Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32332d3233203d3e203533313835.roa
File:                     3138362e3232372e38302e302f32332d3233203d3e203533313835.roa (raw, json)
Hash identifier:          AqyFOh8kYCBUJZItjP1v6gQvZBKB2xcQ0Ssuw4p8j2k=
Subject key identifier:   14:DC:EE:B3:C9:92:81:83:A2:C5:E6:54:2A:2D:7F:3A:D0:E6:E7:C4
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       3272A7FE17C27CC3BA22356418B43DA979FFB29E
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32332d3233203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:54 +0000
ROA not before:           Sat 15 Jul 2023 03:13:54 +0000
ROA not after:            Sat 13 Jul 2024 03:18:54 +0000
asID:                     53185
IP address blocks:        186.227.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:72:a7:fe:17:c2:7c:c3:ba:22:35:64:18:b4:3d:a9:79:ff:b2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:54 2023 GMT
            Not After : Jul 13 03:18:54 2024 GMT
        Subject: CN=14DCEEB3C9928183A2C5E6542A2D7F3AD0E6E7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:ed:e5:d3:09:db:f8:43:25:5b:fe:86:8d:
                    94:f9:a2:67:ba:80:f0:0c:8e:fd:b6:a1:b9:c4:9d:
                    db:64:bf:d0:51:79:76:33:e6:5e:48:20:34:57:67:
                    21:ec:21:d4:0e:e8:3f:68:7d:16:15:31:4d:fe:73:
                    11:ef:05:a9:fd:35:11:34:28:20:0a:4d:37:9f:46:
                    e7:27:e2:1a:cf:95:ff:f8:b4:ee:54:25:02:42:6f:
                    e8:d3:22:99:a1:de:bd:c5:0d:e9:3d:7d:a8:05:87:
                    d8:b4:00:a4:3b:c5:13:af:97:53:16:84:23:c7:25:
                    34:76:25:76:a6:99:01:1a:55:59:1e:66:7d:66:71:
                    af:6e:da:b3:be:6d:72:cb:8f:b9:74:71:f5:ef:e6:
                    65:77:77:5f:60:fb:e6:b6:9a:37:6c:41:70:1c:dd:
                    35:9e:cc:d2:45:01:91:3f:c2:bf:5e:8d:62:69:12:
                    66:6b:31:82:1b:90:02:84:2e:42:57:50:21:f6:48:
                    9c:07:77:a9:e5:a5:e2:22:ca:a9:7a:b9:05:bb:4c:
                    f9:32:db:06:25:50:c2:d9:6a:b7:e9:9b:3f:49:68:
                    95:55:79:07:21:43:f2:4a:f0:db:f9:c8:7b:6f:0c:
                    a4:0d:c6:ad:77:35:55:65:87:2c:7d:a6:de:37:22:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DC:EE:B3:C9:92:81:83:A2:C5:E6:54:2A:2D:7F:3A:D0:E6:E7:C4
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32332d3233203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:4f:34:29:67:45:d7:0f:d2:b7:f7:25:24:99:96:63:ca:
         43:ce:22:05:12:7d:2e:af:18:0f:a3:52:9f:ef:9d:10:0b:bc:
         7f:74:12:2b:15:23:57:d4:af:18:43:e5:b2:92:45:2a:76:7c:
         33:a7:82:3a:87:21:dd:91:98:3e:6f:08:32:7b:fe:a8:09:bb:
         13:96:9e:f2:b8:8d:df:a7:f5:90:5d:07:44:8d:8d:88:a9:75:
         6e:c3:c6:eb:ed:12:bd:7f:2c:c1:27:02:cb:4f:8f:e1:7a:5f:
         c6:ba:ff:37:a6:1e:f2:6e:cd:fd:a0:6f:3e:3c:29:c0:3b:44:
         b8:ef:03:5c:78:f1:af:10:c3:e5:9a:84:30:01:38:03:8f:32:
         52:65:1d:83:7f:b0:ed:65:ad:81:ef:13:86:60:d1:e8:4b:20:
         47:8e:4f:9c:f3:b0:6a:41:21:d3:dc:8c:04:73:3d:15:cd:c1:
         ad:32:18:a1:bb:dd:30:8e:44:8a:bf:54:f1:54:d1:2a:01:68:
         63:83:a1:4e:4e:4c:0f:e8:0c:da:f0:3d:9b:cb:57:34:1b:fd:
         80:0a:11:af:22:0d:8b:fc:1f:9c:2c:1b:89:c5:b4:45:8e:47:
         e7:69:a9:97:7c:be:61:0c:1e:89:6c:36:e6:fc:65:fc:5a:dd:
         a8:bd:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:34 2025 by rpki-client