Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39342e302f32332d3233203d3e203533313835.roa
File:                     3138362e3232372e39342e302f32332d3233203d3e203533313835.roa (raw, json)
Hash identifier:          WDh/QKqovGKvGL+nBS3qokImuPvitIZBs+v4MfHBrwo=
Subject key identifier:   1E:A7:8B:7E:FE:E7:0B:C2:E3:02:93:34:7A:37:72:A4:82:C0:C2:FB
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       41654A9BC41BC0E22649D8F2FCC749099B29B2F2
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39342e302f32332d3233203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:54 +0000
ROA not before:           Sat 15 Jul 2023 03:13:54 +0000
ROA not after:            Sat 13 Jul 2024 03:18:54 +0000
asID:                     53185
IP address blocks:        186.227.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:65:4a:9b:c4:1b:c0:e2:26:49:d8:f2:fc:c7:49:09:9b:29:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:54 2023 GMT
            Not After : Jul 13 03:18:54 2024 GMT
        Subject: CN=1EA78B7EFEE70BC2E30293347A3772A482C0C2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:53:88:da:08:bb:a9:cf:78:4b:09:4b:f6:
                    42:29:85:01:cf:e4:d0:bd:cb:e6:9d:68:72:3a:f5:
                    57:68:cb:6e:ef:0b:73:36:98:b6:ff:16:9e:3d:f6:
                    7d:ab:f4:99:28:38:d3:44:5a:98:48:7e:03:b9:7f:
                    96:36:ac:55:69:4b:ea:34:18:9d:78:d7:3c:f1:ed:
                    53:3c:95:c4:6a:ee:74:bc:b0:01:58:3d:be:0d:de:
                    63:b9:02:c5:c3:d2:e6:54:e7:0d:33:03:03:f2:17:
                    a9:ad:f8:5a:f6:09:7b:e9:bc:4e:e1:2e:ad:0e:d6:
                    2d:1f:38:66:0c:46:5b:a6:56:0d:d8:ae:88:9f:e7:
                    9d:dd:13:56:1c:00:b2:db:5b:08:fc:61:6f:b2:c7:
                    91:45:72:17:24:db:a6:74:a9:ff:e5:52:ed:35:2f:
                    43:03:19:3f:d3:57:28:4a:8b:7f:95:18:42:ca:72:
                    6e:0c:a9:f9:fb:6a:09:b9:dd:89:73:43:cc:17:07:
                    96:f0:db:9a:1c:23:51:cb:69:98:b0:d6:7b:78:eb:
                    3c:c5:63:46:7f:c7:d0:8d:b6:fd:b1:b6:af:77:a3:
                    45:49:96:e1:1d:f1:c3:6b:a1:5a:03:57:77:70:8b:
                    57:6e:9e:27:a7:af:56:53:a0:fc:ea:be:4f:b3:ef:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:8B:7E:FE:E7:0B:C2:E3:02:93:34:7A:37:72:A4:82:C0:C2:FB
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e39342e302f32332d3233203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:fb:c6:69:d1:a2:3a:82:d7:0d:59:4c:e0:f1:1a:24:70:
         dd:41:bc:a4:6c:e9:e2:ed:60:04:98:8d:6b:ef:58:78:98:3d:
         54:04:53:c8:4b:92:c1:41:88:7f:9f:4e:a6:c0:08:9a:07:06:
         04:45:23:46:de:d2:3d:e0:47:68:b3:bf:43:bd:2a:db:bc:02:
         41:8c:77:c8:5f:f6:81:37:7b:7b:1e:3e:3f:1c:6c:32:a6:4e:
         7d:c3:70:cd:75:39:a9:e7:c0:f1:f2:bf:bc:4e:5f:f8:b2:b0:
         4a:20:17:98:a2:4b:0c:ee:94:d3:35:8d:67:72:fb:97:66:38:
         d0:e6:88:c3:18:13:bb:03:0d:35:29:8b:71:36:6c:f4:9d:3e:
         ea:e6:b0:dc:8c:c8:e7:ac:4d:4c:a7:bf:8a:fb:2b:81:25:5f:
         0a:c8:06:4b:e2:42:fb:c0:87:a5:ef:0b:88:0a:12:94:d5:13:
         af:43:93:1b:20:47:cb:bc:5d:a4:ec:9e:2c:11:bc:e5:75:ae:
         58:42:81:0e:cf:76:9c:6d:c6:84:34:4f:ef:c5:88:cc:31:b8:
         a5:b7:03:28:f2:ed:e2:56:d1:3e:be:62:4a:e7:9c:12:1d:8f:
         f3:9f:24:47:21:f4:32:ce:b9:9e:3b:49:31:f5:55:ba:98:76:
         5e:df:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:08 2025 by rpki-client