Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38332e302f32342d3234203d3e203533313835.roa
File:                     3138362e3232372e38332e302f32342d3234203d3e203533313835.roa (raw, json)
Hash identifier:          alw2UIxZn7gOC7NYbm/pGJ2ZvOdBwEpN48a9jXurHXU=
Subject key identifier:   BB:65:14:97:85:0D:47:BD:5F:9C:9A:87:04:F3:8E:72:70:18:77:B0
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       4B79FD591AAB26D99A28705DC37F8387DFDAE8E4
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38332e302f32342d3234203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:52 +0000
ROA not before:           Sat 15 Jul 2023 03:13:52 +0000
ROA not after:            Sat 13 Jul 2024 03:18:52 +0000
asID:                     53185
IP address blocks:        186.227.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:79:fd:59:1a:ab:26:d9:9a:28:70:5d:c3:7f:83:87:df:da:e8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:52 2023 GMT
            Not After : Jul 13 03:18:52 2024 GMT
        Subject: CN=BB651497850D47BD5F9C9A8704F38E72701877B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:0f:8a:59:5d:3c:0b:7b:5c:03:6d:37:59:
                    da:a4:ec:e5:db:be:b7:07:d8:65:52:dc:ee:7e:ff:
                    db:21:39:5a:fd:cb:65:8b:e1:cc:4e:b3:fe:b8:ff:
                    96:12:6f:9e:fd:70:dc:5e:88:f8:ee:93:d8:db:88:
                    91:6f:d2:4a:d8:30:4b:8a:36:2d:81:b4:88:f0:4a:
                    3a:18:9b:80:54:24:93:69:d2:21:3a:45:03:97:0a:
                    3a:e3:c0:d9:1c:79:1e:9c:90:f2:7d:c9:bf:05:cd:
                    e6:d5:de:10:c6:4a:d5:82:75:1b:cd:9e:5a:f5:03:
                    e0:04:af:8d:c1:b4:b1:ac:0b:9e:b5:7f:34:13:c7:
                    5d:00:ef:47:15:f1:18:44:07:92:0e:e5:c2:b7:10:
                    83:88:34:0f:19:8f:4e:e0:60:b1:db:4e:cc:8e:d8:
                    bf:67:c6:95:b1:3f:6a:a2:fc:91:a0:cb:fe:b1:bc:
                    bf:3c:75:c5:a8:b7:41:10:6c:d0:29:e2:46:55:41:
                    37:4e:36:43:81:19:ba:37:ad:12:97:12:8a:b6:21:
                    03:39:0f:47:b9:40:6f:83:0e:54:a9:0b:a9:18:d1:
                    d2:f7:31:51:60:76:5a:ae:f9:e8:61:59:dc:c9:25:
                    36:ff:5e:1e:fd:3a:c0:02:4f:d1:ae:9f:2a:1e:ec:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:65:14:97:85:0D:47:BD:5F:9C:9A:87:04:F3:8E:72:70:18:77:B0
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38332e302f32342d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d0:23:24:71:fa:dd:2f:03:04:e8:15:ca:da:3b:05:ac:a0:
         b2:2c:5f:75:d1:30:37:dc:36:14:87:4e:97:6f:ae:98:4f:15:
         2c:37:c4:a7:45:84:b7:4b:af:67:8e:97:0c:58:cf:7c:fd:74:
         8e:1d:08:b2:fa:3c:de:4e:fe:ee:46:24:fb:03:b2:19:ea:1e:
         7e:4e:5e:72:09:81:77:cb:03:39:ef:90:de:93:bc:ab:2f:f7:
         68:a4:cb:ad:b0:60:78:49:a0:7e:c8:a6:07:0d:cf:f7:b0:f4:
         6e:71:72:29:e0:d4:4e:78:06:92:9c:44:2e:98:8f:a4:a7:94:
         b7:12:00:65:a1:f6:d5:b5:68:02:41:a6:2a:73:b1:61:f4:11:
         f8:25:2b:67:c7:60:14:1a:7b:35:62:38:0e:6f:96:fa:3d:c8:
         38:b8:05:f5:4c:0b:28:32:6c:9e:fd:f3:79:84:f9:77:b4:0d:
         66:5e:e4:11:79:ac:2e:54:64:b6:ab:bc:72:c8:d6:4c:45:cc:
         a2:c7:a5:44:ad:3b:79:5b:31:bd:0a:e7:3b:5c:ad:0a:3f:82:
         1c:8d:6e:e1:97:dc:01:01:6c:09:a0:ad:24:b3:7f:e9:23:28:
         97:0c:f3:c0:02:3a:42:15:b2:97:d3:ba:3b:62:2d:70:bc:74:
         f0:5f:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:09 2025 by rpki-client