Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235342e302f32332d3233203d3e20323730383139.roa
File:                     3138362e3139352e3235342e302f32332d3233203d3e20323730383139.roa (raw, json)
Hash identifier:          Nnaan67AIHDxwlEhyamKn8JS59rmxmt7OKRUybjssRs=
Subject key identifier:   27:C7:45:D4:E4:98:81:31:D7:24:8C:B5:E8:F9:95:FC:07:81:45:02
Certificate issuer:       /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial:       211A22A469A9D6EFD89C2770E71270DAD9809590
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235342e302f32332d3233203d3e20323730383139.roa
Signing time:             Tue 10 Dec 2024 13:01:56 +0000
ROA not before:           Tue 10 Dec 2024 12:56:56 +0000
ROA not after:            Tue 09 Dec 2025 13:01:56 +0000
asID:                     270819
IP address blocks:        186.195.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1a:22:a4:69:a9:d6:ef:d8:9c:27:70:e7:12:70:da:d9:80:95:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Validity
            Not Before: Dec 10 12:56:56 2024 GMT
            Not After : Dec  9 13:01:56 2025 GMT
        Subject: CN=27C745D4E4988131D7248CB5E8F995FC07814502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:a3:12:0c:4f:f9:04:26:9e:76:b4:e7:bd:
                    b4:42:68:58:55:aa:89:55:ff:e9:89:fd:c6:a9:6e:
                    40:5b:d4:3a:e3:00:19:77:08:85:80:54:ba:87:e6:
                    a9:9b:70:2a:07:b5:ac:00:1a:76:77:42:ab:bc:7c:
                    27:3f:28:c5:fe:da:5c:f4:6f:a6:e2:59:1e:99:09:
                    e4:10:40:28:50:65:fa:4a:d3:95:1e:fe:d2:52:7b:
                    cf:c7:fb:7d:5d:2c:72:7b:60:2b:ab:a2:99:53:e4:
                    30:ed:0b:f1:27:68:05:10:f7:9f:3b:79:1f:19:e6:
                    b8:dd:57:b9:09:c3:92:94:10:ef:e4:dc:47:b0:c3:
                    ab:63:ed:3e:43:16:2f:ba:55:51:b8:00:61:eb:a4:
                    0d:db:1d:fc:15:93:62:8e:f7:de:00:fa:01:a6:20:
                    43:07:4b:24:64:43:07:15:5d:fc:91:5e:19:20:16:
                    72:24:e9:e1:e7:6b:b5:1a:d3:16:12:a9:e0:9d:e7:
                    3e:86:5d:65:64:13:7e:d2:73:b7:2b:f2:e6:5a:d1:
                    96:9a:f1:f4:f3:64:2c:a7:8a:92:06:3e:3a:72:d9:
                    8c:46:cf:bd:74:48:02:c1:05:03:36:d9:d6:4b:95:
                    d6:be:c3:71:76:e1:fe:db:0a:2a:dc:09:a3:72:77:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C7:45:D4:E4:98:81:31:D7:24:8C:B5:E8:F9:95:FC:07:81:45:02
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235342e302f32332d3233203d3e20323730383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:a2:bb:f0:d0:de:99:12:c6:55:90:eb:d4:56:0c:37:72:79:
         43:85:9b:7b:f1:ec:f9:10:fb:6a:35:a2:dc:00:b3:18:ee:60:
         82:8b:50:c3:e6:35:a6:a9:44:2d:0b:19:19:e3:cf:10:c9:57:
         67:01:16:9f:a5:02:94:50:e2:4e:bb:42:3b:dc:3c:85:b4:28:
         a5:9b:09:9f:0e:20:2d:7f:18:54:65:0b:9c:2f:aa:e0:ce:7d:
         66:ed:72:4f:12:a8:d4:9a:1f:3e:fd:bc:45:04:79:4e:86:7c:
         9a:fb:a0:85:27:d5:da:77:af:2a:9b:ec:b9:b0:e4:32:e7:c2:
         9b:16:af:eb:fd:d8:a3:19:de:59:9b:f0:08:de:88:54:93:c1:
         1a:cf:87:44:64:59:73:2b:ab:4e:25:4b:f4:40:dd:9e:0d:ac:
         cd:28:4e:ee:c5:1e:e1:59:d4:bd:3c:5e:cd:c0:8c:6e:cc:85:
         f8:21:d1:ad:16:80:86:3c:b1:cb:4e:8a:d6:ae:58:4a:50:74:
         b1:01:62:16:83:f2:20:7c:86:51:bf:b8:52:fd:4c:a2:1b:12:
         a1:bf:d3:51:87:fd:4e:60:cd:5c:95:8e:8d:2f:3c:bb:ff:cd:
         d0:d1:7b:56:1f:7e:c6:58:ce:c1:e2:f5:55:6d:e3:a8:62:1b:
         c0:ee:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:59:42 2025 by rpki-client