Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32322d3234203d3e20323730363038.roa
File:                     3138362e3231392e3233322e302f32322d3234203d3e20323730363038.roa (raw, json)
Hash identifier:          WF12WqaI6rv1YfHPbvQZ3zK7sxSwPeYf6R/j3sPx+HY=
Subject key identifier:   C6:67:35:F4:12:5F:14:2D:77:B3:4B:79:72:5D:13:93:E6:6F:06:1B
Certificate issuer:       /CN=424921E0BCFE7418753F74A0BBA8AF96819675B8
Certificate serial:       42E451FC3E70D4F516973164B455D81BDD510767
Authority key identifier: 42:49:21:E0:BC:FE:74:18:75:3F:74:A0:BB:A8:AF:96:81:96:75:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/424921E0BCFE7418753F74A0BBA8AF96819675B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32322d3234203d3e20323730363038.roa
Signing time:             Wed 24 May 2023 14:54:34 +0000
ROA not before:           Wed 24 May 2023 14:49:34 +0000
ROA not after:            Wed 22 May 2024 14:54:34 +0000
asID:                     270608
IP address blocks:        186.219.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:51:fc:3e:70:d4:f5:16:97:31:64:b4:55:d8:1b:dd:51:07:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424921E0BCFE7418753F74A0BBA8AF96819675B8
        Validity
            Not Before: May 24 14:49:34 2023 GMT
            Not After : May 22 14:54:34 2024 GMT
        Subject: CN=C66735F4125F142D77B34B79725D1393E66F061B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:f6:5b:71:41:f3:d3:9d:9a:29:93:1b:48:
                    f9:d4:81:29:85:c9:37:05:48:d1:c5:55:77:4d:1e:
                    10:9f:04:28:2c:af:3a:6a:d3:87:9c:23:d3:7f:31:
                    0f:d0:f1:c3:52:1a:96:05:10:f4:91:8a:7b:f6:87:
                    f9:2f:38:c6:ed:f3:74:94:ea:35:53:a1:31:5e:50:
                    22:b7:f9:a5:73:a7:80:4e:e7:0a:b8:7a:09:09:28:
                    55:cc:53:0b:fa:09:b8:25:ac:cf:60:06:bd:b5:8b:
                    d6:5b:95:08:63:74:1c:9e:44:52:f6:50:6b:07:42:
                    60:61:bc:3f:90:9e:f3:49:c0:04:47:7c:3e:cf:ae:
                    a1:02:37:70:9b:ee:65:ca:4a:0b:9c:d0:a3:70:46:
                    77:67:68:80:7c:c7:10:e8:bd:75:43:97:dc:4f:bb:
                    99:b1:02:cc:aa:2e:7b:51:13:56:93:6c:86:6e:94:
                    a0:fb:54:2c:98:28:a6:cb:12:b9:59:41:8f:66:28:
                    f5:03:1b:df:d7:08:18:ae:b0:30:54:62:eb:d2:41:
                    b4:3a:39:88:cb:30:6b:97:3b:cb:19:19:2c:13:19:
                    58:35:08:54:4d:1c:11:f3:e5:d5:dc:c8:31:cf:8b:
                    a7:b4:2f:f1:3e:4f:cb:80:27:f0:de:c7:df:34:f9:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:35:F4:12:5F:14:2D:77:B3:4B:79:72:5D:13:93:E6:6F:06:1B
            X509v3 Authority Key Identifier:
                keyid:42:49:21:E0:BC:FE:74:18:75:3F:74:A0:BB:A8:AF:96:81:96:75:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/424921E0BCFE7418753F74A0BBA8AF96819675B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/424921E0BCFE7418753F74A0BBA8AF96819675B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233322e302f32322d3234203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:6f:46:ce:9d:1c:0e:b6:ba:56:2d:11:56:82:8f:0e:cb:
         c5:d0:10:35:08:2a:8c:3d:53:67:47:21:27:34:f1:d6:1c:0d:
         07:a8:ab:02:a6:28:ac:b7:c7:d4:8a:8b:5a:c2:95:7b:56:c2:
         b7:99:c3:d2:e9:c7:8d:16:0e:40:1c:a3:a0:36:bd:cf:3d:1f:
         da:50:d3:10:1b:10:b6:4f:a6:e5:18:5a:90:fb:07:78:8a:f2:
         ff:a4:fb:a6:25:87:35:67:90:5c:a1:d7:c0:75:7f:7e:d1:a8:
         35:03:8d:8d:cf:95:ca:99:a8:79:f9:13:65:0c:ea:b7:84:9f:
         14:09:7c:ae:48:b2:8e:71:a5:97:bd:12:e7:11:33:ec:26:37:
         80:05:7c:3a:00:fa:c6:93:ae:a1:fd:92:f7:8c:aa:40:1a:1a:
         69:4e:6c:1f:cb:94:15:90:76:38:66:13:45:fb:08:be:8e:25:
         0b:e3:37:9b:98:4d:45:da:37:40:74:f4:90:4c:fd:f9:ce:99:
         5a:73:13:d6:27:23:5a:c2:b7:5b:2c:a3:e1:19:c3:03:00:4b:
         78:a2:30:5d:10:f6:3c:88:ea:03:7c:ec:78:a8:78:3a:cd:54:
         25:03:63:77:dc:f3:45:69:55:f9:e1:32:78:f1:24:cc:b7:51:
         1d:9f:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:05:51 2025 by rpki-client