Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3230382e302f32312d3231203d3e20323632383139.roa
File:                     3138362e3235302e3230382e302f32312d3231203d3e20323632383139.roa (raw, json)
Hash identifier:          3ECVnn8eNs9pCG4OyyztMhfUm6Ise4Yw7avP16Jze/I=
Subject key identifier:   D7:6B:6F:0C:F1:17:48:00:F6:82:F2:6E:8D:5C:CE:C0:94:7F:DF:53
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       7C4CDA9BEEC590829AC480487A1C04DC7392CD5E
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3230382e302f32312d3231203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:01 +0000
ROA not before:           Wed 09 Nov 2022 20:06:01 +0000
ROA not after:            Wed 08 Nov 2023 20:11:01 +0000
asID:                     262819
IP address blocks:        186.250.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4c:da:9b:ee:c5:90:82:9a:c4:80:48:7a:1c:04:dc:73:92:cd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:01 2022 GMT
            Not After : Nov  8 20:11:01 2023 GMT
        Subject: CN=D76B6F0CF1174800F682F26E8D5CCEC0947FDF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:00:45:f3:82:85:bf:b6:12:06:13:8b:0b:
                    31:7c:65:24:03:39:0a:74:19:46:20:80:51:f0:90:
                    a1:57:78:04:72:cc:41:23:55:f4:9c:e6:2a:b2:87:
                    be:16:4f:e5:30:d1:57:cf:ec:77:f1:ed:cb:f7:c0:
                    15:36:d1:23:69:3a:cd:9b:10:97:f5:62:f6:0c:69:
                    ce:04:1e:27:bd:ec:ad:b5:40:36:93:3a:51:a8:9c:
                    9e:99:1c:32:41:1b:3e:55:c3:53:85:f0:ec:38:db:
                    9e:2e:a5:93:8d:66:94:9d:8f:83:e3:0a:f3:a4:42:
                    a0:89:bb:2e:66:2c:83:1b:5c:80:12:4f:79:56:07:
                    96:1d:01:c0:95:6f:bf:2a:87:6a:3b:43:fb:af:7e:
                    6b:a1:64:5f:69:85:bf:0a:05:ea:32:7d:16:b5:e8:
                    67:61:83:df:fd:6e:b2:f9:7d:2e:dc:0c:df:4a:c4:
                    36:86:62:0b:05:a2:7f:49:dc:e5:07:c8:0f:dd:19:
                    9f:82:40:fc:14:be:44:f9:b5:c0:60:ac:3a:06:3b:
                    38:d5:32:46:41:ff:39:55:19:05:5e:a1:1f:d9:64:
                    3f:2a:a0:8e:7e:69:96:9a:2a:59:6b:4a:72:b3:10:
                    7a:58:cd:1c:38:23:85:48:d8:ac:fc:cc:bb:bb:2b:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6B:6F:0C:F1:17:48:00:F6:82:F2:6E:8D:5C:CE:C0:94:7F:DF:53
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3138362e3235302e3230382e302f32312d3231203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:79:c4:ad:77:b1:81:17:7d:a9:46:9e:3d:1c:ab:a5:1d:
         e1:32:46:dd:5a:b7:70:c3:35:2c:25:61:e1:98:17:e7:f2:6b:
         e2:59:fa:0d:4a:c1:f1:2a:d9:3e:0f:6d:34:e2:7c:38:a6:c9:
         1d:64:eb:a8:c1:5e:f9:e1:e3:4b:9d:78:cf:72:55:01:8f:88:
         61:35:1e:fb:18:ae:ea:47:4f:0c:10:6d:92:c6:a7:a9:aa:27:
         75:d6:1f:08:d8:0e:89:9b:be:7c:bd:cc:84:0a:de:b8:ed:9e:
         e3:cd:8f:29:9b:46:51:0c:bb:1b:0e:22:5c:2f:a7:bf:02:d4:
         86:80:f7:51:2a:2e:1b:0e:ab:33:fa:13:c9:6c:a3:6a:2d:0a:
         ec:83:1e:e7:52:c1:90:57:94:e4:b1:c5:5c:22:ff:b5:9c:64:
         e0:ee:9f:ff:4a:57:f9:ec:33:da:07:04:24:f6:81:02:4b:66:
         2c:20:65:fc:58:f0:6a:5c:f7:6a:4d:f9:71:e8:a9:cd:2a:f8:
         7a:af:9c:c8:cf:96:e2:72:51:03:f0:5b:fd:44:72:8d:29:bd:
         2d:a0:9c:7c:8b:ca:b6:f3:09:1b:c5:c9:26:9a:47:71:f7:5b:
         b2:63:4e:93:c3:80:08:d7:a7:f9:65:a2:2b:3c:9f:e0:32:a1:
         01:f3:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:10:05 2025 by rpki-client