Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233352e302f32342d3234203d3e20323730363038.roa
File:                     3138362e3231392e3233352e302f32342d3234203d3e20323730363038.roa (raw, json)
Hash identifier:          +JCk7htIStYuyf48t/S/QtcIaMzdHUyeEt8q9A1W5lI=
Subject key identifier:   9C:92:F2:E8:2E:F7:1F:D5:7A:D3:6E:CE:6D:6B:60:4A:3B:5B:BC:2E
Certificate issuer:       /CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
Certificate serial:       0BB87C8EFBAAAAC98A942A66676544AA385B2389
Authority key identifier: 7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233352e302f32342d3234203d3e20323730363038.roa
Signing time:             Tue 20 Aug 2024 14:00:02 +0000
ROA not before:           Tue 20 Aug 2024 13:55:01 +0000
ROA not after:            Tue 19 Aug 2025 14:00:01 +0000
asID:                     270608
IP address blocks:        186.219.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b8:7c:8e:fb:aa:aa:c9:8a:94:2a:66:67:65:44:aa:38:5b:23:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC19BC58479FCE52690DA050D68DCB0F8E12BF6
        Validity
            Not Before: Aug 20 13:55:01 2024 GMT
            Not After : Aug 19 14:00:01 2025 GMT
        Subject: CN=9C92F2E82EF71FD57AD36ECE6D6B604A3B5BBC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:60:f5:7f:6a:92:c4:f6:5e:f8:ea:0d:37:92:
                    77:81:39:2a:a5:fd:2f:85:3e:05:ae:7c:8b:d7:32:
                    89:80:34:ce:8b:c2:5d:f9:d5:4e:a5:e1:18:15:4a:
                    33:67:0e:12:bb:bb:62:8b:b3:96:c7:d5:74:f1:8d:
                    a3:8d:a3:8b:f4:52:74:25:a0:9c:01:68:01:fe:ee:
                    04:4e:32:69:e5:e1:b6:85:60:33:e2:40:5c:16:e4:
                    da:c5:2c:19:e9:88:9d:34:e2:37:2d:10:56:09:df:
                    10:f7:63:c2:77:22:fc:a3:12:ad:bf:80:49:15:64:
                    17:10:24:cc:78:4a:bb:fa:06:3c:e5:ce:71:e3:1f:
                    cb:6e:98:21:e8:fc:b3:4e:a6:53:74:9f:2e:ec:0b:
                    4a:05:46:94:55:52:e2:7f:fc:94:5d:a2:71:fd:9b:
                    29:ab:8c:d9:e2:04:11:06:74:2a:5f:86:1e:3b:6b:
                    d3:22:76:84:92:9a:7a:f0:c4:2b:41:86:d6:39:48:
                    0b:8a:d9:ab:33:ba:14:40:8e:80:c2:42:c9:f1:71:
                    2c:95:21:ae:50:aa:5b:70:9e:aa:7d:ed:e5:09:dd:
                    02:e3:2a:81:47:3c:c0:e9:6d:c6:34:d0:35:7f:6d:
                    33:bf:d3:bc:02:c4:70:8f:d2:76:5f:e7:bf:57:aa:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:92:F2:E8:2E:F7:1F:D5:7A:D3:6E:CE:6D:6B:60:4A:3B:5B:BC:2E
            X509v3 Authority Key Identifier:
                keyid:7C:C1:9B:C5:84:79:FC:E5:26:90:DA:05:0D:68:DC:B0:F8:E1:2B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC19BC58479FCE52690DA050D68DCB0F8E12BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233352e302f32342d3234203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:ed:0e:9f:32:ad:82:09:62:6e:64:64:d6:6f:4b:0c:51:
         56:75:ac:e0:f7:57:25:0c:4a:01:e2:d4:60:e2:b0:88:e2:51:
         16:e9:9f:3b:e8:69:52:a2:de:7f:5c:08:1a:3f:72:08:8c:cd:
         30:f5:13:16:b6:89:37:2b:8a:9b:fc:8f:ed:f2:03:36:9c:1d:
         a7:be:b7:15:fb:b4:98:1a:b1:63:9e:9b:e6:77:d3:e2:8e:dc:
         59:b2:32:43:7b:a6:c3:71:13:3d:a5:e0:45:34:61:cc:37:6d:
         b8:28:29:4a:08:cf:21:48:b6:55:a5:cb:e6:8d:3a:57:8b:32:
         d4:29:a7:5f:b9:38:d9:6c:da:85:c0:05:ab:83:e3:df:2e:03:
         50:45:9a:0b:f7:1e:48:0f:9c:99:7c:f0:f2:a5:55:9d:78:42:
         a3:67:ba:17:bc:e9:ad:48:58:9c:82:cf:40:b6:0b:20:48:63:
         3f:d2:33:64:28:6c:3c:4c:a2:ee:8b:89:e8:32:15:23:a0:19:
         fb:59:a7:aa:83:ba:ab:79:c5:85:af:95:07:cc:0d:77:c7:47:
         9c:34:97:13:cd:14:f0:4c:b6:cd:1a:43:04:5f:bf:0f:54:2d:
         bc:06:17:ec:7f:44:92:63:d8:bf:f7:6c:20:ac:c7:83:9f:b5:
         5e:ce:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:19 2025 by rpki-client