Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136322e302f32332d3233203d3e20323731343039.roa
File:                     3138362e3230392e3136322e302f32332d3233203d3e20323731343039.roa (raw, json)
Hash identifier:          aAukdm1GbFjyReNEK9OVFc6b0I/obx1xgoLzzlkO3aQ=
Subject key identifier:   55:91:09:51:C2:83:A6:41:8F:03:FC:73:E3:29:35:1A:86:75:62:13
Certificate issuer:       /CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Certificate serial:       7B87B38188F9A6BDE3DD0C416F66F79E345C8AD6
Authority key identifier: A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136322e302f32332d3233203d3e20323731343039.roa
Signing time:             Mon 22 May 2023 19:19:33 +0000
ROA not before:           Mon 22 May 2023 19:14:33 +0000
ROA not after:            Mon 20 May 2024 19:19:33 +0000
asID:                     271409
IP address blocks:        186.209.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:87:b3:81:88:f9:a6:bd:e3:dd:0c:41:6f:66:f7:9e:34:5c:8a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
        Validity
            Not Before: May 22 19:14:33 2023 GMT
            Not After : May 20 19:19:33 2024 GMT
        Subject: CN=55910951C283A6418F03FC73E329351A86756213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:bf:29:5a:03:e2:3a:28:a3:86:c9:30:f9:
                    b5:5e:cf:12:8a:1c:69:cb:d3:6e:2a:b9:b9:e0:fb:
                    3f:60:5c:16:52:89:a5:a8:db:c1:03:db:af:46:94:
                    7e:5d:38:cc:c4:d6:45:7e:33:f3:e7:d5:24:6e:44:
                    3c:82:e8:39:a7:ae:ad:39:a2:a3:ee:fb:8f:3d:71:
                    a3:d1:c6:48:62:ca:c4:2e:36:be:50:7f:c6:8b:af:
                    cd:34:46:ec:ed:73:76:f9:a3:5f:01:d3:61:d4:c8:
                    0d:4b:da:6c:6a:73:54:82:09:4c:24:cb:94:b3:6f:
                    a8:e7:3c:41:cb:87:1c:c8:0e:ee:ed:3e:50:f8:18:
                    eb:d5:53:a2:1e:d3:82:a0:e0:07:f7:14:62:e5:af:
                    4d:fe:db:0b:3f:ce:d8:35:de:c5:65:6e:5f:e0:8d:
                    db:95:fb:f1:b5:08:e4:f6:50:ec:c8:46:1c:ae:93:
                    0d:c3:54:63:76:9f:61:9d:b3:c3:78:c8:a8:54:ce:
                    58:0d:c8:9c:0a:ec:04:04:62:a3:6d:0a:d0:da:54:
                    d4:6b:12:bc:8a:64:c0:d1:5a:06:d0:e5:47:3c:17:
                    0a:6b:10:6e:1a:5a:d2:95:d8:06:04:0b:e9:bf:1f:
                    76:57:0d:2c:e5:aa:20:3b:c4:01:23:57:5c:bb:bc:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:91:09:51:C2:83:A6:41:8F:03:FC:73:E3:29:35:1A:86:75:62:13
            X509v3 Authority Key Identifier:
                keyid:A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136322e302f32332d3233203d3e20323731343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:6d:03:c3:11:c5:53:28:5f:33:72:5d:82:a4:70:03:42:85:
         a6:cc:2f:4a:12:71:ce:80:73:c6:bf:e3:62:cd:11:2f:90:bc:
         6b:f3:19:16:50:92:0f:0d:d9:dc:0d:7b:42:b0:7c:56:3e:d9:
         3b:cd:df:91:c3:af:8d:62:5a:bb:14:8a:66:5b:62:53:64:a2:
         97:4a:0a:17:29:45:e7:94:55:cf:af:2e:36:59:56:7a:3e:bf:
         dc:23:07:16:74:49:04:3c:8b:86:25:46:24:29:a1:a3:70:6e:
         37:9c:b2:55:b7:cc:90:db:87:99:5c:e1:55:2a:71:13:3a:05:
         cf:0d:96:4e:ae:62:df:63:37:31:b7:7f:3d:86:3e:c8:67:e7:
         27:1c:26:f9:a9:52:da:87:e0:4f:a5:19:12:23:f0:cf:50:44:
         a1:11:77:2c:91:24:91:df:ce:66:8f:df:76:cb:5e:0d:0c:42:
         20:c4:19:a5:b0:d4:00:6c:fe:a2:78:a0:cd:34:9e:77:8c:1a:
         d7:79:7f:df:e6:a0:44:90:0f:1e:f6:e1:de:99:41:a3:9a:58:
         5a:8e:68:32:34:1c:9f:2c:e4:d4:20:55:4e:7d:3f:c9:2f:aa:
         22:fb:d9:8d:2d:b5:5c:ad:85:9d:02:da:19:57:68:8e:e0:8b:
         cd:62:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:17 2025 by rpki-client