Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa
File:                     3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa (raw, json)
Hash identifier:          G7WKj1pSqAax+nU2Xa1Mx5u6royt+mbIf8Ad14R6Ssg=
Subject key identifier:   18:5C:66:78:63:96:82:7A:D7:3C:DC:3C:EE:A2:4F:29:D7:20:03:EF
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       2AF6A56264E6D7E8934F0632F09E81D6A61A9569
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:46 +0000
ROA not before:           Tue 26 Nov 2024 18:49:46 +0000
ROA not after:            Tue 25 Nov 2025 18:54:46 +0000
asID:                     263855
IP address blocks:        138.186.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f6:a5:62:64:e6:d7:e8:93:4f:06:32:f0:9e:81:d6:a6:1a:95:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:46 2024 GMT
            Not After : Nov 25 18:54:46 2025 GMT
        Subject: CN=185C66786396827AD73CDC3CEEA24F29D72003EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:66:5e:a7:c5:00:de:94:76:74:0e:db:aa:
                    c5:b7:42:5b:a4:78:5b:2b:d8:e9:5e:0b:52:9c:0e:
                    54:6b:6a:27:05:b8:d7:4a:3a:8f:a3:2c:91:44:af:
                    bd:f1:e3:a0:2f:64:a4:1b:dd:1b:67:51:17:a3:f1:
                    a4:b9:16:7c:b4:2e:3a:1c:06:97:6e:e6:4e:3c:d8:
                    59:22:6e:5e:2b:1f:9d:e9:7b:26:c7:ca:ef:aa:a2:
                    fe:dc:4e:51:c7:fb:92:18:83:f6:76:b3:79:23:84:
                    bc:2e:98:d5:cd:3b:13:25:22:54:65:80:5c:19:8d:
                    1c:ad:1b:34:3d:db:28:a9:6e:30:20:37:05:c2:bf:
                    de:42:9f:88:0b:e7:a2:3d:2b:c0:ae:7f:bf:cb:50:
                    66:d0:16:62:3d:01:6e:c4:49:e4:5b:b3:97:78:31:
                    ab:90:96:0a:6d:63:ea:5e:8e:c2:18:32:20:70:18:
                    74:9e:d4:03:37:26:92:fe:5c:c9:77:53:76:f1:d9:
                    3a:3c:1e:b0:fe:40:c5:db:fc:8c:13:c3:51:b0:4d:
                    74:0d:28:5e:0a:8b:d6:9e:6f:96:10:23:fa:24:4f:
                    70:94:1c:1c:42:82:7f:21:d0:22:96:70:dc:ad:d8:
                    64:bb:bc:ea:8f:20:f6:ba:7c:8e:5a:2f:33:7a:2d:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5C:66:78:63:96:82:7A:D7:3C:DC:3C:EE:A2:4F:29:D7:20:03:EF
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:8c:2c:ab:f6:30:52:7b:65:bc:f3:08:be:43:71:b8:f2:
         1d:57:4d:03:35:2e:43:1c:85:3b:34:3c:6e:af:de:53:1b:9c:
         b9:87:3c:6f:d3:b2:38:ee:98:4d:2c:c8:90:1b:6d:fa:c0:ef:
         27:86:47:ca:e4:16:d2:30:01:06:60:e7:ad:d2:dc:8c:1c:aa:
         d4:80:25:f6:2c:b5:9a:76:90:f0:8e:61:f7:b8:16:bc:a4:6a:
         c6:90:e3:dc:d6:8d:2f:27:4f:b4:d0:5e:54:fb:f4:d2:ef:41:
         69:cf:5e:a9:29:c9:ca:c3:26:73:de:eb:8d:3b:7e:d4:ec:a2:
         e2:de:95:9d:00:3b:ea:fe:ce:18:24:9c:85:31:c0:c6:9d:bd:
         3a:2e:af:b0:fd:d8:e9:b0:37:16:6b:67:2d:2b:46:2e:5d:5e:
         b1:b3:b9:59:c3:aa:3e:37:3f:85:07:d3:ed:f1:20:df:b0:69:
         59:0e:6b:1f:b4:61:c1:f0:a8:40:a6:d4:5b:ca:5f:4c:3f:95:
         c5:19:8b:97:d2:8b:2a:33:52:0c:db:13:34:fe:63:ab:7b:b1:
         ae:af:11:17:73:0d:3e:e9:36:56:8c:9d:cb:6d:4d:02:13:fa:
         c2:c9:e4:7b:d3:96:c8:c1:2e:1f:74:9d:1f:11:f7:45:8b:bb:
         7a:d6:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:24:46 2025 by rpki-client