Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32332d3233203d3e20323731343039.roa
File:                     3138362e3230392e3136302e302f32332d3233203d3e20323731343039.roa (raw, json)
Hash identifier:          kSDuVTSwsoBok6OZ84jeG0aFjaiPvWlhWGihVtJPJIc=
Subject key identifier:   CA:34:CB:DC:4B:90:A1:AF:C0:14:06:A2:B0:69:1C:57:41:0B:BE:88
Certificate issuer:       /CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Certificate serial:       6951883D27F57A56384C88A70A88901D17B1F34F
Authority key identifier: A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32332d3233203d3e20323731343039.roa
Signing time:             Mon 22 May 2023 19:19:32 +0000
ROA not before:           Mon 22 May 2023 19:14:32 +0000
ROA not after:            Mon 20 May 2024 19:19:32 +0000
asID:                     271409
IP address blocks:        186.209.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:51:88:3d:27:f5:7a:56:38:4c:88:a7:0a:88:90:1d:17:b1:f3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
        Validity
            Not Before: May 22 19:14:32 2023 GMT
            Not After : May 20 19:19:32 2024 GMT
        Subject: CN=CA34CBDC4B90A1AFC01406A2B0691C57410BBE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:39:36:9c:6b:e5:1e:28:cb:c1:af:34:44:
                    8a:77:bf:c8:41:bd:af:71:41:76:db:d0:a7:bb:9a:
                    67:9a:90:ed:5a:01:73:57:26:81:85:84:dd:5b:f1:
                    e8:cb:57:9d:f3:04:29:03:a2:28:4a:6a:6a:2a:b3:
                    ac:49:bd:f3:26:1f:ff:d7:c6:6d:e8:02:4e:b9:58:
                    ac:7e:66:06:48:b6:7a:70:f7:5d:5e:72:35:fa:7c:
                    4e:b9:ed:e0:f9:f3:cd:11:a9:bc:9f:8b:b9:9c:9b:
                    c2:fd:af:e5:a2:2f:2a:27:7d:29:90:de:97:ee:fa:
                    cf:4c:ae:a2:da:0e:08:44:ea:7f:11:b1:c5:23:06:
                    e3:5a:97:78:ae:b1:1c:e0:27:1a:49:48:d9:51:c7:
                    83:ce:e6:38:35:cd:95:1b:84:34:27:0f:c9:3b:32:
                    1d:7e:10:b7:63:fc:48:a5:21:ca:b3:ef:5c:2b:17:
                    8f:33:fe:f6:e7:0f:cb:b8:7f:ae:3f:69:94:21:49:
                    44:63:3f:8c:d0:4e:18:61:88:c1:f0:97:95:e3:e4:
                    60:6f:61:f6:13:f0:01:b9:4f:96:1e:ad:85:e1:f5:
                    7f:b2:32:59:38:53:01:db:72:09:0e:31:4c:55:a1:
                    1f:e1:de:f8:f8:0b:ea:62:cf:82:70:46:7a:4c:84:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:CB:DC:4B:90:A1:AF:C0:14:06:A2:B0:69:1C:57:41:0B:BE:88
            X509v3 Authority Key Identifier:
                keyid:A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32332d3233203d3e20323731343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:31:25:da:75:03:43:9b:ed:e3:53:25:88:00:02:64:9f:b6:
         8e:91:cd:61:a5:f4:75:d6:aa:13:30:45:d2:4b:47:4a:0f:22:
         11:b5:5c:47:61:aa:e3:a5:47:7c:1d:f1:e7:d2:d3:24:ae:f8:
         e8:53:b9:b1:94:1b:a5:76:0a:79:55:a1:d1:d9:d6:34:f0:7f:
         cc:32:9c:0d:92:ff:98:b4:b9:f5:f0:d2:21:b1:33:2b:28:7b:
         fd:1d:d3:75:e2:f9:ac:49:0b:7b:df:95:dc:42:9a:80:a5:05:
         e8:73:0e:42:a3:bf:a4:7c:51:69:a9:2f:1d:8d:59:f9:e5:2e:
         a1:65:bc:f4:fe:f4:e0:89:9d:b0:bc:f8:43:b3:39:19:07:c6:
         37:3c:bd:a7:f1:1a:c3:7b:82:b6:7c:08:13:aa:de:67:d2:da:
         e8:aa:8f:59:f0:08:84:63:a9:12:2a:30:8e:07:41:eb:2e:d2:
         07:62:e1:3a:d3:aa:d6:98:76:4c:b6:d7:bf:fb:67:a7:eb:b9:
         31:2c:de:99:4e:14:2f:1d:a9:55:db:71:eb:a5:f1:65:74:b5:
         cb:fc:89:7e:28:22:9d:0e:00:c7:9a:38:06:c9:44:46:fe:21:
         cb:70:82:92:02:fa:36:6f:39:3c:70:73:75:9c:06:19:e3:f1:
         36:66:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:51 2025 by rpki-client