Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
File:                     3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          Jfaxgkt0XrPSaOyaUbDIlk4LvEsJuGC5/PJf4K8oiHM=
Subject key identifier:   2D:2F:B8:E4:11:F9:A6:9F:BE:CC:8B:8F:B3:8C:23:8E:E7:DC:9F:41
Certificate issuer:       /CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
Certificate serial:       15BEEDC04FC8E1A438AF59CEAEC571B5919C014E
Authority key identifier: EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 30 Jul 2024 21:36:24 +0000
ROA not before:           Tue 30 Jul 2024 21:31:24 +0000
ROA not after:            Tue 29 Jul 2025 21:36:24 +0000
asID:                     53107
IP address blocks:        186.209.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:ed:c0:4f:c8:e1:a4:38:af:59:ce:ae:c5:71:b5:91:9c:01:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
        Validity
            Not Before: Jul 30 21:31:24 2024 GMT
            Not After : Jul 29 21:36:24 2025 GMT
        Subject: CN=2D2FB8E411F9A69FBECC8B8FB38C238EE7DC9F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:36:de:90:03:55:eb:b5:1f:ea:e6:f9:06:
                    7e:2e:0a:55:3c:c7:8a:ae:55:7a:26:fd:eb:06:c6:
                    25:ad:7c:4a:5c:7c:bc:25:0b:cf:47:98:1f:17:1d:
                    16:11:43:cd:72:ba:d2:d6:88:0f:93:77:47:2f:7f:
                    4d:e7:7f:07:35:9b:2a:30:70:59:16:1c:80:a2:71:
                    7b:62:a4:af:c8:ed:78:cf:01:71:d6:ca:87:bc:50:
                    d9:89:78:5b:d1:97:b4:ef:96:f2:9d:a3:30:04:df:
                    50:75:ae:1a:68:79:db:2c:81:fa:94:78:68:eb:f1:
                    b3:c4:84:5f:d9:4e:e4:2c:cd:7a:b7:45:43:01:40:
                    de:3b:7f:08:10:5f:38:0a:d1:74:a4:73:80:7e:f1:
                    52:b1:57:b7:ea:17:ab:a7:19:87:ab:92:50:dc:9d:
                    3f:bb:f2:79:4b:41:a2:25:49:c3:c6:aa:d6:fd:5a:
                    7e:de:ff:b0:e3:24:da:f3:25:37:d7:fa:b5:b0:0c:
                    6d:0f:63:fb:13:9d:b4:ad:18:58:59:dc:63:ee:c6:
                    4a:fe:67:95:73:54:49:eb:6f:59:90:66:ee:d6:f2:
                    ab:b6:1a:a9:eb:3f:12:eb:cf:19:26:7e:a2:c5:c1:
                    6f:bd:49:98:e3:03:9f:e8:88:52:51:54:ad:b8:9e:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2F:B8:E4:11:F9:A6:9F:BE:CC:8B:8F:B3:8C:23:8E:E7:DC:9F:41
            X509v3 Authority Key Identifier:
                keyid:EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:8b:82:3e:0e:eb:11:4e:ee:95:c0:85:e1:4c:ce:65:6b:
         a3:28:0f:d7:20:09:c8:d6:29:a0:66:78:59:a2:d4:cc:55:4c:
         2d:c3:84:2d:1b:54:6c:f3:99:a0:59:d4:40:b4:a3:a3:e9:6a:
         6d:0f:41:7b:1e:a3:a4:e8:6b:59:5e:e5:e3:6b:58:bb:63:ea:
         d0:b0:b8:02:23:03:0e:be:03:b8:b8:0e:e9:8c:2b:b9:e1:60:
         8f:68:0c:61:2a:1c:f6:91:f5:e2:fb:e3:8c:a7:c0:10:54:3d:
         0d:2b:9c:1b:2f:be:2f:70:2c:6a:13:81:cb:8e:16:b1:63:75:
         6a:d2:78:96:ef:b3:93:6d:cd:07:ad:67:94:74:04:ce:5d:d4:
         2f:9d:b6:a0:11:41:9b:a3:99:a9:86:bc:fb:38:7c:37:81:b9:
         21:3d:65:a6:a5:9f:d5:99:7f:2d:25:d9:e7:bb:b6:4f:7a:cc:
         9b:22:94:97:24:98:34:77:b7:bb:67:17:40:87:67:16:f8:94:
         18:98:1f:a3:61:df:28:0e:5d:cc:c8:3a:8b:90:13:04:e9:9d:
         f7:f5:88:f5:ee:7c:de:f7:ed:57:7c:cc:25:50:86:98:62:ce:
         07:c9:b7:9b:3f:c5:d8:6f:2e:81:a6:93:f5:8d:d1:55:5b:a2:
         d3:aa:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:05:43 2025 by rpki-client