Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3232302e302f32332d3233203d3e203238353737.roa
File:                     3138362e3230382e3232302e302f32332d3233203d3e203238353737.roa (raw, json)
Hash identifier:          GoBk60akvRc6WWku6hBg6SD1R5rA3w5MLCTBO3k1L1g=
Subject key identifier:   77:32:CB:83:CC:EF:EF:5E:3D:A2:A1:F9:FF:84:1C:C4:B0:16:BE:15
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       4463B33FCEDB49C0F0B8D1BD27FFF8BAF9996381
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3232302e302f32332d3233203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:57:19 +0000
ROA not before:           Tue 30 Jul 2024 18:52:19 +0000
ROA not after:            Tue 29 Jul 2025 18:57:19 +0000
asID:                     28577
IP address blocks:        186.208.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:63:b3:3f:ce:db:49:c0:f0:b8:d1:bd:27:ff:f8:ba:f9:99:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:52:19 2024 GMT
            Not After : Jul 29 18:57:19 2025 GMT
        Subject: CN=7732CB83CCEFEF5E3DA2A1F9FF841CC4B016BE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:87:0c:7f:bd:0c:bc:3c:66:1d:55:77:d1:
                    61:b4:e9:71:1d:27:b9:70:9e:b5:ea:a1:54:94:42:
                    7d:96:3c:b5:e4:bd:f9:7b:05:3c:15:d4:16:af:0e:
                    f9:bc:25:14:cf:d6:5a:87:87:12:83:bc:28:f9:db:
                    5f:9e:94:4c:21:92:7d:a9:5e:a1:b6:9c:14:73:46:
                    b9:b0:df:d0:c9:82:7d:88:ac:c6:2e:90:c9:4f:2f:
                    80:eb:39:33:6b:b8:94:fe:98:ec:ea:70:c9:2f:30:
                    90:f4:18:12:36:95:37:9c:b9:29:5f:a0:44:76:b5:
                    23:07:f3:88:09:75:33:e9:a5:a1:24:fb:9c:22:90:
                    a7:d6:4b:61:22:0b:43:1b:b1:e8:7c:ae:cb:0e:1d:
                    d0:16:55:6c:22:3a:5a:7d:b1:25:f2:2c:db:24:6a:
                    8c:8f:88:60:bc:50:ea:55:c5:2d:b7:7e:d0:1e:48:
                    d1:ca:57:d4:11:45:84:58:45:ca:0e:0a:a3:bb:76:
                    9b:b4:19:01:d7:05:1a:02:7e:bb:9c:5c:ea:2b:6a:
                    25:9c:ab:f8:bd:9e:98:34:51:83:3e:2c:ed:14:95:
                    31:b8:8d:12:a0:58:cb:f1:f7:fe:b1:d2:2a:26:cf:
                    83:5a:c5:51:5e:07:78:8a:eb:11:2e:35:96:d2:b4:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:32:CB:83:CC:EF:EF:5E:3D:A2:A1:F9:FF:84:1C:C4:B0:16:BE:15
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3232302e302f32332d3233203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:79:6b:cb:6e:8e:6b:57:71:6c:ae:43:13:48:51:11:8b:
         3a:58:10:a5:ef:54:b3:78:a7:99:8f:46:a7:20:a2:29:bb:64:
         07:1e:3d:a7:86:7a:0d:b7:28:42:6c:67:a6:1a:13:5b:55:5b:
         1d:57:96:ad:b2:af:1f:a9:f4:56:46:ee:60:83:76:ac:94:5a:
         a9:d4:1c:54:3d:be:66:fd:1d:cb:55:79:60:0c:91:fa:99:34:
         23:f0:85:62:a0:37:c6:f8:85:3d:dc:98:e1:83:48:c9:18:ca:
         8c:c6:4e:78:da:d8:21:f5:11:70:e7:e2:37:d4:0e:91:71:46:
         c7:87:95:f6:e6:0b:85:7b:60:8e:08:d8:d4:5c:28:1c:99:ac:
         7e:16:e5:23:66:6e:1f:14:89:62:b5:9a:b6:d3:58:27:f8:1f:
         5a:1c:af:a6:a6:4a:0e:a8:56:20:35:a2:fe:02:99:c0:7e:b0:
         ce:4c:67:d7:a6:a0:de:9c:6b:a4:5f:ef:54:b2:d7:00:85:f2:
         dd:cb:69:3e:cd:0e:c2:7d:4f:77:f0:04:12:f1:d0:89:90:e6:
         62:e0:00:3f:be:c7:d8:44:46:eb:1a:7a:fe:d7:01:87:e3:3b:
         9f:a4:76:cc:7b:c6:85:0b:ab:28:f9:07:45:02:29:ed:f8:b1:
         07:61:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:43:05 2025 by rpki-client