Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32322d3232203d3e20323633303836.roa
File:                     3138362e3230382e3234382e302f32322d3232203d3e20323633303836.roa (raw, json)
Hash identifier:          Bfg7UD9UKHFj63bd8VMPy9Wk+Cz7sfGb7XoedHN6mv0=
Subject key identifier:   1D:5C:68:85:E7:59:4D:68:15:97:33:2D:DB:C1:D8:E4:C1:12:84:ED
Certificate issuer:       /CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Certificate serial:       225A41CBE626505E35A7CA80E45353B5BA20D7B7
Authority key identifier: 1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32322d3232203d3e20323633303836.roa
Signing time:             Wed 20 Mar 2024 18:57:29 +0000
ROA not before:           Wed 20 Mar 2024 18:52:29 +0000
ROA not after:            Wed 19 Mar 2025 18:57:29 +0000
asID:                     263086
IP address blocks:        186.208.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5a:41:cb:e6:26:50:5e:35:a7:ca:80:e4:53:53:b5:ba:20:d7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
        Validity
            Not Before: Mar 20 18:52:29 2024 GMT
            Not After : Mar 19 18:57:29 2025 GMT
        Subject: CN=1D5C6885E7594D681597332DDBC1D8E4C11284ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:ef:1d:65:bc:bd:56:a4:ea:26:c9:db:b8:
                    a9:5c:7d:48:79:0a:6b:ef:e3:54:12:16:0b:ec:20:
                    aa:de:14:f0:de:a3:3f:1d:91:11:55:15:f1:5f:d4:
                    0a:ab:14:ac:3d:a4:92:c1:9d:35:c5:ab:48:36:10:
                    ff:57:d0:73:a9:9c:f3:5c:d9:cc:a9:5c:59:68:86:
                    1e:2a:06:e4:77:06:71:86:99:39:ea:df:c6:5f:67:
                    13:59:7c:85:e9:69:20:e8:34:65:a8:10:29:d6:ff:
                    1d:25:69:30:8c:a4:2c:50:3f:50:03:a4:04:7f:64:
                    85:a2:4d:68:52:a3:48:6c:aa:fa:af:3f:85:d1:bb:
                    da:55:61:bf:db:76:5f:58:d3:52:6d:b5:6e:f8:77:
                    ca:c5:9f:36:8d:81:64:80:a2:29:33:b0:44:36:cc:
                    00:88:54:d8:97:3b:43:db:1d:9f:05:cd:b1:28:3f:
                    27:91:5b:db:38:2d:9f:17:5e:1d:24:d4:e9:63:91:
                    84:5d:1a:87:f4:a2:35:3d:fc:fd:8d:e3:7a:e9:c8:
                    06:a3:5b:51:3f:73:d5:cf:49:7e:a9:58:af:b2:2e:
                    19:cc:a9:bd:bd:bb:3b:08:64:57:7e:eb:e8:f5:34:
                    c9:6e:e0:bf:8e:e3:d5:be:65:32:bc:4c:c1:56:26:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:68:85:E7:59:4D:68:15:97:33:2D:DB:C1:D8:E4:C1:12:84:ED
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32322d3232203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:f2:02:40:92:e7:21:a1:dc:89:94:91:c6:d0:ed:a5:3a:
         42:cd:77:78:7a:b4:48:d7:6c:99:37:24:97:47:22:33:1c:37:
         cc:68:86:e1:56:97:06:0f:29:d5:22:f8:f9:54:a4:a2:2f:da:
         37:df:1f:8e:a5:eb:55:da:cf:c6:e0:79:89:30:ee:68:8a:50:
         f6:19:d6:75:2b:ac:50:bc:aa:50:75:9c:c9:47:bb:70:39:c0:
         93:93:a3:3b:ee:5e:e5:64:14:b2:6a:75:0c:1e:ec:f0:46:31:
         20:d1:e7:0e:f4:39:97:df:72:8d:3d:ca:9a:ad:3f:66:dc:9c:
         ae:12:9d:96:67:1a:d9:6e:35:87:76:ea:81:ae:d9:0f:55:51:
         e6:74:5c:ee:2f:79:9f:e4:7b:b9:a7:86:8f:e2:de:b1:5e:7f:
         65:67:58:88:04:f9:07:d6:66:81:b4:c8:de:52:fd:bc:8b:78:
         2a:da:ba:b6:76:c4:9e:88:88:7c:ed:b1:2b:d5:a0:97:67:42:
         d9:74:71:9b:5f:08:5b:51:ce:4a:db:27:58:08:5d:44:ff:62:
         4c:52:92:e2:1a:a8:52:df:7c:3a:6b:79:19:f9:99:8a:71:da:
         de:63:c5:96:8c:89:01:bb:8f:35:da:d7:a1:11:89:12:af:69:
         c9:42:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:54 2025 by rpki-client