Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38372e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38372e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          IAZ4oKLUVGaiJE3jFaSBHm+91B36xNzWJbplyyfJ+ic=
Subject key identifier:   C2:AB:2C:33:BE:B9:E6:F3:C3:1B:C3:79:93:DE:37:5D:13:6B:04:AF
Certificate issuer:       /CN=25B80D450923FBAF7E31D41324FA2A66D766846C
Certificate serial:       021F25A0A4C3D1DC97B5C9E1902036159F7FAA4D
Authority key identifier: 25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38372e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 14 Jul 2022 13:15:00 +0000
ROA not before:           Thu 14 Jul 2022 13:10:00 +0000
ROA not after:            Thu 13 Jul 2023 13:15:00 +0000
asID:                     262998
IP address blocks:        186.224.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:25:a0:a4:c3:d1:dc:97:b5:c9:e1:90:20:36:15:9f:7f:aa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B80D450923FBAF7E31D41324FA2A66D766846C
        Validity
            Not Before: Jul 14 13:10:00 2022 GMT
            Not After : Jul 13 13:15:00 2023 GMT
        Subject: CN=C2AB2C33BEB9E6F3C31BC37993DE375D136B04AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:ac:a9:b6:11:9b:77:8b:51:2a:87:b2:09:
                    f5:26:97:e3:11:51:fe:01:b5:9c:ff:4c:8c:aa:45:
                    40:4e:dc:7f:59:9b:36:95:a0:1e:7e:89:fc:05:60:
                    af:b6:0a:0b:41:fd:35:66:04:b2:6d:0f:46:f5:cc:
                    90:a1:92:4f:af:98:5e:5c:77:e5:aa:e9:1b:d5:d8:
                    86:27:23:c2:5a:75:16:88:f5:bf:9a:c8:1f:20:0b:
                    8e:e1:09:86:6d:96:00:b4:f0:26:36:eb:13:c8:28:
                    39:10:c7:76:15:44:84:fe:92:61:cd:b9:3b:08:87:
                    7b:8a:ff:f4:7f:07:f6:8f:30:57:91:d8:68:05:c2:
                    0a:17:ce:4d:09:5e:a8:e4:c6:c1:17:a9:c3:64:37:
                    bc:73:4e:83:b0:58:2a:3b:54:03:51:f8:3c:12:ab:
                    77:66:08:b9:f4:36:4c:7a:66:59:5f:56:01:1d:ea:
                    95:e6:ba:ec:5c:29:28:8e:96:68:fc:5b:71:f1:b1:
                    77:dd:7c:67:18:9f:91:d6:c5:58:f6:07:02:2e:bf:
                    21:df:12:cf:da:f9:f1:66:71:0c:d4:35:14:a1:9a:
                    a3:b7:db:ca:1b:15:39:27:2e:ab:e3:6e:20:5a:03:
                    c6:9a:6d:bc:da:7e:c7:f7:b0:28:00:e9:5d:33:a9:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AB:2C:33:BE:B9:E6:F3:C3:1B:C3:79:93:DE:37:5D:13:6B:04:AF
            X509v3 Authority Key Identifier:
                keyid:25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/25B80D450923FBAF7E31D41324FA2A66D766846C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38372e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:3f:ff:dd:88:24:a1:78:68:99:7a:85:0f:59:a2:a7:93:b5:
         90:7c:54:34:96:ce:c6:5b:cd:db:21:41:c3:d0:be:7d:c4:ca:
         cb:52:a1:a2:8f:f0:a5:fb:8c:22:f8:05:8c:12:47:76:4e:d6:
         85:37:87:c0:79:a8:ee:cc:97:85:54:f3:73:4a:64:d6:8d:df:
         4f:b6:02:47:b3:fd:bf:e4:1f:45:5d:f8:42:c1:72:cd:b5:34:
         ee:62:4f:96:80:3d:e0:5a:2c:b5:3c:b3:83:98:a3:cb:c1:e0:
         56:87:67:fa:2b:7c:7f:c3:10:94:49:9d:3a:ec:a2:53:0e:67:
         1e:05:56:2a:db:a6:6f:d5:fb:48:71:64:26:73:5f:ee:b9:15:
         35:b2:14:98:ef:bf:5f:72:1e:9b:31:19:42:69:41:39:ef:69:
         ed:13:10:ac:ec:31:8a:cb:2a:6d:78:4e:7e:7d:4b:7c:04:36:
         8a:93:e7:33:7a:91:78:a3:c4:30:a3:f5:eb:5f:1b:e6:12:61:
         6a:44:f1:6a:00:5b:2c:1c:1a:f4:e0:c4:b4:1e:79:77:5b:8f:
         87:7e:9f:3d:8d:a6:44:e4:76:7d:92:b4:26:a1:08:d1:f0:ce:
         5b:64:db:10:56:1a:f4:cc:87:54:6a:fc:4c:07:c9:4a:01:98:
         df:39:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:37 2025 by rpki-client