Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3138362e3233332e35362e302f32322d3232203d3e20323633303639.roa
File:                     3138362e3233332e35362e302f32322d3232203d3e20323633303639.roa (raw, json)
Hash identifier:          cTm4nXfKgo17B4lOCVxkTQIo7PPneCc7tUxVsoquHi8=
Subject key identifier:   9C:4D:F7:BE:EB:55:D3:BB:67:D2:57:B0:BC:F6:A8:6B:58:50:D4:CD
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       5946644D7917092B4AC7E59D2C99FFED4AAE7EDC
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3138362e3233332e35362e302f32322d3232203d3e20323633303639.roa
Signing time:             Wed 25 Jan 2023 18:31:38 +0000
ROA not before:           Wed 25 Jan 2023 18:26:38 +0000
ROA not after:            Wed 24 Jan 2024 18:31:38 +0000
asID:                     263069
IP address blocks:        186.233.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:46:64:4d:79:17:09:2b:4a:c7:e5:9d:2c:99:ff:ed:4a:ae:7e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Jan 25 18:26:38 2023 GMT
            Not After : Jan 24 18:31:38 2024 GMT
        Subject: CN=9C4DF7BEEB55D3BB67D257B0BCF6A86B5850D4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:a0:31:4e:49:98:2d:53:10:28:ed:44:9d:
                    45:69:5b:a9:37:a6:1d:b9:48:d6:fb:b1:8e:36:a6:
                    63:dd:9f:d3:a0:b7:2f:c1:6d:0e:06:24:fe:46:87:
                    7c:11:f7:e6:e6:86:3d:46:77:07:b4:ec:07:c6:71:
                    b2:c1:4b:f9:8c:e2:9d:2e:d4:53:30:75:e6:39:15:
                    e5:7c:a3:b3:e6:2d:1c:2e:08:f0:b6:bb:59:e9:a4:
                    88:8a:da:3d:7a:7c:34:7e:0b:df:65:a3:90:91:21:
                    e0:ca:66:81:3c:f8:41:8d:51:81:51:f9:86:da:d1:
                    e8:ad:81:1e:4a:11:b2:c9:58:76:96:b2:25:e0:0f:
                    51:4d:e6:fe:a1:99:76:ba:a7:fa:bb:67:7b:90:bc:
                    d2:fc:e0:3d:80:5c:0e:0d:bb:b4:93:0a:72:71:b2:
                    19:31:98:8a:64:07:69:62:d2:23:d4:fc:d6:ee:3c:
                    a8:6a:2a:70:69:e7:17:fd:d6:77:2b:70:37:e6:48:
                    90:39:58:09:b9:d4:45:65:7c:71:cd:90:2f:cd:8a:
                    70:3b:43:62:ed:f3:5c:30:45:ac:07:56:6c:e7:73:
                    e9:07:e3:68:91:d4:b6:a3:2e:fd:72:74:c0:a4:63:
                    7d:43:17:c6:7d:e0:b0:a6:85:11:d8:2b:f9:7b:66:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4D:F7:BE:EB:55:D3:BB:67:D2:57:B0:BC:F6:A8:6B:58:50:D4:CD
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3138362e3233332e35362e302f32322d3232203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:c5:70:dd:db:c7:eb:c0:54:6e:05:95:13:4a:b5:36:a4:27:
         8b:4e:23:1b:aa:74:b3:be:8b:7d:51:b8:cf:d8:a1:d0:6a:c4:
         13:6f:fc:63:e3:7f:9b:7e:9a:49:f6:da:77:f6:c3:9b:36:4e:
         40:06:4c:e3:d8:e5:89:40:eb:56:4d:a7:be:25:4d:30:6a:ec:
         df:22:97:f8:09:e4:a0:74:d0:2d:58:6a:1d:b8:4a:40:51:5e:
         28:84:25:86:1b:f7:36:bd:56:6e:72:e4:d5:6a:13:0c:0f:f3:
         37:54:ef:b5:bb:32:fd:9d:8f:e4:1e:d0:0e:a3:70:2d:5d:3b:
         c9:92:53:ab:41:8b:6f:e0:69:81:c1:22:5a:d7:28:51:e3:c2:
         a7:37:bf:50:04:51:ff:4c:89:be:65:cf:8e:01:69:c5:5b:b6:
         e7:ce:f7:6f:c1:79:d7:7d:cf:72:22:e8:ff:4b:a8:d2:66:a1:
         f6:37:ca:f2:45:16:9a:2d:ae:fb:9a:8f:3a:1d:c3:f5:55:01:
         35:01:2d:84:18:7a:bf:ed:a9:6d:a4:1b:dc:06:5c:28:f3:23:
         28:01:bf:af:b7:b5:69:3a:c5:52:a0:a7:fa:23:70:2f:c8:7a:
         c5:cc:c6:fe:88:c7:76:fc:dd:c4:42:36:05:c9:d2:03:18:39:
         d8:b5:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:34 2025 by rpki-client