Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/3138362e3232362e3231362e302f32322d3332203d3e20323632393537.roa
File:                     3138362e3232362e3231362e302f32322d3332203d3e20323632393537.roa (raw, json)
Hash identifier:          ljJaokwuUINQ3HTEQX3t4Hen6ZtuSLFbEh/wUIvewZg=
Subject key identifier:   A7:05:BD:8A:F6:AF:DF:A1:78:CA:41:CB:46:A4:75:77:47:CD:0E:49
Certificate issuer:       /CN=ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08
Certificate serial:       43D05EAA3193F67C4E56C0CB5892EC198C70C8FE
Authority key identifier: AD:D3:B7:0A:0A:8F:8C:8C:74:CF:FB:2B:C9:86:EF:11:55:4A:7F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/3138362e3232362e3231362e302f32322d3332203d3e20323632393537.roa
Signing time:             Tue 03 Dec 2024 23:00:49 +0000
ROA not before:           Tue 03 Dec 2024 22:55:49 +0000
ROA not after:            Tue 02 Dec 2025 23:00:49 +0000
asID:                     262957
IP address blocks:        186.226.216.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d0:5e:aa:31:93:f6:7c:4e:56:c0:cb:58:92:ec:19:8c:70:c8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08
        Validity
            Not Before: Dec  3 22:55:49 2024 GMT
            Not After : Dec  2 23:00:49 2025 GMT
        Subject: CN=A705BD8AF6AFDFA178CA41CB46A4757747CD0E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:79:81:2e:90:fd:7f:e6:67:7d:7b:66:ba:
                    10:10:6a:fb:6d:00:1d:0b:37:36:73:97:f4:7e:70:
                    c4:a2:a9:7a:82:2d:0f:cf:78:a8:1f:09:f7:a0:18:
                    fd:81:e2:7c:eb:1d:fe:00:36:1f:4d:dd:b0:bd:d3:
                    cc:40:18:aa:5a:1b:e7:67:c5:52:1d:57:e5:46:c0:
                    8d:73:06:3d:f6:48:57:32:1c:95:98:cb:64:85:a9:
                    f0:ed:7b:a5:f2:62:b9:e8:60:0f:24:88:41:88:a5:
                    da:9c:d2:73:bb:3d:58:1f:23:cc:4d:12:de:35:5f:
                    a2:e6:a9:d9:c7:b0:b6:e6:0f:78:44:63:9a:f8:d6:
                    78:df:cb:dd:b6:32:d5:2a:c8:21:9f:ab:d2:e3:fe:
                    4d:1e:69:c9:3b:00:77:77:8e:f6:d7:13:0a:ae:4c:
                    b1:65:52:41:55:80:6c:40:27:8a:c0:17:e6:3e:a4:
                    de:b8:8a:50:f7:ca:74:64:63:01:b8:8e:62:84:21:
                    03:9d:89:c2:bb:43:c1:3b:6f:08:af:70:67:93:a3:
                    43:61:c0:a5:11:8b:ec:ab:de:18:80:da:d7:78:8b:
                    6a:e4:7b:89:5b:37:f5:5e:29:9f:72:f1:0e:c5:59:
                    c5:a6:ff:57:0f:8a:13:63:a2:61:02:6f:ca:3a:9e:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:05:BD:8A:F6:AF:DF:A1:78:CA:41:CB:46:A4:75:77:47:CD:0E:49
            X509v3 Authority Key Identifier:
                keyid:AD:D3:B7:0A:0A:8F:8C:8C:74:CF:FB:2B:C9:86:EF:11:55:4A:7F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD3B70A0A8F8C8C74CFFB2BC986EF11554A7F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/3138362e3232362e3231362e302f32322d3332203d3e20323632393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:eb:9c:09:42:34:89:d9:f3:a5:05:fb:2f:2c:d6:7c:9b:
         75:cf:03:eb:36:2b:55:28:32:98:4c:7b:2d:8c:52:b2:c9:0a:
         7b:fc:ec:b7:0c:91:49:f6:5a:65:4a:72:b8:e5:0b:09:9d:74:
         bc:6d:08:5f:99:61:62:6c:38:bc:dd:b2:3d:08:81:ac:dd:a7:
         af:71:a0:9e:9e:b1:de:2d:e5:b1:d5:2c:c7:4f:4e:a9:d8:17:
         39:c2:99:98:c1:bf:0f:ad:66:c0:fb:77:85:0b:ec:69:59:ad:
         f2:02:32:c2:a1:83:9f:7d:8e:f3:7d:72:17:99:81:eb:66:33:
         e2:cb:86:e8:b5:09:12:cd:33:99:81:55:53:6c:7a:38:2e:f6:
         fe:34:c3:c7:de:d9:fd:26:c8:1c:b9:9d:11:86:78:8a:93:52:
         88:d4:45:40:18:3a:64:b5:43:d0:ff:56:ce:f3:88:ff:30:b0:
         67:8e:88:7f:e9:89:ab:79:eb:b0:eb:6c:87:6f:27:5f:01:d1:
         0b:65:d6:df:e8:f7:15:8b:b7:5b:99:b9:81:48:11:c0:0f:6a:
         e4:7b:97:95:64:02:ff:63:39:62:5f:23:75:23:26:d1:09:9f:
         48:d3:ad:cc:8b:f2:57:9c:48:4b:b5:60:35:ee:dd:4e:78:7d:
         37:aa:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:25:24 2025 by rpki-client