Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa
File:                     3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa (raw, json)
Hash identifier:          CEc1NZXOlGbiNCslNP7JDOMJ1Ed86PpljGBMN7AEwm0=
Subject key identifier:   04:C5:FD:1C:71:08:A4:38:99:A6:E3:4F:A2:F4:69:86:E8:AE:57:4D
Certificate issuer:       /CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
Certificate serial:       22BB69D1C428D428C5B26597E0B7092E2F478D7D
Authority key identifier: EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa
Signing time:             Mon 15 May 2023 02:00:01 +0000
ROA not before:           Mon 15 May 2023 01:55:01 +0000
ROA not after:            Wed 15 May 2024 02:00:01 +0000
asID:                     270765
IP address blocks:        186.194.166.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bb:69:d1:c4:28:d4:28:c5:b2:65:97:e0:b7:09:2e:2f:47:8d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA84CAC6208EA96D7BC0F3C01912E59BC42054F1
        Validity
            Not Before: May 15 01:55:01 2023 GMT
            Not After : May 15 02:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:4f:57:53:81:7d:ae:a4:33:90:0b:62:49:
                    3e:c1:eb:b9:f9:67:36:07:b6:1c:1d:15:d7:23:bc:
                    db:c6:5d:f7:c1:96:57:fe:0f:7a:a8:e7:0d:8d:c4:
                    01:2d:98:cd:9b:1d:13:41:91:09:95:4d:b5:fb:9b:
                    5b:30:1e:6d:db:48:a0:fa:08:15:9b:ea:e9:6b:91:
                    50:62:d6:b9:d9:2a:85:10:7f:9a:c8:bc:13:6f:83:
                    13:4d:e6:4d:08:fc:8d:42:68:22:18:fb:12:46:44:
                    75:b3:27:90:43:79:68:34:62:20:dc:8f:fe:43:78:
                    37:65:13:4e:f7:78:99:cd:0f:5e:80:a4:c0:84:d0:
                    17:1f:f1:47:84:be:9d:9d:55:00:d8:b8:a6:24:7e:
                    cf:c1:0f:8a:fb:3c:03:33:f7:ea:da:c3:89:98:08:
                    ba:76:80:10:f0:a2:06:00:1c:40:43:1f:b0:b8:c7:
                    d0:41:c3:c1:d9:bf:02:8f:cd:cb:89:3f:5a:ad:3b:
                    bb:f4:16:ce:c5:89:41:d3:c7:a2:f4:62:0d:82:96:
                    45:01:b7:61:7e:51:83:86:13:08:bc:f3:93:ed:d4:
                    2b:4f:8d:b6:6b:37:92:4a:6f:33:df:39:d8:45:54:
                    9d:cf:85:d3:07:cc:76:1e:4c:0c:0d:32:82:20:52:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:FD:1C:71:08:A4:38:99:A6:E3:4F:A2:F4:69:86:E8:AE:57:4D
            X509v3 Authority Key Identifier:
                keyid:EA:84:CA:C6:20:8E:A9:6D:7B:C0:F3:C0:19:12:E5:9B:C4:20:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA84CAC6208EA96D7BC0F3C01912E59BC42054F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/0/3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:27:fb:f3:c2:ca:67:21:51:96:90:8e:35:de:1b:8b:84:
         83:c5:0e:b5:73:e4:bd:98:e5:d3:d0:93:d2:e6:09:fd:5c:4e:
         6e:b1:d9:9d:27:af:4b:40:19:9c:c5:1b:e2:cb:a7:19:81:13:
         ad:ae:5f:76:e5:04:a1:7b:ae:7c:17:fd:4d:2d:a5:ea:e2:87:
         44:70:9e:06:4b:ba:06:0b:21:34:5e:15:2a:3f:b4:33:40:39:
         6f:03:a1:fb:3b:65:b5:1d:fd:e3:2c:20:f9:f0:2e:1c:a7:21:
         6b:52:4a:2c:29:bc:14:5f:bf:6e:27:f8:b0:05:a8:39:1a:16:
         71:a0:21:e1:48:d3:dc:d4:32:13:e0:e1:8c:06:0e:60:6f:58:
         9d:f6:50:ae:f9:bd:fa:c0:f3:16:0a:e3:50:e7:e6:7b:bd:2d:
         34:b3:18:fc:1e:fb:a3:0d:9d:cd:76:18:76:e0:e8:21:1b:ac:
         b0:73:26:33:68:5f:40:46:12:f8:60:8d:58:05:05:31:ac:86:
         d2:02:f2:c9:76:ce:3a:fb:ce:88:42:a3:17:e0:ad:a4:49:37:
         c7:13:f6:f4:7f:4c:10:9f:e3:d9:35:97:f0:ca:81:06:91:1e:
         94:f8:07:89:5d:f0:3d:84:06:e7:af:93:8a:45:ac:b3:dd:83:
         93:77:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:02 2025 by rpki-client