Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/3138362e3230392e3138342e302f32322d3232203d3e203533303234.roa
File:                     3138362e3230392e3138342e302f32322d3232203d3e203533303234.roa (raw, json)
Hash identifier:          zOjG5l9DzLYJ1rRGOC+td6mO4XRaZFPS5fSjwqKxb8Y=
Subject key identifier:   32:04:A7:67:26:3F:C8:64:2E:13:79:BA:04:13:21:E7:C7:F8:33:3D
Certificate issuer:       /CN=81054A5E0D4A934A669FC835F030DE2F15DAF2DE
Certificate serial:       6CAA6ACFA6B76F058D041655A786FFB9B89DC879
Authority key identifier: 81:05:4A:5E:0D:4A:93:4A:66:9F:C8:35:F0:30:DE:2F:15:DA:F2:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81054A5E0D4A934A669FC835F030DE2F15DAF2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/3138362e3230392e3138342e302f32322d3232203d3e203533303234.roa
Signing time:             Thu 03 Mar 2022 12:52:45 +0000
ROA not before:           Thu 03 Mar 2022 12:47:45 +0000
ROA not after:            Thu 02 Mar 2023 12:52:45 +0000
asID:                     53024
IP address blocks:        186.209.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:aa:6a:cf:a6:b7:6f:05:8d:04:16:55:a7:86:ff:b9:b8:9d:c8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81054A5E0D4A934A669FC835F030DE2F15DAF2DE
        Validity
            Not Before: Mar  3 12:47:45 2022 GMT
            Not After : Mar  2 12:52:45 2023 GMT
        Subject: CN=3204A767263FC8642E1379BA041321E7C7F8333D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:0e:9e:5b:a0:6a:c6:b5:4a:6d:7d:7a:df:
                    13:5e:ec:d4:7c:f6:97:c9:2a:1c:c4:97:85:a3:ef:
                    7c:48:de:98:11:29:44:09:9a:84:4f:8b:f9:02:67:
                    18:b5:3b:b6:3b:fa:72:0f:48:fa:33:00:6b:fa:1a:
                    2a:79:76:0a:10:24:76:1d:e5:ac:71:50:ad:52:30:
                    3c:e0:dd:44:dc:69:0d:87:54:c9:b6:57:d5:c9:98:
                    54:63:8c:dc:61:0b:14:0a:6a:6c:2b:cf:78:22:69:
                    34:50:b9:7f:15:7c:6a:e1:8b:48:24:95:f2:09:b9:
                    2d:0e:da:72:63:7e:ce:a4:e8:3a:63:c4:4d:3f:d6:
                    2b:21:49:92:a0:be:05:28:9d:72:85:5b:b0:cf:e9:
                    16:4b:c3:f1:00:60:c8:13:ad:36:68:8c:4b:13:02:
                    f0:a6:84:4f:9d:63:5c:c7:3b:63:76:a4:92:cc:eb:
                    86:45:c9:16:bb:92:1c:bd:1a:64:22:c5:f4:70:3e:
                    4a:58:76:2b:40:e4:58:3d:a0:59:89:9f:91:c0:94:
                    c5:2e:3a:b2:87:87:e8:4e:3b:f2:ee:a2:79:6a:c4:
                    52:fe:e2:09:71:9e:1f:26:11:49:0f:ff:ae:49:a4:
                    f3:e5:66:16:c3:d0:09:7a:d1:bc:3c:e8:01:d5:df:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:A7:67:26:3F:C8:64:2E:13:79:BA:04:13:21:E7:C7:F8:33:3D
            X509v3 Authority Key Identifier:
                keyid:81:05:4A:5E:0D:4A:93:4A:66:9F:C8:35:F0:30:DE:2F:15:DA:F2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/81054A5E0D4A934A669FC835F030DE2F15DAF2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81054A5E0D4A934A669FC835F030DE2F15DAF2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9BNPU2rWm9LYYfLoZoxrQhTiq8cKdiYZBKxKvP63fQ1/0/3138362e3230392e3138342e302f32322d3232203d3e203533303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:59:e3:11:58:86:10:b9:3f:32:2a:ff:fb:8a:af:a6:39:
         9d:87:e4:6f:26:1c:46:5b:5d:f4:c3:91:ff:96:8a:e1:e4:0f:
         23:38:26:f0:d8:51:d4:8e:4f:3b:64:d4:c3:52:ab:94:13:7a:
         ec:ee:69:07:da:10:75:c7:b6:3d:c6:06:c5:dd:b9:24:53:be:
         cd:48:85:25:d0:14:a1:e8:e2:43:ad:7a:d7:18:2d:41:ac:be:
         1c:37:0e:c3:cd:7c:14:44:cb:f6:14:53:72:ba:93:97:5e:47:
         cd:d1:90:28:3c:d8:ba:d7:d1:5d:58:2f:51:9f:05:ea:8f:b0:
         20:a7:49:7b:6b:1e:59:03:3b:0a:c2:03:36:e6:3c:97:b7:d6:
         38:8d:fb:07:c5:d8:66:ec:39:37:71:fe:e1:0e:a8:1f:d1:4e:
         7e:6a:68:26:c8:9a:ac:e6:75:9a:86:45:69:c3:30:eb:08:cd:
         9c:ec:b8:d3:39:97:e9:f5:94:62:94:ac:6e:d5:59:a6:f1:ab:
         cf:8d:c9:98:60:d1:8e:7d:f7:c4:86:cd:aa:05:df:89:84:12:
         13:3b:d5:1b:de:91:4a:8e:a3:43:92:97:d5:87:c5:61:bf:f8:
         d2:84:85:d8:18:d3:6e:a3:c4:66:1d:97:f9:ef:36:af:0d:e2:
         e2:5a:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:34 2025 by rpki-client