Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/3138362e3139342e31302e302f32332d3233203d3e20323730383739.roa
File:                     3138362e3139342e31302e302f32332d3233203d3e20323730383739.roa (raw, json)
Hash identifier:          XJly7CO/ufvJbQF8u+K64zTa5z+qEoXbUEGf9mdZ2Dw=
Subject key identifier:   80:D9:7B:D1:61:F9:CB:75:A8:EF:E5:0A:EB:93:C3:88:AF:2F:D2:73
Certificate issuer:       /CN=55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3
Certificate serial:       441AF353C7A2CB5AA3341D4BF86BB55EB1DD65A0
Authority key identifier: 55:BE:C9:CC:86:C3:DD:5C:4E:C2:5A:99:3E:9A:57:5C:CA:D0:CF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/3138362e3139342e31302e302f32332d3233203d3e20323730383739.roa
Signing time:             Thu 25 May 2023 18:02:36 +0000
ROA not before:           Thu 25 May 2023 17:57:36 +0000
ROA not after:            Thu 23 May 2024 18:02:36 +0000
asID:                     270879
IP address blocks:        186.194.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1a:f3:53:c7:a2:cb:5a:a3:34:1d:4b:f8:6b:b5:5e:b1:dd:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3
        Validity
            Not Before: May 25 17:57:36 2023 GMT
            Not After : May 23 18:02:36 2024 GMT
        Subject: CN=80D97BD161F9CB75A8EFE50AEB93C388AF2FD273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:70:eb:bb:4d:b6:9b:9c:c2:47:9f:a2:95:
                    5b:a5:1e:82:78:3a:7a:7e:6d:0b:da:e6:df:20:6d:
                    fb:c5:1d:38:77:67:22:e5:3b:fb:e3:ec:70:92:47:
                    21:b0:c4:4e:a3:85:5c:e5:dd:89:74:e7:fd:a1:99:
                    76:36:54:df:24:5c:72:2c:f8:6c:41:67:04:fd:bf:
                    32:15:a9:b5:e4:39:1a:1f:54:2d:55:23:72:86:e4:
                    54:f7:e0:5e:c1:83:6d:51:f9:3e:1e:cd:4e:26:34:
                    56:d0:74:f4:b7:9c:ae:ed:16:d3:9c:e1:52:bd:32:
                    9f:a6:25:a4:4d:d6:f0:44:38:0d:bf:69:76:5e:27:
                    32:f7:75:70:7d:31:b3:a9:9c:b3:23:f0:f5:d1:0f:
                    96:59:64:37:75:7d:96:ca:18:9b:45:b2:5c:f9:b9:
                    1b:1b:86:e3:a9:c0:3e:30:2d:70:c5:7d:f7:dc:09:
                    d0:5a:5b:22:9b:e6:a7:57:4f:8a:ef:64:c4:ea:c7:
                    75:25:07:4a:5d:63:4a:ac:b4:2b:a9:47:56:1d:9f:
                    f1:b8:82:2a:ee:c3:6c:9c:c7:dd:0e:c2:f6:16:0d:
                    db:0f:b8:2d:17:8e:7f:04:f2:d1:c5:63:b1:93:a3:
                    66:f1:8d:0b:5c:af:9b:c1:54:97:0c:ea:08:a9:17:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D9:7B:D1:61:F9:CB:75:A8:EF:E5:0A:EB:93:C3:88:AF:2F:D2:73
            X509v3 Authority Key Identifier:
                keyid:55:BE:C9:CC:86:C3:DD:5C:4E:C2:5A:99:3E:9A:57:5C:CA:D0:CF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/3138362e3139342e31302e302f32332d3233203d3e20323730383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:d3:a2:45:3b:0b:54:1a:90:e2:af:63:99:be:1a:b4:a2:
         76:3c:5c:d4:04:ae:92:5d:40:ca:bd:43:2d:69:44:5a:86:48:
         8f:88:5b:d2:85:dd:0e:4f:25:b9:71:04:36:b8:ce:0e:bf:aa:
         35:81:dc:1a:95:2d:42:4d:40:18:41:06:55:95:4e:45:eb:ba:
         5d:02:2c:f2:b9:91:af:7f:5f:71:5d:89:9a:01:e8:74:71:f7:
         1b:fa:0d:1c:67:0c:ff:49:8b:dc:9c:b9:8e:a4:54:f2:a4:c4:
         65:63:97:18:ad:1b:b1:77:7d:14:85:55:fd:0e:b6:2d:7a:b7:
         7b:70:dc:a9:79:87:bf:6e:4a:cd:f2:43:30:e3:04:b1:87:a7:
         2b:95:0d:51:7b:e9:17:21:cb:f7:69:a6:8a:cd:a9:dc:9c:5c:
         dd:d1:60:83:9f:bc:b7:5c:51:5d:16:3b:7a:d4:f0:eb:5d:d3:
         76:a3:b5:59:29:05:f3:32:46:7c:bb:0c:8f:97:8f:0d:df:71:
         70:a2:9f:bf:1e:54:f3:6a:58:f0:ee:ad:64:d1:fe:42:74:55:
         35:c6:eb:8a:3b:e5:15:06:35:a8:6e:2c:22:a5:b4:46:74:4b:
         cd:f8:16:72:8c:5b:9b:2b:13:13:8f:92:50:ba:cb:77:0a:55:
         23:de:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:31 2025 by rpki-client