5a:14:36:af:24:7e:57:19:32:6b:72:b0:41:
                    55:81:b3:41:53:92:5b:ca:97:50:27:f6:70:0e:87:
                    95:bc:8c:57:bf:e9:0d:02:03:cb:a5:f9:fe:12:0a:
                    7f:8b:c4:88:c5:06:cc:cb:8b:1e:02:13:df:b6:77:
                    c9:34:1f:58:b7:3c:c5:f0:ac:60:e0:cc:6d:85:47:
                    8d:ec:20:c1:fd:e6:62:ac:71:66:a3:8e:68:4a:2e:
                    db:40:19:a9:3d:f1:df:f8:3f:6b:bc:21:39:4c:a1:
                    1c:d7:af:06:a7:17:15:aa:78:91:5c:07:c7:62:ca:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:D6:A6:38:6E:D4:E5:8D:32:F6:0F:15:34:14:4C:35:46:08:4B
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235322e302f32322d3232203d3e20323730383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:58:9c:36:c8:be:ed:9c:53:62:ae:6b:b0:a0:73:2e:d2:e8:
         e1:fc:44:55:94:cb:cf:9f:d9:24:3f:29:b2:9e:34:a3:51:c2:
         cb:23:5d:77:75:d9:04:39:25:6e:9a:da:8f:58:56:7d:ac:ca:
         e3:9a:eb:62:b1:b5:a2:cb:dc:d5:3d:e1:86:05:61:f2:c2:86:
         dc:3d:68:67:56:5c:d7:20:02:a2:cc:fc:df:25:1a:92:6c:5a:
         08:ed:5e:45:8f:df:bb:dd:0b:c7:81:a1:11:ba:16:08:a8:b5:
         4b:3a:a1:ed:ac:9b:22:37:47:2a:bd:8a:d8:f9:f6:53:ee:d7:
         8b:04:b6:d0:88:56:ef:49:18:e7:10:b4:3c:1e:7f:4c:c2:e1:
         78:87:51:4a:f7:63:46:0b:c9:ae:50:e4:3d:22:35:d3:85:04:
         07:bb:c8:39:81:8a:11:a6:6a:3f:13:45:cf:94:59:c9:3c:a0:
         97:76:e4:da:9e:8e:9f:6b:4d:77:6e:c5:57:b3:9b:5a:aa:40:
         04:35:86:1b:66:13:02:52:41:33:91:dc:aa:c8:c1:12:c6:81:
         eb:06:ee:43:42:2c:ff:53:b8:0c:24:83:7c:f5:a9:46:14:9e:
         c5:81:e4:8b:76:0c:54:0b:e4:22:95:2a:f9:07:64:47:1e:7c:
         64:28:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:59:39 2025 by rpki-client