Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138362e3233352e302e302f32302d3230203d3e203533303539.roa
File:                     3138362e3233352e302e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          nHmM5fef3Ol7Z8ziUUkwaw4dw2At3R/O2/8NgrSCVWA=
Subject key identifier:   5E:A1:B6:0E:4B:A2:FA:87:37:04:11:28:B2:85:55:B9:CE:B6:2A:5F
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       1678EA266C54126E864EC68A47073D1FC9AA16C0
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138362e3233352e302e302f32302d3230203d3e203533303539.roa
Signing time:             Mon 26 Sep 2022 12:28:31 +0000
ROA not before:           Mon 26 Sep 2022 12:23:31 +0000
ROA not after:            Mon 25 Sep 2023 12:28:31 +0000
asID:                     53059
IP address blocks:        186.235.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:ea:26:6c:54:12:6e:86:4e:c6:8a:47:07:3d:1f:c9:aa:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 26 12:23:31 2022 GMT
            Not After : Sep 25 12:28:31 2023 GMT
        Subject: CN=5EA1B60E4BA2FA8737041128B28555B9CEB62A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:38:23:bb:e1:a3:22:03:bb:79:1a:0f:90:
                    cc:f6:55:86:9f:9f:37:7d:be:c6:52:a5:05:72:e0:
                    2c:d7:e2:a4:31:18:67:b3:ec:83:2e:a1:18:1d:c7:
                    56:05:39:61:99:bc:0b:96:6e:12:3f:dd:cf:e9:48:
                    eb:32:3f:51:19:10:ce:8d:f2:be:42:8c:89:c4:39:
                    2e:f4:72:2d:e1:f1:52:51:43:0e:95:84:ec:1e:51:
                    ef:65:4b:d6:db:ad:32:05:e6:14:e5:3e:41:3d:50:
                    a2:a9:99:36:bd:9b:ff:af:ed:86:d1:82:f2:59:ea:
                    1e:28:be:77:fd:3c:41:18:16:46:cb:e3:bb:08:36:
                    90:fb:6c:26:6b:23:45:f4:bb:7e:2d:7b:08:a7:a4:
                    e3:f2:84:a5:73:6a:82:6e:b5:ca:4f:24:97:57:ce:
                    e3:ab:55:b6:1d:2f:e8:e1:fa:c9:ad:c5:23:8d:3b:
                    c9:bc:39:41:0d:04:26:49:51:c6:28:82:21:45:da:
                    e2:cf:31:4e:14:87:a1:68:80:5a:a1:76:95:a5:96:
                    3e:e6:9b:ae:45:28:64:44:c4:33:0b:4a:95:10:8d:
                    81:e5:af:5e:7f:85:16:59:54:26:65:03:ac:5d:27:
                    0a:f9:f5:29:69:64:bf:e9:ac:53:c3:36:d5:d3:71:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A1:B6:0E:4B:A2:FA:87:37:04:11:28:B2:85:55:B9:CE:B6:2A:5F
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138362e3233352e302e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:f4:58:9d:82:0b:89:82:a5:f7:e1:d3:f2:7f:b6:00:8b:
         11:72:8d:f4:fd:c1:e6:2a:49:88:07:87:f5:98:a2:58:33:0c:
         f6:c6:d0:2d:0b:e2:e5:79:6b:a6:82:45:82:f3:ae:bb:8f:e3:
         c2:76:4e:e8:e4:ce:6c:79:74:60:85:13:78:cf:3b:49:cc:77:
         60:3f:26:ed:a6:f4:53:19:d5:91:1b:9d:a2:17:2c:b2:5d:f1:
         e9:7b:f7:82:a7:e4:34:74:fb:db:39:58:44:ad:a8:85:92:a6:
         55:9e:e5:47:e7:eb:ab:35:f2:56:b2:d8:ec:44:80:5f:ab:5a:
         19:77:34:e2:65:90:4c:bb:00:fb:df:d9:49:1a:bf:00:12:ae:
         31:89:7d:79:a4:8e:ee:7b:83:33:4d:7f:44:39:3e:d4:19:e7:
         7c:71:6d:45:c0:1a:48:da:ef:d2:1e:3e:a0:95:46:b6:d0:2b:
         0a:70:7f:15:5e:4c:41:95:3f:63:4d:67:f0:cf:57:d3:f6:6d:
         1f:74:f7:f9:f9:b9:2e:e0:d8:25:a3:91:8b:5a:18:f1:63:16:
         04:c3:11:6d:9b:b6:f0:6a:80:06:79:2d:5d:ff:9a:cd:d6:cb:
         b4:f7:f7:66:6d:79:db:8e:15:74:8e:bb:66:46:50:17:84:8f:
         51:be:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:54 2025 by rpki-client