Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa (raw, json)
Hash identifier:          wk1/S7edSw0eGXBXVrf0MvRNREunG9MrmX2ifFlyH1Y=
Subject key identifier:   80:8A:8C:C4:66:AC:36:F5:1B:6A:74:10:55:38:FC:A3:9C:BB:F9:1E
Certificate issuer:       /CN=895319749718933407E89602C41B7343E53F19D4
Certificate serial:       7CF84261ABB28B96B1F3D3E9A883B2A86F922E55
Authority key identifier: 89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa
Signing time:             Mon 15 May 2023 20:29:45 +0000
ROA not before:           Mon 15 May 2023 20:24:45 +0000
ROA not after:            Mon 13 May 2024 20:29:45 +0000
asID:                     263101
IP address blocks:        186.225.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f8:42:61:ab:b2:8b:96:b1:f3:d3:e9:a8:83:b2:a8:6f:92:2e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895319749718933407E89602C41B7343E53F19D4
        Validity
            Not Before: May 15 20:24:45 2023 GMT
            Not After : May 13 20:29:45 2024 GMT
        Subject: CN=808A8CC466AC36F51B6A74105538FCA39CBBF91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:67:fe:8d:a1:d7:a2:43:32:60:b3:dc:59:
                    06:18:b1:c7:ab:fc:98:f5:a1:25:3c:6d:fa:52:81:
                    ca:43:41:04:e1:75:06:24:5b:25:08:b4:7f:17:50:
                    67:25:89:c0:36:2f:9a:fd:03:3e:36:f5:bf:e5:8a:
                    93:1a:13:ba:51:ae:b3:26:68:0f:09:a4:47:4c:e1:
                    df:d3:80:ed:8a:a7:6e:9f:29:bd:61:55:52:21:21:
                    ab:ac:2e:f5:6e:03:6b:48:59:64:3e:33:51:c1:cc:
                    b1:1e:5f:87:20:b6:32:3e:a9:e8:c8:5d:02:74:45:
                    87:02:3a:a3:25:79:5b:fd:e3:af:31:fd:83:ff:59:
                    e6:ac:05:af:96:b0:07:0a:0e:cc:62:e8:b0:bc:dd:
                    f7:95:5b:71:d5:ca:14:13:6a:83:86:3a:09:c3:19:
                    d8:69:0f:4c:2c:77:b9:7a:9b:69:1b:32:b6:55:95:
                    23:63:17:d2:04:40:5e:be:e1:de:eb:c6:2d:43:77:
                    c0:95:26:15:9d:f1:59:99:6f:4e:d0:19:be:d0:2f:
                    f1:87:5b:fa:cf:d4:fc:4a:a6:96:97:39:bf:89:c5:
                    7e:2c:5d:81:fd:27:0b:98:20:fe:00:28:ae:38:27:
                    af:16:12:b0:9a:47:f3:29:3d:b6:4f:1f:d6:96:a5:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:8C:C4:66:AC:36:F5:1B:6A:74:10:55:38:FC:A3:9C:BB:F9:1E
            X509v3 Authority Key Identifier:
                keyid:89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/895319749718933407E89602C41B7343E53F19D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:c0:b4:e8:12:3e:4c:b2:91:d7:3e:12:18:2c:70:7a:03:
         04:0a:7e:eb:05:7d:16:25:72:f2:de:a5:99:69:81:99:a9:dd:
         69:7e:3e:8c:4a:a4:0a:16:2c:25:e4:29:b8:5c:a6:79:46:36:
         89:e3:7f:fd:10:0e:10:4f:a5:80:8b:3e:e2:b2:61:74:a5:71:
         21:58:45:71:60:44:b3:52:4d:84:00:c2:e8:c1:86:2b:1e:ad:
         48:24:3e:83:c1:e2:76:37:6e:e6:91:bb:35:8c:1e:f7:14:88:
         f1:18:d8:b9:10:b9:47:68:23:a8:59:53:3b:dc:67:28:e1:23:
         fb:6c:e1:50:62:0a:c0:77:e0:aa:f7:43:cf:0d:76:b0:2b:8a:
         c9:f3:76:30:28:c1:ab:83:5d:87:ff:6e:7a:7a:de:43:b8:c3:
         26:bd:2a:47:0c:fe:df:ea:03:25:f7:15:26:fa:79:0d:60:c9:
         08:66:0f:46:33:41:d8:10:0b:9a:33:49:ed:0f:c0:47:1d:5b:
         66:82:3a:10:96:7f:98:63:99:3e:01:3f:41:89:56:63:42:50:
         e2:85:bd:31:b8:53:83:aa:4d:5a:51:58:99:66:28:2e:9e:17:
         18:99:e0:aa:9f:40:2f:77:74:45:3d:d2:ca:36:c5:aa:c7:60:
         ef:1f:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:53 2025 by rpki-client