Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38342e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          kDUbOrbN8DbTDGgXb0Xr7S1WWplXecxm1BrRIUO1G5Y=
Subject key identifier:   FE:65:F6:E8:CD:AE:68:26:A7:D9:6E:ED:D8:D0:D3:EF:A5:4B:51:E8
Certificate issuer:       /CN=25B80D450923FBAF7E31D41324FA2A66D766846C
Certificate serial:       1B998C239EC5E5574BD9AE2B12BB392FE080BED2
Authority key identifier: 25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 14 Jul 2022 13:14:53 +0000
ROA not before:           Thu 14 Jul 2022 13:09:53 +0000
ROA not after:            Thu 13 Jul 2023 13:14:53 +0000
asID:                     262998
IP address blocks:        186.224.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:99:8c:23:9e:c5:e5:57:4b:d9:ae:2b:12:bb:39:2f:e0:80:be:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B80D450923FBAF7E31D41324FA2A66D766846C
        Validity
            Not Before: Jul 14 13:09:53 2022 GMT
            Not After : Jul 13 13:14:53 2023 GMT
        Subject: CN=FE65F6E8CDAE6826A7D96EEDD8D0D3EFA54B51E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:b1:92:b6:c7:f0:03:d1:29:65:99:a1:a0:
                    18:75:67:a0:66:cb:04:93:8e:8d:f5:4e:fc:d1:3c:
                    41:14:93:98:ca:e4:a5:5a:72:d6:0e:46:81:97:76:
                    5e:b5:75:14:67:ae:88:cc:b0:93:85:c9:52:6e:41:
                    0f:b2:6c:d5:47:58:c2:c2:c1:ec:79:a6:4e:ed:25:
                    51:60:35:64:b6:e0:ff:8a:74:10:31:30:13:2c:49:
                    9d:e9:57:9e:1b:d0:0c:c6:b7:51:3e:e9:79:46:32:
                    81:33:5c:a3:bd:82:ce:63:c6:c9:e7:f8:24:bf:51:
                    75:43:94:90:da:d0:39:bd:fc:79:bd:4a:d3:8a:70:
                    d1:e7:2f:96:d9:fe:29:33:00:be:27:8c:a2:6b:3d:
                    d1:a6:a5:b6:a6:cc:53:5b:d6:52:f4:5d:0e:a3:63:
                    84:be:d5:79:97:9e:4e:f4:5a:64:b2:1d:21:1b:10:
                    dd:16:e8:f8:76:da:15:5b:32:d6:38:90:1d:5a:e3:
                    40:18:45:e6:75:21:a2:dd:8a:fe:bf:f4:95:51:a0:
                    22:89:42:26:1c:6d:1e:f6:17:4c:d1:2f:51:73:ff:
                    35:91:59:42:6f:68:30:3c:b2:6a:9b:2b:5b:9d:fe:
                    ff:5e:b7:20:26:9b:40:3a:6c:89:e6:f2:65:d9:25:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:65:F6:E8:CD:AE:68:26:A7:D9:6E:ED:D8:D0:D3:EF:A5:4B:51:E8
            X509v3 Authority Key Identifier:
                keyid:25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/25B80D450923FBAF7E31D41324FA2A66D766846C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38342e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:fc:9c:6d:03:8b:bf:65:ee:57:21:c3:4b:fe:6a:c2:a7:
         6c:33:55:08:55:84:36:87:59:cc:5e:c8:6b:c4:67:ac:c8:17:
         09:a7:ab:b3:10:2b:54:1d:51:4c:c9:8f:ea:ea:4c:65:eb:82:
         a9:4d:8b:04:cf:bd:23:f5:2d:01:00:fb:f9:b1:4a:cf:ee:87:
         51:a8:1d:e3:dd:46:c0:4c:58:1a:f9:4a:e9:35:4d:ff:96:b5:
         79:e5:28:1a:de:44:04:5a:f6:c9:6d:b1:a7:2f:fa:fe:2f:c8:
         69:3f:b1:8d:7d:95:94:6d:bf:17:9a:26:86:48:2a:2d:e6:7d:
         c0:9e:66:9a:fe:f0:05:48:00:4f:d5:63:94:70:c2:58:dc:a1:
         64:33:16:36:41:08:df:98:de:a0:93:7c:22:4b:e4:d1:62:ed:
         14:c9:1d:b1:46:09:5b:9a:70:9d:f8:06:a3:a5:10:b2:ad:30:
         e3:c3:6b:0d:51:10:1f:59:04:a1:02:26:aa:d6:fd:30:e6:e2:
         f0:d9:8a:9b:7f:b0:fc:76:93:86:15:36:71:87:26:87:6d:1b:
         67:ca:67:f3:0d:9d:ea:90:72:db:ae:84:3a:15:8f:ba:31:c1:
         19:64:2d:7c:e2:d9:93:66:3c:46:a7:8f:7e:c5:56:c6:8d:35:
         59:c9:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:59:19 2025 by rpki-client