Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38392e302f32342d3234203d3e203533313835.roa
File:                     3138362e3232372e38392e302f32342d3234203d3e203533313835.roa (raw, json)
Hash identifier:          zoYwhA2nAaQswliiDEIDpWiyhOvqR+YBVLMaGXL3FQk=
Subject key identifier:   B9:CA:5C:D6:AA:47:CC:65:57:F2:BD:C4:25:A0:B2:EB:20:21:D7:16
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       16DCF54D175C92788691CC21DA6F39EA0D5F27CE
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38392e302f32342d3234203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:54 +0000
ROA not before:           Sat 15 Jul 2023 03:13:54 +0000
ROA not after:            Sat 13 Jul 2024 03:18:54 +0000
asID:                     53185
IP address blocks:        186.227.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:dc:f5:4d:17:5c:92:78:86:91:cc:21:da:6f:39:ea:0d:5f:27:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:54 2023 GMT
            Not After : Jul 13 03:18:54 2024 GMT
        Subject: CN=B9CA5CD6AA47CC6557F2BDC425A0B2EB2021D716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:b1:c4:38:3f:65:7d:52:7a:b7:73:ca:2d:
                    c4:f8:4a:7d:7b:5c:97:b1:d7:af:76:cb:53:e6:41:
                    1f:a2:b9:17:33:c8:d7:5b:22:27:fd:5a:d1:52:d3:
                    84:1f:81:11:8b:f0:6d:9c:74:27:16:28:a3:49:f9:
                    03:92:52:4d:0a:f6:2d:ee:dd:fc:2d:c2:0f:ce:15:
                    91:21:c6:19:b5:3d:13:12:70:de:c7:09:26:ee:1c:
                    62:42:96:3a:99:43:ea:05:b1:79:2d:e6:71:9d:a3:
                    09:80:d1:b7:dd:83:84:81:bd:34:c6:2a:be:11:ca:
                    db:cf:5e:a6:7c:9d:b7:77:b7:00:65:5b:6d:58:c1:
                    bd:bb:1c:ca:6f:af:17:3b:18:a6:01:ef:32:27:31:
                    ed:8f:50:33:66:97:5d:7e:ab:4b:4e:61:18:0c:89:
                    ee:0e:7b:c8:86:be:43:cd:12:5a:b1:b1:29:26:7e:
                    a1:90:53:36:46:df:ca:8f:f7:3e:2d:8f:bd:07:9b:
                    99:f7:f3:d9:73:72:97:1a:17:98:5a:e2:67:30:ea:
                    ea:d8:f0:42:ca:5c:85:63:2d:25:49:98:f5:e4:e0:
                    bf:2f:db:0b:8e:06:f2:f2:74:06:8f:ec:45:8e:64:
                    94:67:5c:0f:84:98:ed:a8:e5:7c:65:a5:2d:b7:df:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:5C:D6:AA:47:CC:65:57:F2:BD:C4:25:A0:B2:EB:20:21:D7:16
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38392e302f32342d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:6c:04:f1:82:08:97:01:b7:02:69:7a:44:b5:71:2d:a3:
         a2:c9:eb:21:6e:ae:71:33:35:a9:ca:4f:cb:ba:9c:4d:44:af:
         a5:67:1a:5e:7f:43:55:e8:3c:af:eb:16:90:df:7f:4a:d6:81:
         dd:37:8e:21:63:00:ea:9e:70:c3:6b:5b:11:a6:1b:0e:fe:63:
         29:53:23:9b:d8:45:34:3e:0a:0c:5b:46:38:68:86:a5:c2:39:
         ea:be:99:78:1f:63:5d:90:a0:f8:36:8f:92:6f:31:9e:1a:c8:
         f7:f9:6c:79:0a:24:9c:e9:57:a4:2e:b0:3a:bf:28:1f:29:e3:
         32:90:e9:3b:d1:54:ab:6d:77:7c:7d:61:11:5d:96:92:08:06:
         54:a4:83:91:1a:02:a3:2f:ed:66:c8:2c:33:31:d7:23:5e:e8:
         a3:67:0d:19:26:fe:3c:c7:11:ee:d6:70:9c:2d:38:2c:dd:0c:
         ef:34:6e:5b:da:56:92:73:f3:f7:ab:ec:ef:f3:57:65:d2:51:
         6e:a3:50:26:e3:12:a0:b4:fe:02:3a:b9:1f:2d:f4:e4:34:ab:
         4c:b4:5d:5e:ad:d6:63:81:60:37:49:fe:e5:13:dc:c4:18:21:
         3b:9a:d9:fb:25:5e:1e:5d:33:df:f9:ab:e3:cf:1a:49:fb:f1:
         5d:97:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:52:28 2025 by rpki-client