Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235322e302f32322d3332203d3e20323730383139.roa
File:                     3138362e3139352e3235322e302f32322d3332203d3e20323730383139.roa (raw, json)
Hash identifier:          b3sm2Yu1ws4D22z5Z3DapzrmhHMvujyQZkC2bvfDke4=
Subject key identifier:   A9:13:88:CA:82:D4:12:9D:27:29:80:34:00:3B:4A:AC:C8:BF:4B:05
Certificate issuer:       /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial:       53AF0F3AEA4E9EB6F11F286398EDD07DA5362581
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235322e302f32322d3332203d3e20323730383139.roa
Signing time:             Wed 11 Dec 2024 16:54:09 +0000
ROA not before:           Wed 11 Dec 2024 16:49:09 +0000
ROA not after:            Wed 10 Dec 2025 16:54:09 +0000
asID:                     270819
IP address blocks:        186.195.252.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:af:0f:3a:ea:4e:9e:b6:f1:1f:28:63:98:ed:d0:7d:a5:36:25:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Validity
            Not Before: Dec 11 16:49:09 2024 GMT
            Not After : Dec 10 16:54:09 2025 GMT
        Subject: CN=A91388CA82D4129D27298034003B4AACC8BF4B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:d7:75:18:29:ef:e4:ad:9b:6c:57:82:61:
                    be:9e:22:36:62:c6:40:58:a9:6b:e5:3a:09:ed:b3:
                    92:10:86:ff:a8:8b:25:c5:d4:cd:9a:42:f5:7f:36:
                    b1:b2:83:58:81:64:ad:15:93:2f:ef:1a:cb:76:e4:
                    03:53:ac:c6:ec:e9:94:04:5d:65:7a:5c:55:61:4b:
                    fd:99:e9:79:a0:5a:8c:49:b6:e4:c5:10:d2:e1:31:
                    36:7b:2a:b7:df:a3:69:d5:d7:c4:e3:30:a6:fe:ef:
                    af:7d:28:da:81:bd:8d:fd:3b:4b:76:dc:97:37:b3:
                    93:8c:a7:4d:25:69:a5:2a:57:22:00:3a:1a:47:06:
                    5b:3d:9a:a7:1c:c8:3a:97:91:24:06:32:90:de:31:
                    1f:72:e0:39:aa:bd:d4:ca:34:89:be:b4:13:67:9f:
                    6f:d3:a5:8f:0a:80:20:b1:2b:cf:9f:3a:7d:22:5b:
                    fa:80:07:ea:74:bd:52:53:79:a0:f1:42:03:b4:db:
                    9c:1f:02:09:af:8c:fd:9a:03:c2:6f:1b:29:c9:f6:
                    d3:c2:01:7c:a6:08:71:13:1b:81:ac:a3:fe:1f:b5:
                    35:08:3c:95:31:c5:89:8c:83:42:94:52:94:06:e7:
                    10:68:d3:f4:0f:a0:51:a0:47:97:cd:88:e1:03:ba:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:13:88:CA:82:D4:12:9D:27:29:80:34:00:3B:4A:AC:C8:BF:4B:05
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235322e302f32322d3332203d3e20323730383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:de:f3:09:21:4e:2d:08:db:0d:14:a8:06:62:99:68:a5:d7:
         67:b3:b8:2f:9e:57:db:bd:39:ce:84:25:da:9b:5a:43:78:42:
         89:a7:a2:3f:8f:7e:2c:bb:b7:a6:9f:48:43:8e:79:a9:fa:2a:
         26:85:fc:ac:b5:2b:a2:b6:ae:35:dd:2b:c2:76:1d:c8:2b:e9:
         96:d5:95:ef:ec:13:e3:3a:1f:1b:e0:de:c0:6c:9b:c0:cd:4f:
         e2:4b:dc:21:33:55:9d:6e:81:b5:d0:1d:44:1b:50:65:11:09:
         19:98:56:0a:ea:6a:b9:13:9f:dc:67:5e:77:8e:24:ed:22:9c:
         40:a4:57:d5:5b:0d:0e:35:2b:60:aa:55:09:85:2e:a6:d1:c9:
         7c:b7:16:0f:83:b7:a8:b9:38:c8:a9:35:89:f2:99:85:6e:80:
         be:24:db:f3:4b:b5:c9:9d:83:ff:81:2b:03:b0:c5:9b:a9:36:
         d3:31:d6:17:a8:53:b4:7b:f2:ad:1c:27:af:76:eb:86:56:05:
         aa:83:51:9a:b2:94:63:c3:50:86:b5:3b:2d:e3:7c:05:04:d9:
         96:ea:33:4e:e9:47:ce:72:a7:a5:17:27:6a:c2:97:47:6d:bd:
         b7:a7:7b:a0:97:e2:fc:18:90:e3:9a:35:e4:d5:26:41:d5:98:
         e3:35:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:45 2025 by rpki-client