Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa (raw, json)
Hash identifier:          b6WLGooYvm+XOLFL21qhcaXsyGCNpfGSpbKfPfLDJBo=
Subject key identifier:   83:F2:CD:13:8D:55:9C:48:A5:63:C3:CB:36:53:1F:F2:38:BD:1C:22
Certificate issuer:       /CN=895319749718933407E89602C41B7343E53F19D4
Certificate serial:       227F879E051D5B4C09DE0E4B37C99E00E7DBB3E7
Authority key identifier: 89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa
Signing time:             Mon 15 May 2023 20:29:43 +0000
ROA not before:           Mon 15 May 2023 20:24:43 +0000
ROA not after:            Mon 13 May 2024 20:29:43 +0000
asID:                     263101
IP address blocks:        186.225.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7f:87:9e:05:1d:5b:4c:09:de:0e:4b:37:c9:9e:00:e7:db:b3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895319749718933407E89602C41B7343E53F19D4
        Validity
            Not Before: May 15 20:24:43 2023 GMT
            Not After : May 13 20:29:43 2024 GMT
        Subject: CN=83F2CD138D559C48A563C3CB36531FF238BD1C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:e0:8d:ff:52:18:61:b4:cb:31:3d:80:48:
                    fb:08:d5:80:f5:09:e8:5a:39:0f:bb:98:65:9b:6a:
                    9d:3c:38:70:8d:22:95:a2:50:10:5c:3d:01:56:7f:
                    99:c8:a9:91:a7:17:0d:7a:9f:a6:29:ee:f1:69:c9:
                    23:37:2d:49:11:95:d5:85:1f:a5:7a:35:b1:da:b6:
                    1a:39:7c:cc:c5:d2:7b:d5:3a:88:a0:a4:f4:c2:18:
                    1b:4e:c1:46:5d:b2:73:1f:eb:7f:9c:a0:ab:43:11:
                    a9:27:1f:d0:65:86:03:80:6f:9e:90:2b:11:a6:93:
                    f9:d2:f0:a9:06:dd:53:2b:af:fb:84:03:d0:ba:cd:
                    f4:b3:97:80:27:7f:3c:51:33:43:f8:4a:75:20:03:
                    32:11:be:75:3e:5c:fa:6e:aa:1a:f3:ba:5d:55:a0:
                    7d:4d:c6:f5:ed:99:ab:b4:3f:b5:e5:e0:26:c1:9f:
                    7c:73:9f:bd:89:22:b4:a4:15:d0:17:96:83:c0:67:
                    d0:53:27:0f:89:9b:e2:58:4a:58:33:f6:cf:a4:1e:
                    c4:dc:92:af:b4:16:51:8a:30:9f:2a:e5:b6:d2:e7:
                    05:75:42:87:09:17:4f:26:d6:dc:51:a7:89:7b:f2:
                    b2:54:8b:f7:23:1b:fb:5a:cf:71:e3:c7:a9:7d:40:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:CD:13:8D:55:9C:48:A5:63:C3:CB:36:53:1F:F2:38:BD:1C:22
            X509v3 Authority Key Identifier:
                keyid:89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/895319749718933407E89602C41B7343E53F19D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:a2:8d:54:0a:d2:11:49:04:ca:c1:83:d9:c1:e4:9c:b5:
         f0:66:e8:02:b4:3d:d8:c8:ea:1e:06:d5:02:43:b6:2a:d2:e6:
         f0:5a:a2:1f:54:1d:6b:58:3b:e6:67:ac:7d:b9:c5:b2:41:dc:
         a1:da:3b:12:e2:57:d8:14:c0:0c:8b:5c:a8:00:92:32:88:8f:
         6e:96:f4:0f:25:af:91:2f:aa:06:e5:7c:d3:ff:9e:6c:94:93:
         64:3a:77:4f:13:9e:3b:ff:50:77:02:56:d2:0e:f9:3d:4e:9d:
         33:50:e5:d2:a6:c4:b0:3e:81:36:95:51:c1:e1:a0:82:3c:77:
         ba:aa:fa:cd:e5:2e:db:cd:e8:49:4c:ec:26:e9:76:b5:3d:d0:
         65:33:42:a3:f7:74:65:b3:fa:1e:30:a3:6e:75:92:6f:c3:3e:
         8a:0a:cb:27:62:3d:f6:12:d4:b1:89:ab:a4:38:d4:ed:7d:42:
         67:8a:81:15:71:35:77:de:94:03:46:58:4e:47:bc:73:7e:0c:
         af:a8:ce:f5:cc:af:f5:f7:e0:34:55:ff:ed:13:28:55:57:e6:
         6b:f2:4f:18:8a:13:a6:60:ab:43:12:14:49:7d:f1:a8:31:67:
         f7:5d:73:ce:ce:b5:88:a8:1e:4c:61:73:81:e6:3f:45:d2:99:
         14:a7:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:16 2025 by rpki-client