Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231342e302f32342d3234203d3e20323633303038.roa
File:                     3138362e3232362e3231342e302f32342d3234203d3e20323633303038.roa (raw, json)
Hash identifier:          QS3sTOBM+fMoXEy4rg0ebdbwXP5NrfUObGZspsnoZMs=
Subject key identifier:   2F:D6:C2:75:F9:68:75:B0:F5:AE:05:AE:04:A3:38:13:22:0C:FF:A4
Certificate issuer:       /CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
Certificate serial:       169A51F0ACF4F39B61DF2D35ABFDFB2B69F49F01
Authority key identifier: 34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231342e302f32342d3234203d3e20323633303038.roa
Signing time:             Wed 04 Dec 2024 13:30:48 +0000
ROA not before:           Wed 04 Dec 2024 13:25:48 +0000
ROA not after:            Wed 03 Dec 2025 13:30:48 +0000
asID:                     263008
IP address blocks:        186.226.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9a:51:f0:ac:f4:f3:9b:61:df:2d:35:ab:fd:fb:2b:69:f4:9f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
        Validity
            Not Before: Dec  4 13:25:48 2024 GMT
            Not After : Dec  3 13:30:48 2025 GMT
        Subject: CN=2FD6C275F96875B0F5AE05AE04A33813220CFFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:89:c6:52:12:0e:be:0e:fe:7b:dc:08:7f:
                    14:56:27:64:08:07:14:8b:a4:0d:33:b1:79:11:a8:
                    d7:ba:49:76:a8:b3:2a:8a:23:56:ab:e1:04:8f:4d:
                    23:d3:66:fb:87:5d:29:73:03:4a:e2:f4:a5:33:51:
                    6b:bb:e5:3b:a1:1b:b8:66:06:23:76:36:60:80:17:
                    0a:19:48:5d:09:e5:05:46:13:c4:1b:d1:2c:2a:da:
                    e9:4d:19:dc:89:26:e4:49:0c:68:d3:b8:4f:43:05:
                    52:0a:55:af:6a:69:19:0e:8e:c9:3c:db:c6:cd:81:
                    13:c5:b0:75:01:7c:c1:1d:e2:ce:6f:3a:f4:d5:96:
                    69:2b:6b:71:04:a3:ee:40:bd:16:96:08:65:1e:bb:
                    e1:07:10:cd:bd:fe:af:58:e1:2e:e3:d8:5d:d4:fd:
                    60:a3:7a:bf:eb:77:24:bc:39:1c:2a:6c:a6:70:e6:
                    ec:8f:ae:72:c6:a8:6e:c8:7e:4e:82:03:c5:26:98:
                    c2:7a:33:c6:ed:8c:ea:d3:ce:0e:86:be:07:d0:59:
                    ea:dd:ea:6f:f6:ee:65:19:66:74:64:f8:da:9e:64:
                    a9:19:6d:7a:6f:f1:bd:38:a4:f7:0c:a7:b4:b7:91:
                    72:f2:94:70:85:2d:02:1a:2b:2e:4f:b1:ea:4d:bc:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:C2:75:F9:68:75:B0:F5:AE:05:AE:04:A3:38:13:22:0C:FF:A4
            X509v3 Authority Key Identifier:
                keyid:34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/347AB8EEFA46E494C819EE77344E6212E4ABDE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231342e302f32342d3234203d3e20323633303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:8a:0e:da:d2:7b:00:c1:80:9c:95:6b:84:2d:81:0d:05:
         0d:62:83:ce:c1:77:20:47:2f:bd:6b:b8:9a:97:97:32:cc:0f:
         43:0f:67:30:74:3d:1d:fe:b2:3f:1c:90:73:b1:69:9a:cb:a1:
         04:a5:ac:c5:54:82:58:c7:59:e7:75:04:58:81:0b:34:47:4d:
         9e:4f:65:94:ba:f0:9a:86:7b:c0:36:9b:5a:82:58:90:4a:d5:
         b9:62:cf:4d:36:c9:b0:7b:7f:83:45:86:60:99:20:23:cf:ac:
         17:28:ba:d9:7c:13:03:5a:93:1f:42:b4:f0:35:08:84:14:87:
         e8:fc:41:33:8c:03:a6:22:27:bb:8c:f1:e9:9c:28:7b:41:5a:
         84:3f:60:60:dd:91:29:c0:c2:c6:6a:1a:6c:6f:7e:9d:3c:e9:
         33:77:6a:b5:8e:0b:76:e2:17:4b:97:fc:6f:2f:2b:a7:4f:ad:
         8f:7c:81:5e:15:66:dd:d3:43:88:81:29:78:a7:94:c4:b8:73:
         01:b8:b9:55:eb:b4:54:05:21:38:98:ee:d3:52:83:09:6e:34:
         c7:06:ca:ee:16:98:9c:3a:61:79:a6:5d:21:84:a7:85:ef:ab:
         36:5d:55:42:7d:22:6d:ef:76:5d:f6:24:94:af:74:b3:6a:1f:
         4a:65:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:50:08 2025 by rpki-client