Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235352e302f32342d3234203d3e20323730383139.roa
File:                     3138362e3139352e3235352e302f32342d3234203d3e20323730383139.roa (raw, json)
Hash identifier:          kVaD3YOEKsFh0DfjkRNMDZTQ0wFb0V0htUrMyZowgVE=
Subject key identifier:   06:CD:BE:2E:F5:45:79:AE:DD:A3:7D:8D:5D:A7:3A:53:E1:43:A2:49
Certificate issuer:       /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial:       5F6C3F57EB38C5DDF8FA311798A18697C64621D7
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235352e302f32342d3234203d3e20323730383139.roa
Signing time:             Tue 10 Dec 2024 13:02:10 +0000
ROA not before:           Tue 10 Dec 2024 12:57:10 +0000
ROA not after:            Tue 09 Dec 2025 13:02:10 +0000
asID:                     270819
IP address blocks:        186.195.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6c:3f:57:eb:38:c5:dd:f8:fa:31:17:98:a1:86:97:c6:46:21:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
        Validity
            Not Before: Dec 10 12:57:10 2024 GMT
            Not After : Dec  9 13:02:10 2025 GMT
        Subject: CN=06CDBE2EF54579AEDDA37D8D5DA73A53E143A249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:e1:52:d8:3a:29:a3:3e:a2:41:84:df:38:
                    ba:60:dd:d7:fc:ff:3c:6f:fd:51:2f:25:67:97:14:
                    8b:49:ff:b8:6d:1b:46:89:0e:15:4c:15:d6:34:8a:
                    99:ac:17:66:98:fe:c3:f8:da:cb:83:ea:f5:56:5a:
                    48:bd:d4:2c:91:89:3d:74:c4:14:d1:29:24:ba:1c:
                    f3:8c:bf:4f:aa:43:7d:3a:92:b4:e0:e3:5c:04:e2:
                    72:eb:2a:af:85:15:15:1c:ef:38:d0:95:60:74:be:
                    6d:f4:fb:1d:81:1c:ff:f8:0f:63:ad:90:ce:66:2c:
                    18:e0:ff:3e:5c:f5:4a:1d:de:b5:e8:10:e0:22:23:
                    8b:d9:df:2e:f9:f0:b2:86:ba:30:46:f4:23:82:6d:
                    f1:f7:18:c6:b4:59:3b:38:85:31:33:68:6c:f0:99:
                    3f:0f:e6:13:99:55:9d:d1:2f:fd:d5:37:23:c0:a0:
                    47:4c:85:94:67:11:65:8e:0d:b6:2b:2d:25:d7:e6:
                    1b:be:35:30:de:c4:bd:58:63:a6:87:ed:d5:8e:f2:
                    92:77:17:09:cc:e5:e8:d0:6b:79:a6:cf:45:b3:3e:
                    c9:26:87:ec:f9:ed:e4:c5:c3:c1:69:b5:f8:1c:16:
                    a2:64:02:d2:75:13:1a:5b:27:c6:db:d6:36:78:df:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:BE:2E:F5:45:79:AE:DD:A3:7D:8D:5D:A7:3A:53:E1:43:A2:49
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/3138362e3139352e3235352e302f32342d3234203d3e20323730383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:60:97:06:b3:9c:90:c5:59:72:4c:ac:7b:92:5d:c3:f3:ce:
         0d:4e:a2:de:06:7f:94:3a:32:d0:be:e7:a3:1c:ea:14:41:40:
         32:32:c3:a8:5d:30:9b:b0:ad:cd:3b:b0:11:9e:71:6a:05:a6:
         19:cf:1f:b1:03:f1:eb:6d:de:ba:77:c4:89:8e:85:e7:25:bf:
         3f:17:df:c5:76:b9:ff:ed:7a:e4:3c:c3:59:59:bc:86:94:ed:
         aa:a2:d7:6b:bd:bc:62:96:6a:f4:41:c5:62:dd:10:fa:c3:17:
         e5:52:e1:ef:51:b2:a8:34:f5:ba:5f:2e:7a:f1:36:2c:dc:fc:
         9f:e4:d0:44:03:99:ae:b7:db:69:a8:04:ef:0f:fe:ec:e4:04:
         05:be:c7:7b:3c:87:a1:79:2c:fe:35:d5:ae:b4:4e:6a:40:94:
         80:a8:19:a0:b7:40:cf:5a:39:d6:0d:cb:53:5f:0d:27:4d:1b:
         46:2a:53:7e:57:c1:8c:9f:6b:06:4c:b9:ef:8a:32:e9:6a:90:
         8c:db:ae:60:8d:56:9a:b6:c4:7f:81:2d:3d:94:75:61:95:fe:
         80:a3:ee:5c:56:a7:49:bf:9e:31:0c:18:f0:ce:11:44:b2:c8:
         b9:0a:e1:d5:45:bc:49:c7:51:1f:82:37:29:c7:02:13:e7:4f:
         28:2c:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:04:57 2025 by rpki-client