Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231352e302f32342d3234203d3e20323633303038.roa
File:                     3138362e3232362e3231352e302f32342d3234203d3e20323633303038.roa (raw, json)
Hash identifier:          H+fCXqpawl3JXFrDl0c0NBQVou9ZlA3AmtOfqMZgb9Y=
Subject key identifier:   EE:F6:3A:32:02:17:64:9D:1D:17:7E:2A:C9:91:65:24:5E:23:45:5C
Certificate issuer:       /CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
Certificate serial:       410774C1881784FE126119813876AC50B0E8F67D
Authority key identifier: 34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231352e302f32342d3234203d3e20323633303038.roa
Signing time:             Wed 04 Dec 2024 13:30:50 +0000
ROA not before:           Wed 04 Dec 2024 13:25:50 +0000
ROA not after:            Wed 03 Dec 2025 13:30:50 +0000
asID:                     263008
IP address blocks:        186.226.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:07:74:c1:88:17:84:fe:12:61:19:81:38:76:ac:50:b0:e8:f6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347AB8EEFA46E494C819EE77344E6212E4ABDE53
        Validity
            Not Before: Dec  4 13:25:50 2024 GMT
            Not After : Dec  3 13:30:50 2025 GMT
        Subject: CN=EEF63A320217649D1D177E2AC99165245E23455C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:b0:ce:f0:10:74:86:19:0b:40:52:ce:9a:
                    92:e8:c1:3d:a5:a9:d7:05:57:aa:df:c9:de:cd:9d:
                    1c:a4:f8:ce:9f:36:c0:be:c4:d0:04:c0:0d:e6:f5:
                    77:19:3f:47:a9:7a:13:c0:b9:80:46:c1:40:f9:8f:
                    99:39:7b:ba:76:47:f3:e0:96:48:f0:a4:9a:f4:6b:
                    e7:e7:3d:e1:c7:b7:ce:aa:0f:11:33:7b:51:fc:03:
                    93:53:2a:70:a3:d0:35:b2:e3:a9:aa:7c:76:d5:28:
                    d2:94:c9:a7:e5:7e:87:06:a6:8d:f5:5c:da:81:14:
                    77:7d:28:76:c9:05:29:7b:35:21:9e:a7:ec:b3:9b:
                    11:33:3d:05:8d:64:f6:f6:5b:d1:10:0a:56:d5:02:
                    e0:27:58:2f:b6:1f:1f:f3:a7:11:cd:4e:6b:8d:90:
                    5e:ba:a9:ea:dd:d2:7a:58:7d:7b:b5:72:b6:0a:ad:
                    a0:9d:82:42:5c:da:db:3e:15:be:a9:93:76:c7:7f:
                    cc:17:f1:d3:c6:0b:ca:64:da:3e:c0:3a:c7:79:92:
                    9f:37:2f:71:ac:e3:ea:e4:64:fb:21:3c:bc:ad:75:
                    4e:c5:10:40:5f:28:01:a4:5a:2f:65:b1:db:f4:06:
                    c9:5b:f4:b9:c5:8f:c7:bf:51:1d:62:13:91:78:2b:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F6:3A:32:02:17:64:9D:1D:17:7E:2A:C9:91:65:24:5E:23:45:5C
            X509v3 Authority Key Identifier:
                keyid:34:7A:B8:EE:FA:46:E4:94:C8:19:EE:77:34:4E:62:12:E4:AB:DE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/347AB8EEFA46E494C819EE77344E6212E4ABDE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347AB8EEFA46E494C819EE77344E6212E4ABDE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BatcE33SZt8nzrFabnhpkXciBKuJcV6weBh3U86KgZvn/0/3138362e3232362e3231352e302f32342d3234203d3e20323633303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:90:47:5b:b6:53:74:3c:64:d4:0f:ac:65:07:6b:88:d2:
         7e:9c:e4:07:99:94:89:69:eb:7c:4c:22:12:52:c1:f2:dc:90:
         25:06:83:8b:34:1d:96:fd:37:de:ef:e9:71:b3:cd:5f:1f:8c:
         cc:42:7d:e7:c7:32:16:19:c6:93:1c:c0:69:b8:f3:4e:e1:38:
         ec:ef:10:b5:b6:1c:a7:0f:42:6c:01:04:b9:c9:cf:4b:c4:cf:
         eb:d5:29:5d:b6:d5:1c:00:b6:6c:93:2f:d5:86:d2:23:31:1f:
         9e:2a:13:a3:14:8c:b2:84:37:6e:ad:3a:6d:be:9a:53:26:20:
         e4:d1:80:1e:5d:86:28:d3:cc:b6:31:06:01:7a:63:e8:69:dc:
         ef:6c:45:e9:f4:ea:63:93:e2:cf:0d:b9:4b:2a:c9:cd:1b:54:
         1e:89:c6:8c:94:dc:59:a7:b2:84:6a:c5:89:b1:c5:84:fa:47:
         41:c8:6b:77:0e:c9:28:39:5f:38:9f:fd:86:42:ac:2c:81:df:
         50:53:c3:bc:3c:24:59:13:c7:c0:7e:5c:59:5f:5c:56:03:39:
         e2:a5:0f:60:9c:b8:c7:ee:bd:19:f4:7e:31:f4:eb:a7:46:a2:
         fb:31:cf:f1:be:1a:cc:23:1f:b5:62:21:65:db:94:4c:25:c3:
         cc:58:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:50:46 2025 by rpki-client