Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39332e302f32342d3234203d3e203533313835.roa
File:                     3138362e3232372e39332e302f32342d3234203d3e203533313835.roa (raw, json)
Hash identifier:          9xdRr8KPH8osBaXHvt/gwq0G6xl4WZbIjda9KK5jgDQ=
Subject key identifier:   1C:A9:40:6F:90:4B:94:E6:E6:F9:9B:43:55:AD:CE:5B:D9:C8:EB:75
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       71FDB3A32D37B96DF6CEB651C541E29195695E39
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39332e302f32342d3234203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:53 +0000
ROA not before:           Sat 15 Jul 2023 03:13:53 +0000
ROA not after:            Sat 13 Jul 2024 03:18:53 +0000
asID:                     53185
IP address blocks:        186.227.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fd:b3:a3:2d:37:b9:6d:f6:ce:b6:51:c5:41:e2:91:95:69:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:53 2023 GMT
            Not After : Jul 13 03:18:53 2024 GMT
        Subject: CN=1CA9406F904B94E6E6F99B4355ADCE5BD9C8EB75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:13:1f:2e:cd:6f:2f:0b:4b:f0:a5:ae:69:
                    6b:78:aa:a1:89:f9:6c:d5:bb:97:45:18:4c:33:4c:
                    3a:f0:6a:4a:22:d9:51:6f:af:ab:df:ab:4a:48:4f:
                    2a:9e:e9:49:03:fe:f2:c7:be:63:a7:bc:52:2f:c7:
                    12:de:1f:d5:52:79:34:6b:5a:8a:84:c3:b5:bd:99:
                    ad:b5:92:0f:84:ce:d2:e7:66:5a:51:27:c5:9e:f0:
                    f2:71:17:0f:a5:36:dd:d4:61:f0:37:86:a2:a0:c1:
                    52:69:69:7a:bb:ef:b1:3d:b2:84:97:fc:ba:e8:b0:
                    a4:ca:88:82:2f:c0:8a:96:b6:a7:3e:f6:ea:8e:aa:
                    f0:f4:c3:a5:e4:dd:64:61:06:84:a7:90:5d:23:01:
                    05:83:9a:cf:a7:34:3e:3c:84:27:0b:5e:4e:90:79:
                    92:25:b3:a5:7d:32:47:e9:e1:c8:11:1c:b6:74:4a:
                    99:c1:77:d2:3d:37:59:d7:76:ac:94:77:46:8a:2f:
                    dd:c8:5d:34:83:b4:27:64:ab:15:f9:6d:06:42:19:
                    46:50:40:a0:c7:d1:06:50:b7:e0:63:cb:93:73:66:
                    8e:5b:c1:7d:00:e3:e2:25:c2:f7:c3:b0:d7:5e:94:
                    2c:db:b6:7b:ec:c2:01:58:4e:af:8d:60:ba:75:55:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:40:6F:90:4B:94:E6:E6:F9:9B:43:55:AD:CE:5B:D9:C8:EB:75
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39332e302f32342d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:30:ae:f8:4e:24:52:36:2d:83:11:e5:02:d3:0d:5b:0b:13:
         9d:53:11:78:87:dc:04:8c:45:81:13:55:83:a0:ac:53:c5:ea:
         04:82:32:21:10:92:5a:12:2a:11:37:41:e7:ad:c0:c8:b6:f3:
         99:3c:a7:ba:24:7f:d1:a7:92:84:02:31:7a:c0:57:d2:36:e1:
         35:bd:5c:b5:17:cd:57:cb:0f:83:e4:15:32:e0:7f:f2:a7:5b:
         ad:7c:87:df:a1:1b:23:8c:df:06:9c:91:25:2f:7e:d7:a0:50:
         84:a8:49:9a:d4:03:4a:1e:9f:75:af:85:92:28:8d:1c:fb:fc:
         86:bc:df:d3:86:6b:1a:93:16:83:44:fa:89:d7:9c:c2:46:c7:
         04:88:9a:36:2b:9f:42:cb:26:89:b3:3f:c2:75:34:6c:82:9d:
         64:a2:3f:6e:59:20:1d:ce:ee:2c:be:6c:27:30:f4:97:e5:ff:
         fc:24:43:65:1a:e8:7f:d9:21:24:2a:1a:41:12:c5:21:e5:ca:
         b9:25:e8:d7:27:e1:e1:36:05:c2:cf:5d:13:b2:4a:6e:73:1a:
         08:a0:4c:c9:26:26:f5:a7:eb:b2:cd:67:84:53:ad:bf:08:6d:
         72:a5:bc:60:69:51:77:7a:fa:20:a2:f9:bf:c0:3b:67:d1:0c:
         ea:4f:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:44 2025 by rpki-client