Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3138362e3139352e3136302e302f32322d3234203d3e20323634343936.roa
File:                     3138362e3139352e3136302e302f32322d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          mF5kixYxn+v1WTSByvdmoCPKnHYJkQ2XFvuz+q7U9Bw=
Subject key identifier:   C9:63:CF:68:CE:3C:49:66:3A:98:49:F9:74:3B:0D:DB:F9:AD:62:03
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       4288E58F96E1D2DF74577AB4769ABEE4994350C2
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3138362e3139352e3136302e302f32322d3234203d3e20323634343936.roa
Signing time:             Mon 24 Feb 2025 14:37:21 +0000
ROA not before:           Mon 24 Feb 2025 14:32:21 +0000
ROA not after:            Mon 23 Feb 2026 14:37:21 +0000
asID:                     264496
IP address blocks:        186.195.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:88:e5:8f:96:e1:d2:df:74:57:7a:b4:76:9a:be:e4:99:43:50:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 24 14:32:21 2025 GMT
            Not After : Feb 23 14:37:21 2026 GMT
        Subject: CN=C963CF68CE3C49663A9849F9743B0DDBF9AD6203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:a1:31:b8:f0:29:d5:6a:f4:3e:d9:ac:d6:
                    bd:26:6f:c9:2b:0d:ff:df:e8:80:8b:e9:4d:69:fd:
                    2a:85:1f:ed:95:3f:64:c1:df:f8:91:a8:c3:83:0c:
                    9e:86:27:a6:8b:f4:18:62:95:38:7f:9d:63:4a:a9:
                    fd:1f:55:43:85:92:1c:30:08:b4:9b:ae:37:c7:a4:
                    51:1f:09:8a:83:92:2c:09:dc:f3:39:26:56:29:0e:
                    a8:f1:cc:fc:01:33:9a:e2:85:aa:87:87:76:7e:01:
                    c9:70:6f:c6:49:e4:ed:7c:aa:7f:3e:82:f3:5d:01:
                    2c:4e:52:55:c1:d4:8c:22:06:af:bc:1d:ed:ad:7f:
                    e4:52:df:c3:3c:bc:2c:da:04:ef:43:ff:bf:77:b6:
                    ca:67:86:5b:8f:da:cd:87:29:85:f6:f8:88:81:3f:
                    62:bc:5c:9e:da:c2:89:43:5a:83:2f:a7:8b:b4:03:
                    df:f9:d3:a9:49:a0:f2:d6:ad:ed:3b:d3:d9:12:2b:
                    43:22:86:b8:6e:2d:ab:43:8e:73:17:ff:26:aa:c5:
                    6d:e5:93:2f:46:1a:ac:31:aa:40:62:b4:8e:24:38:
                    30:6d:ef:9c:84:4b:a1:c4:90:7c:6b:a3:2a:6e:23:
                    7d:2e:7c:c5:7d:35:88:fc:e2:2f:46:e7:ec:52:be:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:CF:68:CE:3C:49:66:3A:98:49:F9:74:3B:0D:DB:F9:AD:62:03
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3138362e3139352e3136302e302f32322d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:83:59:b1:b6:d8:97:20:62:fa:ec:a9:93:e8:75:0f:bf:d0:
         50:34:de:d9:89:1e:83:1a:76:3c:61:3e:52:58:50:aa:ea:9a:
         45:68:f5:f7:f0:28:55:fd:5e:59:31:34:fe:f5:55:24:2f:5a:
         4b:b2:63:dd:74:4b:39:99:82:66:4c:28:a9:a3:12:f5:82:9e:
         cf:c4:c7:fd:47:f0:5b:79:39:fe:c8:ef:8c:cb:10:b3:cd:81:
         23:cd:7b:84:6a:83:ee:fa:7b:b8:50:66:ed:f1:81:f6:da:fb:
         c7:6f:db:70:12:6d:a9:c6:ce:76:b8:65:ae:b1:7e:fd:61:5a:
         c4:a7:39:4f:4c:a2:2c:28:a4:55:94:53:4c:4f:c8:17:20:92:
         1e:c3:d6:a0:3a:c6:2b:15:4e:3c:0b:2c:4a:09:a8:46:5e:ae:
         5f:a6:e2:a8:78:da:44:08:15:ca:8e:99:a4:7a:aa:18:9d:eb:
         67:69:8d:a4:0a:08:66:12:92:e0:23:db:3a:b8:a3:20:07:66:
         11:4e:40:29:74:62:69:1a:51:50:f3:59:2b:57:4c:21:f7:d4:
         ab:2f:3c:51:3b:60:16:61:97:e2:6d:81:93:37:d0:9d:87:fc:
         29:66:8c:7d:24:17:43:fc:c0:28:74:d5:69:53:30:06:9c:50:
         c8:43:c5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:03 2025 by rpki-client