Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231322e302f32342d3234203d3e20323633303038.roa
File:                     3138362e3232362e3231322e302f32342d3234203d3e20323633303038.roa (raw, json)
Hash identifier:          bUEsR6PHLlInMUheMVGAdlNpnzX8MBEHeMwauTkuKYo=
Subject key identifier:   30:1C:BE:F7:D9:7A:2A:AA:08:1A:B5:22:5C:4E:91:12:7B:0A:C7:09
Certificate issuer:       /CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
Certificate serial:       61967642130B638873C9F4B408B5CB5476D4061C
Authority key identifier: 34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231322e302f32342d3234203d3e20323633303038.roa
Signing time:             Wed 04 Dec 2024 13:30:43 +0000
ROA not before:           Wed 04 Dec 2024 13:25:43 +0000
ROA not after:            Wed 03 Dec 2025 13:30:43 +0000
asID:                     263008
IP address blocks:        186.226.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:96:76:42:13:0b:63:88:73:c9:f4:b4:08:b5:cb:54:76:d4:06:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
        Validity
            Not Before: Dec  4 13:25:43 2024 GMT
            Not After : Dec  3 13:30:43 2025 GMT
        Subject: CN=301CBEF7D97A2AAA081AB5225C4E91127B0AC709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:bd:37:3d:ec:21:e5:35:d2:43:02:c3:12:
                    26:2a:f3:56:80:fe:4b:0e:43:8c:04:b2:9b:8c:0d:
                    b9:fc:64:ba:05:d6:ab:4f:74:97:fa:fb:85:00:3b:
                    4e:58:2e:96:9d:3f:70:fb:09:a6:10:0c:eb:de:c5:
                    81:25:de:96:5a:f5:3f:42:cb:f0:8e:dd:f8:48:4d:
                    b2:d3:7b:de:28:27:83:1a:ea:da:3a:aa:72:c6:f3:
                    9e:e8:ce:4b:31:74:a6:62:0a:db:f3:bd:d4:54:78:
                    55:ef:9c:43:05:1a:2f:51:bc:4b:92:0f:47:3f:52:
                    db:77:43:83:77:3d:f7:e1:37:ce:ca:90:44:33:8e:
                    ee:db:41:71:78:d0:ab:99:f9:83:36:b5:a2:50:2d:
                    cf:d4:c4:f5:81:5c:38:68:68:ce:09:5f:f2:81:15:
                    64:c6:a0:df:5b:7c:10:36:92:57:16:a3:d6:9d:32:
                    e2:cd:51:f3:da:36:76:64:2e:3f:d9:35:b6:c5:3e:
                    ea:11:c2:bd:c1:42:da:58:cd:be:c5:3a:2c:04:da:
                    d4:6f:35:d0:ce:d5:d5:51:88:d6:bf:3f:fb:98:69:
                    c2:1c:1d:da:be:75:83:9c:4b:9b:5f:99:66:87:2d:
                    20:f6:30:27:c4:94:d3:bd:e6:dc:86:68:e7:45:82:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1C:BE:F7:D9:7A:2A:AA:08:1A:B5:22:5C:4E:91:12:7B:0A:C7:09
            X509v3 Authority Key Identifier:
                keyid:34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/347AB8EEFA46E494C819EE77344E6212E4ABDE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231322e302f32342d3234203d3e20323633303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:f8:40:c9:16:20:ad:81:54:fd:2b:ad:22:c2:ad:c0:38:
         cc:10:39:df:5b:49:1b:12:6c:aa:be:d0:56:03:e1:ff:77:b4:
         7f:63:f1:d0:88:96:16:b0:04:ff:56:07:92:5a:81:51:3f:d9:
         4e:94:a5:8b:7a:ad:08:b5:5f:18:1a:2d:27:87:b6:9f:0e:6f:
         50:e2:73:a4:13:c7:ac:63:fb:45:6c:65:79:57:2c:ef:6a:44:
         af:d6:fe:c4:ef:e7:a1:a2:a7:9c:b4:b3:9f:02:5d:7b:2c:a5:
         b1:15:7c:12:70:83:66:75:74:da:f1:e0:ef:b5:a9:19:e6:ec:
         fe:17:38:c3:1a:50:24:d0:be:94:1f:28:19:7c:3b:c0:8c:24:
         61:fd:77:21:8a:c0:c2:91:c4:83:67:10:59:29:ac:60:b4:a0:
         d9:89:37:c9:41:48:82:97:3e:28:61:04:fe:bf:7a:6f:7f:36:
         f6:6f:7d:ad:ac:df:43:30:0a:94:54:cf:fe:27:39:10:d5:a3:
         6f:91:78:36:c4:9b:31:70:ec:41:f6:56:a7:92:e8:48:86:14:
         e2:d4:1c:08:01:9b:cd:72:af:6d:31:d3:6b:fd:25:5f:05:37:
         50:dd:f1:3d:ea:93:0a:61:4c:1a:76:ef:f4:36:1e:61:80:5d:
         9b:9d:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:47:00 2025 by rpki-client