Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38362e302f32342d3234203d3e203533313835.roa
File:                     3138362e3232372e38362e302f32342d3234203d3e203533313835.roa (raw, json)
Hash identifier:          pCSjW3puqmbAIU8oyj+yGnzPup+qih/Od88mc2ieD6Y=
Subject key identifier:   DF:56:70:2E:22:E4:05:BB:4C:B3:D3:59:5A:D8:FB:2E:B8:CD:85:4C
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       5BF3BB276F1331F1677C65E99FE44AF45882304B
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38362e302f32342d3234203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:52 +0000
ROA not before:           Sat 15 Jul 2023 03:13:52 +0000
ROA not after:            Sat 13 Jul 2024 03:18:52 +0000
asID:                     53185
IP address blocks:        186.227.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f3:bb:27:6f:13:31:f1:67:7c:65:e9:9f:e4:4a:f4:58:82:30:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:52 2023 GMT
            Not After : Jul 13 03:18:52 2024 GMT
        Subject: CN=DF56702E22E405BB4CB3D3595AD8FB2EB8CD854C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:08:a8:5c:6d:8c:2d:57:08:ac:d3:f0:93:
                    95:19:f1:68:f5:a5:aa:ba:4c:2c:e0:4b:f4:35:ff:
                    1c:f7:e4:8b:6f:80:c7:fb:84:95:12:7e:3d:fa:cc:
                    3d:9e:10:89:db:20:f8:3c:42:0c:9b:77:a1:e6:10:
                    ef:9e:91:a0:17:75:b6:8f:58:a3:b5:13:bd:d5:9f:
                    f8:b4:65:df:f3:0a:1a:4f:0b:f2:c7:62:ed:de:f3:
                    87:3f:72:a4:e6:f7:00:0c:52:62:d4:82:f2:ae:27:
                    25:3d:4a:09:af:d9:dc:c2:75:ef:76:2b:2f:81:a4:
                    4e:3d:ca:f9:3b:6c:e5:cd:3e:9e:44:1d:e5:aa:bb:
                    17:f7:dc:02:88:ac:32:8c:a9:eb:95:f1:e0:83:64:
                    dd:e5:ec:91:62:1e:ba:41:a6:08:0c:28:98:0a:ea:
                    4e:79:62:5c:8e:36:b1:f8:09:e7:69:c6:91:a8:95:
                    d2:6f:65:6b:dd:91:4a:63:e5:1b:a9:59:ed:5d:79:
                    76:d7:1b:50:b7:99:bb:97:d8:0d:38:ac:be:f6:c0:
                    70:1f:c1:09:7e:ca:a4:08:92:e1:7f:ed:c4:0c:93:
                    29:07:8a:89:2c:70:87:71:a5:28:61:f6:53:9b:4c:
                    82:0a:00:4e:00:02:e2:20:61:d9:0a:ce:92:2c:e7:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:56:70:2E:22:E4:05:BB:4C:B3:D3:59:5A:D8:FB:2E:B8:CD:85:4C
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38362e302f32342d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a1:41:56:3b:bf:ee:12:ef:09:22:ab:0d:2d:92:7d:90:4c:
         a8:ca:c7:90:d5:19:ba:6c:8d:75:94:70:ea:a9:c9:3e:12:3a:
         71:9b:99:1e:5e:d0:64:18:87:e1:bb:db:c4:0b:85:69:f1:33:
         90:e2:96:51:a9:81:76:a6:c1:0e:b2:46:f2:cc:3e:ba:51:53:
         67:6c:bc:ff:07:02:39:7d:96:42:ca:f9:cf:ad:52:11:4a:d4:
         02:07:8e:05:b6:2e:ce:65:52:be:34:53:ac:0e:39:88:c1:20:
         e2:ec:b8:3e:d8:fe:ed:05:0e:56:02:f9:33:fb:df:09:d1:40:
         d8:37:56:b3:4d:7b:c1:b3:b9:a1:1e:1c:d0:1d:19:1f:39:2b:
         7e:27:15:89:27:52:36:f3:36:27:1b:85:b9:1d:1a:05:81:3a:
         86:10:ce:5c:d6:5b:db:63:66:a2:ec:ba:7c:d2:12:66:42:43:
         13:a6:6a:17:a4:f1:89:10:8d:e0:95:dc:bd:0c:01:16:9a:d7:
         1c:84:e2:16:b9:24:9d:bc:cb:21:b7:72:44:7f:fd:75:0a:18:
         6a:93:40:20:60:7e:4e:67:10:77:a9:71:c4:67:1b:19:f0:ee:
         31:b5:b0:88:5a:2d:8a:f6:e8:3b:c0:1a:e5:5c:cd:99:e2:be:
         ec:38:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:20 2025 by rpki-client