Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa
File:                     3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa (raw, json)
Hash identifier:          23BRsb2zwoHv0LzETJnkQMcBYFmUWAtQu7Bkv/1zbCw=
Subject key identifier:   96:CB:78:52:EE:94:CD:EC:C2:6E:29:76:6D:AE:09:48:40:AB:15:FA
Certificate issuer:       /CN=29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE
Certificate serial:       2D4EA802164869513A3B973E992CB6BD3B7FEBC4
Authority key identifier: 29:BE:07:A4:A4:35:08:C5:1A:E0:9D:DE:39:CF:51:A3:FE:5E:31:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa
Signing time:             Fri 01 Dec 2023 17:06:03 +0000
ROA not before:           Fri 01 Dec 2023 17:01:03 +0000
ROA not after:            Fri 29 Nov 2024 17:06:03 +0000
asID:                     271324
IP address blocks:        186.209.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4e:a8:02:16:48:69:51:3a:3b:97:3e:99:2c:b6:bd:3b:7f:eb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE
        Validity
            Not Before: Dec  1 17:01:03 2023 GMT
            Not After : Nov 29 17:06:03 2024 GMT
        Subject: CN=96CB7852EE94CDECC26E29766DAE094840AB15FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:c8:3a:4d:b4:af:85:3f:8b:cd:dd:a4:67:
                    32:90:b1:19:b1:88:cb:ce:5b:e7:a3:68:38:26:d8:
                    b1:01:6a:27:03:4c:8b:df:98:c9:34:2b:87:71:42:
                    cf:bf:82:83:7c:36:0e:90:02:96:2a:64:0c:3a:dd:
                    2b:93:4f:92:bc:9d:1d:ff:ea:73:88:a1:ff:a9:4a:
                    c0:d1:93:91:27:f3:17:5c:c1:11:4f:1b:65:36:dd:
                    ef:84:79:ae:a2:07:14:2c:93:9c:a2:32:6b:36:b6:
                    57:01:9d:87:60:08:d6:cb:75:9c:9b:1f:a8:7e:63:
                    34:20:37:4f:41:03:1f:b7:a0:e2:7c:99:b9:70:6f:
                    b4:01:ea:92:e4:fa:21:bc:8f:b8:bd:09:29:05:bb:
                    45:5d:11:7b:08:cf:86:fc:3f:b3:c9:4f:99:13:3e:
                    b0:fe:98:df:60:e6:9a:81:94:19:7c:de:6d:c3:a0:
                    ba:db:51:4c:1a:e5:4d:db:88:64:a6:42:46:fd:7b:
                    7f:26:22:c4:52:1f:11:1b:a3:f0:12:24:74:f6:fc:
                    8d:97:b9:a6:ee:99:fb:38:b3:c4:b6:64:ab:33:f6:
                    35:12:06:8c:fd:18:11:09:07:d1:53:63:58:3a:e3:
                    d0:41:1f:a6:f9:00:d9:03:f6:c4:31:7d:74:ba:61:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:78:52:EE:94:CD:EC:C2:6E:29:76:6D:AE:09:48:40:AB:15:FA
            X509v3 Authority Key Identifier:
                keyid:29:BE:07:A4:A4:35:08:C5:1A:E0:9D:DE:39:CF:51:A3:FE:5E:31:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/3138362e3230392e3137322e302f32322d3234203d3e20323731333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:04:43:af:91:9b:28:9c:89:3f:be:12:87:b5:9b:1e:ea:84:
         d1:03:58:3c:ae:f8:5d:55:73:88:ed:dd:7c:de:00:db:23:9e:
         f1:16:fe:43:2f:d4:63:9d:94:68:50:cf:33:d8:53:ff:07:92:
         12:27:0c:37:3a:18:68:b5:c3:e1:54:fd:60:a2:df:95:af:6e:
         f8:78:b7:6b:67:be:32:de:69:4d:4e:69:28:99:70:b5:2b:50:
         44:1c:1b:92:56:f5:1e:52:5e:81:91:24:72:74:41:eb:c6:42:
         05:12:93:69:78:19:af:fc:e8:61:68:0a:3c:e5:5d:de:f6:1e:
         cc:7a:4e:7e:b5:6f:91:2a:e3:b8:39:28:33:9d:02:26:2f:98:
         e2:95:1b:b5:9b:cf:79:b1:42:fb:18:23:30:a6:20:30:fa:c1:
         fe:e1:0b:b3:b7:74:b6:80:c7:cd:ec:d6:13:e1:7d:66:b2:0b:
         58:ed:15:c1:a8:7d:53:bf:27:dc:4a:53:6e:d1:e9:97:ec:b3:
         40:79:d9:bf:b9:ba:6a:da:5d:66:48:2c:c1:49:e1:df:a2:b1:
         08:5b:95:c4:51:3f:bd:da:5e:9b:45:7c:71:28:90:df:34:50:
         3e:c1:77:e8:aa:66:27:bc:4a:a3:42:6d:ab:94:2a:5a:51:50:
         d9:b9:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:08:20 2025 by rpki-client