Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38362e302f32332d3233203d3e203533313835.roa
File:                     3138362e3232372e38362e302f32332d3233203d3e203533313835.roa (raw, json)
Hash identifier:          fibnp4sdSy3RNy4v9NfQwJgQ9U1z9COrVIxfareFKeU=
Subject key identifier:   9E:24:2E:F3:E2:CC:3B:AC:A3:4A:2B:19:73:0D:98:C2:CC:68:1D:F4
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       51630F0840E1BD0335C6E4BFE3E186C5D6FE24AF
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38362e302f32332d3233203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:50 +0000
ROA not before:           Sat 15 Jul 2023 03:13:50 +0000
ROA not after:            Sat 13 Jul 2024 03:18:50 +0000
asID:                     53185
IP address blocks:        186.227.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:63:0f:08:40:e1:bd:03:35:c6:e4:bf:e3:e1:86:c5:d6:fe:24:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:50 2023 GMT
            Not After : Jul 13 03:18:50 2024 GMT
        Subject: CN=9E242EF3E2CC3BACA34A2B19730D98C2CC681DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:93:51:80:2a:6c:b9:2a:f2:2e:be:4d:3a:
                    aa:d6:e4:1b:8a:ce:05:20:31:c6:26:2c:92:da:c4:
                    ab:d3:6a:a9:fd:9b:13:96:1f:e8:f1:41:bf:74:83:
                    dc:16:0c:80:e5:e5:58:f8:5a:af:f4:94:aa:4a:d7:
                    5b:29:6e:79:94:f6:2e:9c:e0:c6:6a:0b:6c:13:0d:
                    3c:0e:63:4f:0f:85:3b:b8:30:a9:9e:3c:b6:a7:f6:
                    32:47:80:89:2a:98:d6:66:2f:34:8c:29:9f:36:93:
                    65:90:1a:e5:ca:41:5e:a6:2e:a0:00:21:cf:d1:c6:
                    69:da:89:2c:bc:6d:3d:45:c4:75:56:1a:c8:f5:2b:
                    e8:d5:60:e9:3e:99:5a:a0:54:cd:58:b7:01:68:02:
                    a1:51:94:51:c6:79:4b:26:c5:38:b1:83:58:9d:de:
                    95:0a:3c:64:e6:00:17:68:dc:67:98:27:c0:5e:46:
                    e0:54:c9:c2:42:9c:da:6d:07:a3:98:75:43:ac:bc:
                    ef:86:52:3c:c2:ee:01:3a:fd:78:f8:88:1c:64:2c:
                    98:0f:57:c4:7f:89:7b:e7:70:fd:32:98:99:65:80:
                    32:9d:39:d9:30:6b:c9:53:e4:a1:22:77:ab:19:41:
                    e6:6b:8d:f7:ef:5d:27:6b:94:39:9c:2c:2e:f3:58:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:24:2E:F3:E2:CC:3B:AC:A3:4A:2B:19:73:0D:98:C2:CC:68:1D:F4
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38362e302f32332d3233203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:74:1c:22:44:19:c0:e6:6f:c3:43:bc:12:6a:ba:87:86:
         7c:5b:04:d0:c0:83:de:0f:76:04:fe:6b:26:ce:e5:fb:b5:eb:
         b4:62:a1:f3:b0:5b:d3:96:91:fe:4a:8b:89:e8:f9:89:05:95:
         26:e0:6f:62:37:64:cb:2e:e5:78:88:5a:d7:68:2d:66:e3:9b:
         d3:e4:ab:1f:4c:18:98:79:80:db:62:78:20:de:e8:a9:f7:60:
         a8:e3:a5:77:bb:dc:bd:9e:00:af:42:64:eb:10:45:6a:9f:b2:
         ca:eb:76:e7:d4:e2:2b:77:bb:98:c4:c7:2a:7f:c1:32:e1:d4:
         bf:9d:85:e6:a4:18:aa:9c:8d:ef:6d:87:78:53:2b:eb:4a:de:
         da:c0:45:bf:a6:ba:27:ab:49:9c:6a:ec:c1:a9:a3:66:7e:89:
         83:19:1c:f8:0e:17:a1:3c:17:57:20:f8:53:87:57:ee:fc:f7:
         a4:66:fd:ee:a1:9b:31:cc:a6:a6:d8:dc:14:d7:f4:2b:4e:6f:
         73:2b:11:f5:57:18:2a:98:75:f6:7f:f5:a6:b5:2c:7c:fb:00:
         22:84:d1:f9:ac:1d:84:48:96:c8:72:7e:b4:78:1f:41:c0:ba:
         55:50:39:92:b9:74:a5:9b:55:1e:3c:bd:b1:df:fe:29:89:84:
         21:cb:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:05 2025 by rpki-client