Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39322e302f32342d3234203d3e203533313835.roa
File:                     3138362e3232372e39322e302f32342d3234203d3e203533313835.roa (raw, json)
Hash identifier:          0I0puzo1ZOymqkHwDnuBu+IG0Hv7HxA/CFdlre5KlVo=
Subject key identifier:   A4:A1:EF:92:36:F9:F2:BF:80:16:3B:15:E2:1C:5A:B1:A3:77:46:A9
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       59BA5E3EB65D511440D398A7956D2B2829D839BA
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39322e302f32342d3234203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:53 +0000
ROA not before:           Sat 15 Jul 2023 03:13:53 +0000
ROA not after:            Sat 13 Jul 2024 03:18:53 +0000
asID:                     53185
IP address blocks:        186.227.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ba:5e:3e:b6:5d:51:14:40:d3:98:a7:95:6d:2b:28:29:d8:39:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:53 2023 GMT
            Not After : Jul 13 03:18:53 2024 GMT
        Subject: CN=A4A1EF9236F9F2BF80163B15E21C5AB1A37746A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4d:1b:33:e1:2a:7c:74:09:86:d5:b6:09:a0:
                    90:0c:8b:cf:ec:30:ba:ca:b3:fe:f7:74:04:ae:01:
                    91:b2:9a:c8:0b:81:b1:38:8d:1f:f0:b3:65:c7:40:
                    29:cb:af:10:77:ed:a8:30:76:be:b5:bf:7b:4c:ff:
                    30:74:90:fb:cc:f3:21:74:80:d1:bd:45:c0:c5:05:
                    7a:05:07:80:e9:62:a0:23:98:a3:54:ed:91:5b:05:
                    50:10:96:0c:18:31:51:2d:e8:49:3b:71:92:65:91:
                    f6:f7:e2:b2:d3:73:7a:e3:b1:5e:e5:06:d2:76:f4:
                    be:0e:6b:bd:80:1a:76:71:08:f0:bc:70:17:a8:ef:
                    e5:f4:dc:97:0f:39:96:0b:ae:73:ff:7a:5a:ba:a5:
                    2f:f2:4d:8a:5b:a7:c6:11:e9:73:ce:28:c7:66:d5:
                    ec:15:8e:b2:dd:f1:91:f0:d1:08:b8:74:e1:10:ef:
                    ea:6a:a4:cd:49:05:4d:a6:0b:92:49:cf:ba:87:cc:
                    16:4f:ed:d7:4f:28:cd:cc:ba:c9:c2:52:fb:1b:8b:
                    87:ff:bb:ad:2f:b5:fa:82:fc:38:8b:af:da:da:b0:
                    6a:0d:21:29:92:59:c1:78:f2:e6:ae:12:0f:71:fb:
                    36:3b:b6:be:0b:5b:43:18:e8:32:4a:34:e5:18:1b:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A1:EF:92:36:F9:F2:BF:80:16:3B:15:E2:1C:5A:B1:A3:77:46:A9
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39322e302f32342d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:90:33:8e:c6:97:14:2f:de:02:3c:fc:87:e0:90:3b:33:15:
         b8:ac:cc:d3:07:a9:c4:a2:33:46:ad:ea:a5:14:2f:14:9a:e1:
         10:32:89:5c:02:e8:28:03:24:87:b4:7c:a4:4f:b8:66:eb:da:
         e1:6c:a1:aa:8b:ae:48:db:bf:82:b8:08:00:d4:12:b2:f5:c7:
         f7:31:2a:32:c4:b3:c7:18:af:45:09:e5:d1:0e:03:47:e4:96:
         d4:25:d3:b2:c4:91:8b:c8:54:89:85:ca:74:3d:8a:02:a7:cf:
         17:31:62:ad:1f:98:80:32:1e:ed:2b:cf:d0:fe:3d:5f:c1:e3:
         50:e2:76:af:60:c6:ef:5b:e2:38:5f:30:7e:b7:0f:60:2d:ad:
         13:52:19:de:97:37:1e:ca:4c:c9:d0:26:81:e2:98:59:01:5c:
         db:c5:ac:65:f6:9c:7e:72:9e:2f:9a:f0:53:16:66:71:b2:db:
         5b:5d:78:a8:ed:fb:af:f9:d8:a6:55:f7:08:37:ff:81:92:7c:
         a8:40:f7:92:6f:cb:9e:bb:42:db:0b:4b:63:28:a7:6b:84:04:
         0a:33:81:ea:a8:eb:58:4b:66:98:ae:1b:32:cc:14:7f:05:9f:
         c5:30:e0:e0:4a:82:a4:49:23:ff:b6:45:f0:09:1b:32:37:ee:
         88:2e:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:09:13 2025 by rpki-client