Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3138362e3233332e3232372e302f32342d3234203d3e203533323131.roa
File:                     3138362e3233332e3232372e302f32342d3234203d3e203533323131.roa (raw, json)
Hash identifier:          DpbltXAhWfK7oNRG6OLG+U9GFOKJAM3kMXDI8EBCJyg=
Subject key identifier:   2A:2D:C6:CA:A7:C5:CF:90:FC:6C:20:A0:CF:AA:3F:9A:73:42:18:00
Certificate issuer:       /CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
Certificate serial:       443B1180038FA96283A3AF58308B787EF84E3A1F
Authority key identifier: B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3138362e3233332e3232372e302f32342d3234203d3e203533323131.roa
Signing time:             Thu 05 May 2022 02:15:57 +0000
ROA not before:           Thu 05 May 2022 02:10:57 +0000
ROA not after:            Thu 04 May 2023 02:15:57 +0000
asID:                     53211
IP address blocks:        186.233.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3b:11:80:03:8f:a9:62:83:a3:af:58:30:8b:78:7e:f8:4e:3a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
        Validity
            Not Before: May  5 02:10:57 2022 GMT
            Not After : May  4 02:15:57 2023 GMT
        Subject: CN=2A2DC6CAA7C5CF90FC6C20A0CFAA3F9A73421800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:f8:30:1b:18:21:aa:61:93:2d:a2:ef:5f:
                    01:46:de:2d:75:40:52:e7:2e:3e:ec:8f:90:6f:4b:
                    d9:25:7a:91:2d:24:bf:5f:55:19:80:75:9c:d6:4d:
                    a1:dc:ab:1d:43:7a:e0:61:7a:9c:66:df:12:4f:45:
                    d2:3f:80:f8:33:48:58:06:db:2a:c8:d2:ed:ce:97:
                    b2:b0:77:c7:2f:39:a3:21:e0:50:dc:bc:bf:8e:0f:
                    19:ee:95:5a:a2:1a:09:93:b2:8f:ba:c1:88:c4:30:
                    ee:1d:8c:9e:30:62:5f:3d:66:ec:e4:26:de:70:02:
                    32:56:a1:8e:02:98:68:9d:7c:b8:72:ca:7c:c4:bc:
                    50:d5:2a:7a:e1:a6:4f:8e:66:0d:71:a6:c6:d1:23:
                    58:c1:d4:4e:f8:ab:06:bf:0a:5a:cf:4d:9e:2d:f5:
                    13:43:9c:f3:4c:fd:dc:17:27:98:a6:23:60:63:e7:
                    1e:70:cb:54:0d:65:42:fa:36:56:87:b0:b2:eb:f3:
                    11:5f:f6:0d:d8:00:7a:fb:e0:18:76:4c:3d:8d:6b:
                    29:e1:68:3f:1d:c1:27:41:c3:95:54:a6:f8:3d:c7:
                    a7:fd:19:94:0b:7b:8c:a5:f2:b7:0b:b2:87:04:fe:
                    9e:14:1d:11:d3:2b:c5:53:8f:f1:30:c6:48:81:e8:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:C6:CA:A7:C5:CF:90:FC:6C:20:A0:CF:AA:3F:9A:73:42:18:00
            X509v3 Authority Key Identifier:
                keyid:B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3138362e3233332e3232372e302f32342d3234203d3e203533323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:28:91:7c:4a:b6:70:98:a6:e0:26:54:e7:6f:52:ac:32:76:
         cc:4d:61:49:63:21:85:63:9a:30:71:06:c5:5e:4f:0e:80:aa:
         96:32:1e:d0:dd:5c:c9:89:84:92:05:fe:27:f3:ba:06:f2:01:
         3d:c3:70:dd:cd:ba:c5:cd:75:61:03:4a:85:20:d9:c2:96:cc:
         1e:5b:23:9c:55:50:89:92:4c:7b:89:a1:e1:a1:01:ca:4d:2b:
         bc:6e:a7:4a:5c:63:22:fb:cc:d9:0f:67:18:85:a5:9e:f1:5d:
         7d:20:b6:74:88:aa:6f:00:6b:9a:84:2c:00:ac:0c:87:98:cb:
         e4:9e:53:12:65:2d:c8:5c:41:be:0f:73:f8:f7:32:42:2d:93:
         42:2c:ea:85:a1:e7:49:46:14:b8:c6:76:17:e5:b8:09:cb:5c:
         78:ab:bf:eb:fb:9e:33:39:f8:a8:28:34:ad:13:2d:6a:23:80:
         78:6f:d3:5c:98:c8:11:29:67:28:44:61:6c:41:35:ca:be:b3:
         f6:62:f6:0c:6e:13:b1:90:13:68:2d:ce:d4:80:a1:d5:a1:ca:
         91:65:85:c4:d6:12:c0:45:2b:c7:22:01:e0:90:27:96:4a:d2:
         f2:db:79:d5:ba:0e:75:8e:2c:c4:d4:ad:67:52:e3:78:4d:48:
         92:62:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:09 2025 by rpki-client