Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38352e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38352e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          SA/2HkImxoqw2j1QNF1QDbJuXqSqvDcUMOqlwNcqFKA=
Subject key identifier:   7C:D7:3B:41:00:5D:8D:48:EB:F3:84:6C:C6:29:46:F5:6A:60:FC:7F
Certificate issuer:       /CN=25B80D450923FBAF7E31D41324FA2A66D766846C
Certificate serial:       3BAF81C5EB4B824F1C9A1A972791ED5BE3FE417B
Authority key identifier: 25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38352e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 14 Jul 2022 13:14:56 +0000
ROA not before:           Thu 14 Jul 2022 13:09:56 +0000
ROA not after:            Thu 13 Jul 2023 13:14:56 +0000
asID:                     262998
IP address blocks:        186.224.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:af:81:c5:eb:4b:82:4f:1c:9a:1a:97:27:91:ed:5b:e3:fe:41:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B80D450923FBAF7E31D41324FA2A66D766846C
        Validity
            Not Before: Jul 14 13:09:56 2022 GMT
            Not After : Jul 13 13:14:56 2023 GMT
        Subject: CN=7CD73B41005D8D48EBF3846CC62946F56A60FC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:88:9e:c7:b9:2d:8c:3e:f2:5f:ff:76:54:
                    63:c4:ed:8f:6d:63:cb:51:4c:a4:fc:89:20:a9:60:
                    ac:b1:3b:28:cc:b2:56:8d:e4:0b:1c:42:21:a5:67:
                    6d:89:5a:6c:6d:b4:6f:bd:17:11:cd:c6:2f:a4:5f:
                    c4:0d:fd:c1:b1:da:29:3c:e6:53:7e:9d:5c:65:6b:
                    41:ac:e5:49:43:29:da:9e:76:c7:6f:6a:4a:7e:ce:
                    ab:98:34:98:60:c1:5e:66:b1:cd:e5:d0:4c:2d:ff:
                    22:97:77:00:db:06:ab:92:f5:8e:b4:58:0a:f8:05:
                    f4:60:67:24:26:f5:ee:ae:4b:ac:59:76:6a:19:0e:
                    f9:10:02:cd:86:f4:15:a9:6b:12:51:21:c8:33:7b:
                    ea:61:e1:ea:ec:91:a0:42:81:b0:24:39:54:cc:83:
                    15:7e:97:5c:c7:c0:5a:e5:85:b6:98:b5:cb:1a:04:
                    dd:08:77:a1:3a:81:50:e4:e2:7d:e3:68:08:c9:b8:
                    ec:28:82:19:da:60:1a:77:c9:d0:c2:6c:25:26:99:
                    b9:3e:35:42:6c:9d:6a:d8:9f:da:0c:11:d9:43:8e:
                    fe:77:de:97:7c:0c:3a:41:93:1d:2a:a3:2d:25:fc:
                    80:b4:01:50:38:f4:31:0d:e2:46:d6:db:9c:c9:c2:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:3B:41:00:5D:8D:48:EB:F3:84:6C:C6:29:46:F5:6A:60:FC:7F
            X509v3 Authority Key Identifier:
                keyid:25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/25B80D450923FBAF7E31D41324FA2A66D766846C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38352e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:3d:24:27:0e:79:3b:b0:03:3e:4f:7b:e8:02:fe:a7:4f:59:
         0b:27:5e:1e:ef:18:64:9f:f5:34:78:90:a9:bd:ac:cb:2f:37:
         bc:ee:df:1b:37:8e:ee:5c:21:88:3a:a7:24:63:c6:8d:65:c6:
         85:ac:6b:c8:e7:df:27:78:c9:25:af:8d:c0:c2:74:67:be:95:
         60:43:f5:7a:e4:51:b8:18:6b:50:0b:47:44:46:36:58:75:77:
         5d:34:f4:88:97:34:89:ab:4b:0b:d0:93:d4:aa:08:40:4e:00:
         94:1a:04:49:11:72:4b:be:dc:ca:9c:c8:a9:7a:fa:13:1a:2c:
         61:51:e7:1d:df:ce:c1:61:20:7e:c5:2e:42:ff:48:b8:73:e6:
         49:17:0e:2f:56:c4:93:38:07:12:69:5a:13:4b:f0:13:30:f5:
         17:ed:3d:79:ce:df:81:7d:89:a2:90:fe:40:7b:b0:91:6c:07:
         be:7b:2f:9c:e4:fe:d6:a6:52:0e:c1:4f:4d:60:ea:c6:24:d5:
         c9:c8:f5:16:c9:f0:3c:d0:22:3b:31:6c:ab:45:75:53:58:cf:
         92:b6:81:6e:75:0d:a1:fb:26:68:7c:9a:24:b0:29:86:e4:dc:
         3c:6e:ba:33:6f:1f:4a:5c:3a:b7:54:cb:00:8f:d0:aa:bd:d4:
         b8:b0:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:01 2025 by rpki-client