Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138362e3233352e302e302f32302d3230203d3e203533303539.roa
File:                     3138362e3233352e302e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          /aACM/XTYk+EmoSA26CPD4XJ5yUapfkgcD3lpXbgSsM=
Subject key identifier:   21:C9:99:7B:C8:05:57:24:EC:9A:F8:96:98:C5:35:11:4E:7A:83:52
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       0BAECA94B819DFC5AFD3E531F90A15A3BA66DF94
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138362e3233352e302e302f32302d3230203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 21:37:15 +0000
ROA not before:           Mon 23 Jan 2023 21:32:15 +0000
ROA not after:            Mon 22 Jan 2024 21:37:15 +0000
asID:                     53059
IP address blocks:        186.235.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ae:ca:94:b8:19:df:c5:af:d3:e5:31:f9:0a:15:a3:ba:66:df:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 21:32:15 2023 GMT
            Not After : Jan 22 21:37:15 2024 GMT
        Subject: CN=21C9997BC8055724EC9AF89698C535114E7A8352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:61:ef:eb:65:8c:af:3a:3d:f4:da:c0:4d:
                    de:ea:2d:a0:9c:b1:77:fb:48:74:ff:d6:d8:2f:13:
                    2b:78:34:4a:2a:4e:a8:5b:d9:fe:4c:66:39:24:51:
                    e2:9b:4c:6f:8d:8b:ed:53:22:fa:b8:e4:14:95:9e:
                    6b:95:4c:44:6d:91:8c:ee:18:74:9e:85:36:71:cb:
                    43:3a:68:c4:00:4f:07:6d:76:47:48:51:d2:ac:59:
                    e4:c9:fe:1f:db:8f:b4:23:da:94:c8:df:e6:4d:8d:
                    1a:62:fa:0f:99:22:e1:28:10:26:fb:3c:3b:cc:21:
                    ca:40:d9:bb:3d:ac:db:b8:e6:81:76:57:d1:b8:d0:
                    23:86:93:f1:77:23:82:f2:74:9a:bc:c4:00:47:f7:
                    26:16:d8:62:b4:46:48:d5:98:24:15:bd:db:6c:a4:
                    d9:1b:f4:1c:87:9d:a7:6c:6b:0c:3a:4b:b5:d9:a9:
                    69:95:06:60:2a:7d:6b:44:f5:46:1f:16:1e:f3:aa:
                    9a:bd:ca:d5:f0:55:ac:0c:64:79:b7:54:dd:f5:28:
                    63:9e:01:d8:d8:3c:20:2a:35:d2:0a:b7:d9:2a:82:
                    07:13:35:16:dc:fb:a6:73:0c:d5:69:6c:16:6d:29:
                    48:03:f8:6f:7f:56:e0:d3:79:aa:df:ef:93:ec:ba:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:99:7B:C8:05:57:24:EC:9A:F8:96:98:C5:35:11:4E:7A:83:52
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138362e3233352e302e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:3e:d1:24:14:a1:ea:2d:e0:82:87:7b:e3:56:94:4a:90:
         dd:35:d1:52:dc:04:f5:a2:90:05:6c:b0:41:30:1b:64:dd:34:
         60:60:7f:96:fb:a5:89:21:55:cd:8d:db:71:3c:05:9c:f0:e5:
         64:d6:c0:9a:bc:44:81:2f:b1:74:15:34:d8:77:4c:f7:d6:bd:
         c0:4c:df:5a:52:b7:d6:a8:69:e7:05:46:4c:87:e4:62:82:aa:
         f9:e5:b7:a7:ed:d0:2e:1e:18:24:35:75:f6:dc:a4:18:93:b9:
         8f:fd:8c:d2:9c:d8:7e:3d:a3:7a:c3:d0:b4:47:2b:79:88:9a:
         ce:54:21:9e:4f:f4:49:aa:f9:83:87:45:d3:1b:68:5c:50:d8:
         65:22:dd:c9:dd:91:57:c2:30:38:25:95:d8:06:fc:74:2d:cb:
         c5:e1:80:6b:4a:f0:88:91:3d:54:1c:20:73:7d:71:29:41:ea:
         c8:e4:e6:62:c5:61:df:25:d8:7e:24:eb:a9:e1:01:18:12:11:
         b9:d0:a8:5b:99:fd:1d:58:1e:ad:8c:cc:14:d7:c1:5b:bf:b7:
         02:a8:dc:be:e3:9c:5e:09:bc:a1:33:19:f0:9c:bc:b4:37:19:
         b5:dd:b4:15:b6:6c:86:5e:84:62:af:28:22:29:01:c6:50:52:
         de:ad:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:44:33 2025 by rpki-client