Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa
File:                     3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa (raw, json)
Hash identifier:          IMpREsPR3+vFd5+n5bjHBgZxO0APiYxy25g8Y3BOVAw=
Subject key identifier:   3A:8C:70:36:0B:75:4F:17:31:28:19:75:4C:15:B0:04:5E:EA:28:5C
Certificate issuer:       /CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
Certificate serial:       42D110837ED262C76D04FCFB622BDF19E60A0E8A
Authority key identifier: 60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa
Signing time:             Fri 21 Feb 2025 13:35:42 +0000
ROA not before:           Fri 21 Feb 2025 13:30:42 +0000
ROA not after:            Fri 20 Feb 2026 13:35:42 +0000
asID:                     270608
IP address blocks:        186.219.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d1:10:83:7e:d2:62:c7:6d:04:fc:fb:62:2b:df:19:e6:0a:0e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
        Validity
            Not Before: Feb 21 13:30:42 2025 GMT
            Not After : Feb 20 13:35:42 2026 GMT
        Subject: CN=3A8C70360B754F17312819754C15B0045EEA285C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:b2:0b:e8:c0:1e:17:83:eb:b1:0a:d8:47:
                    bb:81:98:e4:d4:60:72:d3:a7:9f:23:bb:41:7f:b1:
                    86:8b:77:1d:37:28:db:08:71:16:93:b1:8c:81:a5:
                    d3:23:34:84:77:2d:f4:c5:04:07:6b:a5:22:de:54:
                    ee:c9:f3:59:7a:96:2f:33:35:11:a8:df:c5:e3:a2:
                    be:23:8d:4c:f9:92:d4:0c:71:38:8a:b7:8d:8e:19:
                    c2:0e:b0:aa:22:8b:b4:d8:e2:d6:7b:60:14:fe:f5:
                    66:34:8a:12:e6:03:32:57:76:ec:bf:9c:fd:c0:a7:
                    18:5b:4f:29:90:2b:0a:f8:46:91:5e:df:e8:90:fc:
                    52:32:c8:d5:62:59:64:55:e6:02:e3:01:c1:0d:35:
                    b3:60:65:2f:59:86:a6:00:bf:09:d7:8e:cd:37:49:
                    73:b9:7b:5a:74:32:36:c4:e7:22:f0:82:fa:d8:61:
                    a1:c0:82:54:5e:46:20:9d:a5:17:16:5b:c7:3c:f0:
                    e6:23:7f:9c:db:51:c9:95:3f:dd:24:5b:f5:4c:4c:
                    e2:1d:a2:41:38:21:c0:93:fe:0d:2b:1d:39:23:85:
                    91:93:4e:ce:f9:fc:cc:20:da:e4:3d:4c:69:d6:a8:
                    35:71:d2:c9:72:ed:88:24:cc:9e:bb:1d:82:75:d5:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:70:36:0B:75:4F:17:31:28:19:75:4C:15:B0:04:5E:EA:28:5C
            X509v3 Authority Key Identifier:
                keyid:60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233342e302f32342d3234203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:fa:89:a1:49:c6:49:23:13:ce:25:5b:6e:a8:85:68:ec:
         c4:c7:e0:f0:bf:e3:40:fd:cd:e8:a5:2e:87:88:8b:f7:14:38:
         14:0a:e1:2c:f0:0b:58:cf:61:90:56:32:4f:e8:ec:d8:e4:71:
         cb:60:59:bd:03:68:e3:99:28:7d:90:d6:8b:5f:31:60:fa:dc:
         1c:c8:8c:d6:5e:27:60:9a:f9:3e:de:77:b6:09:66:d0:7e:ce:
         2f:50:a5:c4:1f:73:68:b9:9e:7d:0a:d2:6c:6c:f5:6a:31:3b:
         ca:d5:25:16:31:67:95:d1:62:5f:4e:90:f8:9c:62:10:5d:6d:
         60:b4:50:3a:97:d8:88:f6:9f:c6:bc:04:cd:73:dd:4b:73:d0:
         da:8d:3e:de:e7:52:cd:39:71:22:83:28:7c:f6:9e:b5:57:19:
         4a:c1:6c:4d:ad:12:0f:1e:58:50:f4:b2:5d:41:c7:ff:f6:7e:
         18:3c:2d:dd:b2:38:78:65:c2:46:47:8d:e9:de:98:3c:ef:54:
         0d:67:3f:eb:30:42:73:bf:39:4e:c9:2d:fa:4c:24:3b:58:b3:
         27:31:9b:44:34:75:2e:1d:48:29:f8:dc:1a:9f:ab:14:6a:91:
         87:12:07:e0:63:89:48:66:c6:87:1c:e8:58:ad:5e:9a:5a:b6:
         c5:66:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:52:23 2025 by rpki-client