Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa
File:                     3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          nedCR+9BhGmRmmI5q7HSxQXjGfWXYE6+uFPwOHoRhFg=
Subject key identifier:   4E:15:C6:64:45:A7:6C:14:24:14:1C:51:48:BC:23:62:50:17:96:17
Certificate issuer:       /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial:       282433286373F7A42D052D7D1F63407BF8A2C94A
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa
Signing time:             Tue 12 Dec 2023 17:29:42 +0000
ROA not before:           Tue 12 Dec 2023 17:24:42 +0000
ROA not after:            Tue 10 Dec 2024 17:29:42 +0000
asID:                     269096
IP address blocks:        186.232.88.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:24:33:28:63:73:f7:a4:2d:05:2d:7d:1f:63:40:7b:f8:a2:c9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
        Validity
            Not Before: Dec 12 17:24:42 2023 GMT
            Not After : Dec 10 17:29:42 2024 GMT
        Subject: CN=4E15C66445A76C1424141C5148BC236250179617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:79:d7:3c:dd:e3:23:f0:5c:60:5e:f8:57:
                    6a:bb:96:81:5b:8a:e1:ff:b0:1d:18:48:48:e5:06:
                    f2:0f:c1:80:ab:f5:50:e6:f7:36:8a:56:00:69:01:
                    e2:fa:a2:84:f9:d2:19:86:c0:38:81:0a:64:2b:11:
                    d2:da:c6:13:d6:bd:2c:97:88:bc:d4:28:24:f8:ac:
                    f7:0e:ce:79:e2:e0:cb:b2:13:bf:a8:84:a2:bb:f0:
                    34:3a:60:3f:80:0b:ae:51:c7:15:9f:aa:d3:f5:86:
                    17:99:7b:85:ec:35:e2:14:67:e0:7e:33:87:ca:12:
                    86:7b:f7:ea:9c:04:3e:e9:2d:13:2e:27:eb:25:83:
                    51:eb:7a:e2:2f:35:3b:87:f9:80:c1:3b:60:8c:73:
                    b6:96:20:04:31:8d:ab:de:b9:e6:d5:05:9c:b7:6b:
                    a9:03:12:6a:a1:f7:b6:bb:3a:3d:13:bd:23:0d:cc:
                    13:78:76:8e:2a:d1:a1:74:e8:c2:30:33:97:21:fc:
                    a5:5a:7e:9a:37:8c:c6:fa:fb:d1:b4:12:a3:92:5f:
                    7b:c0:6c:71:d9:e2:cd:b8:dd:77:69:8e:a7:85:f6:
                    a3:ca:31:ca:2d:ec:25:5e:09:9b:40:e8:77:86:00:
                    9e:a2:9c:01:0c:75:82:15:b8:3b:35:4c:b6:6a:64:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:C6:64:45:A7:6C:14:24:14:1C:51:48:BC:23:62:50:17:96:17
            X509v3 Authority Key Identifier:
                keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:40:7d:2b:6b:43:82:41:06:16:c8:b7:6b:05:8d:8b:a3:14:
         4f:58:be:a5:f2:b7:b0:04:05:49:28:ba:1d:51:09:e5:e8:58:
         2a:ac:0b:38:31:d1:16:ae:a4:d1:fd:2f:e0:cb:f4:66:66:df:
         98:12:ba:61:f5:b2:19:7e:8a:01:47:45:d2:8b:51:1b:9e:d2:
         e7:92:0e:7e:c0:86:0b:69:b0:a2:e0:28:a0:c4:4a:83:a5:d8:
         af:f6:fb:9c:a6:d6:d1:80:9f:1d:42:d6:20:85:1e:98:b6:f1:
         7f:c5:cf:ef:40:a3:52:c8:1e:1a:8a:89:0e:04:40:b8:f4:95:
         ef:26:ec:01:cf:11:30:6b:6e:a8:aa:8d:04:17:46:c5:03:50:
         f2:ac:da:bf:50:8b:9c:f5:c5:56:c1:9d:55:b0:c3:6a:05:71:
         74:54:7f:7e:06:8b:f0:08:d6:38:e4:22:9f:07:cb:35:b3:93:
         72:df:9a:08:58:94:29:55:7a:09:ff:8a:9c:c5:7f:d5:b7:06:
         29:7e:6a:9b:7f:ec:59:67:0c:c8:18:1c:76:40:7f:6a:a1:db:
         b4:ed:15:37:73:ad:b8:be:00:26:7f:fd:21:49:df:56:dc:3d:
         ba:fc:c6:ae:35:fd:a2:1d:f9:63:7d:6f:a8:44:08:af:39:ac:
         81:5b:f5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:08 2025 by rpki-client