Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231312e302f32342d3234203d3e20323633303038.roa
File:                     3138362e3232362e3231312e302f32342d3234203d3e20323633303038.roa (raw, json)
Hash identifier:          290X7pwhK8YAujmS7VV6IExLy2n1DQErniMfzUXOHsU=
Subject key identifier:   D0:D2:B8:BC:87:8E:52:07:3A:7C:79:36:3C:EA:B8:E1:03:36:6F:84
Certificate issuer:       /CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
Certificate serial:       3C6E349A440240625C3E2220BA1A63FA4AECD308
Authority key identifier: 34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231312e302f32342d3234203d3e20323633303038.roa
Signing time:             Wed 04 Dec 2024 13:30:41 +0000
ROA not before:           Wed 04 Dec 2024 13:25:41 +0000
ROA not after:            Wed 03 Dec 2025 13:30:41 +0000
asID:                     263008
IP address blocks:        186.226.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6e:34:9a:44:02:40:62:5c:3e:22:20:ba:1a:63:fa:4a:ec:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
        Validity
            Not Before: Dec  4 13:25:41 2024 GMT
            Not After : Dec  3 13:30:41 2025 GMT
        Subject: CN=D0D2B8BC878E52073A7C79363CEAB8E103366F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:22:4c:ae:1b:d7:d6:42:5d:2a:70:d0:64:
                    09:fc:5b:4d:09:c3:3d:5c:97:b1:89:60:10:30:e1:
                    66:1b:6c:e1:fd:3f:27:38:41:7b:b1:12:be:af:b3:
                    48:09:38:4d:aa:af:4e:ef:43:90:e3:63:4f:07:93:
                    e7:57:b9:63:31:4b:ec:57:f5:3f:f8:2e:6d:b4:79:
                    a3:73:66:30:b2:7c:ff:7b:4e:90:73:f6:14:01:d1:
                    4f:cf:4b:80:8f:72:e5:29:1c:0d:f8:81:87:4e:07:
                    6a:ca:a9:a8:9c:96:0a:d1:ba:4f:70:66:ec:42:c8:
                    f4:80:10:12:03:47:15:32:fe:f8:9c:ce:e0:df:d6:
                    bf:fe:66:79:c6:b8:0e:eb:d0:df:c3:a9:bd:bd:fe:
                    6c:6a:6a:ff:2a:45:fd:e0:c9:40:c5:4b:96:98:15:
                    e3:a4:28:46:de:6b:bc:84:64:41:d1:29:95:4b:7e:
                    24:3c:44:ee:2f:3e:24:63:27:00:62:cf:73:55:35:
                    3d:69:43:31:d7:f6:7c:88:d3:9c:4b:1b:0e:41:6a:
                    3d:2c:75:d4:51:ee:63:3a:11:22:69:c6:70:cf:5c:
                    ab:29:79:16:83:6e:a0:81:e7:f8:9b:b3:a4:35:30:
                    47:8b:d5:31:9c:62:86:ee:06:cb:04:30:7a:c0:5d:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:B8:BC:87:8E:52:07:3A:7C:79:36:3C:EA:B8:E1:03:36:6F:84
            X509v3 Authority Key Identifier:
                keyid:34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/347AB8EEFA46E494C819EE77344E6212E4ABDE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231312e302f32342d3234203d3e20323633303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:c0:65:a0:6a:98:03:6b:16:93:4e:03:34:e3:98:d1:20:87:
         4e:de:81:67:ab:91:fa:c2:68:08:ec:b2:dc:d9:b7:09:62:4c:
         3d:48:b4:ee:69:d1:6d:24:80:a2:8c:57:da:ee:e7:16:dc:74:
         19:65:ad:34:94:b5:f2:b6:fd:95:91:0b:d3:f5:f4:94:e6:75:
         91:f7:29:71:45:9a:79:f0:2a:5d:e5:71:0d:c9:b7:5d:b5:81:
         f6:29:a9:40:63:16:97:71:02:3c:e0:f9:0e:6f:e6:d8:22:23:
         0e:e5:23:f1:5e:c2:0e:e6:45:93:69:9c:7c:fd:c8:6f:2e:c2:
         06:29:39:bc:00:69:0d:bb:fd:56:df:4d:06:95:f8:b8:07:aa:
         90:f7:d9:d4:6f:fe:83:fc:42:a9:56:31:0c:14:20:c6:33:57:
         d3:43:a1:9c:32:fd:cf:c2:94:78:8e:80:a6:f9:cb:92:e6:bf:
         20:b9:77:1f:2c:20:80:03:06:fe:8e:23:59:7b:bb:bf:5d:06:
         e6:bb:63:63:25:0b:08:39:d6:11:66:66:66:b8:e3:e2:72:61:
         d3:3c:2e:50:10:67:37:70:b8:4d:02:a3:df:4f:a7:d1:3d:a6:
         43:eb:7b:31:41:a6:9e:3d:7c:2e:7c:59:87:26:9a:11:11:9f:
         03:5a:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:46:38 2025 by rpki-client