Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32302d3230203d3e203238313335.roa
File:                     3138372e38362e302e302f32302d3230203d3e203238313335.roa (raw, json)
Hash identifier:          azDKuW4EFup9eBtslBBd+npDl7hxMizuM5wXdzECBfA=
Subject key identifier:   E5:44:DD:A7:B6:94:A8:FA:EC:F9:C9:ED:33:A3:AF:30:DF:5A:0E:3B
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       2DE2E42818BEA4005A1F8F97CAFACA89A4F62456
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32302d3230203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:15 +0000
ROA not before:           Wed 13 Mar 2024 11:58:15 +0000
ROA not after:            Wed 12 Mar 2025 12:03:15 +0000
asID:                     28135
IP address blocks:        187.86.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e2:e4:28:18:be:a4:00:5a:1f:8f:97:ca:fa:ca:89:a4:f6:24:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:15 2024 GMT
            Not After : Mar 12 12:03:15 2025 GMT
        Subject: CN=E544DDA7B694A8FAECF9C9ED33A3AF30DF5A0E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:7d:11:90:a7:60:13:87:1b:d0:c5:75:db:
                    31:5d:ea:fb:56:44:81:b6:44:e2:9c:ef:c0:bd:ad:
                    b7:f9:3b:e4:06:65:f9:53:ea:33:f1:fc:e7:e3:b2:
                    9d:82:9a:63:7a:33:c3:7b:9d:7a:be:50:94:5b:56:
                    ff:be:26:be:40:e5:dc:9a:1c:85:5a:ab:78:51:4c:
                    15:3b:c5:da:13:aa:2f:01:9c:32:b9:27:67:da:39:
                    e5:13:eb:bc:f8:75:60:fb:97:d7:ba:39:41:2d:91:
                    44:96:1c:23:55:3c:4b:31:1f:35:0e:c5:2f:64:79:
                    58:e3:c1:c7:13:63:60:1f:8c:8c:6a:35:41:3d:6b:
                    69:4d:b9:88:cb:fb:d1:cf:bb:5a:f8:fd:92:f3:ff:
                    ee:da:4d:81:a5:ab:1b:db:4b:5c:85:6d:55:dc:b4:
                    35:c4:f8:06:f3:79:c4:90:f8:40:87:a7:0b:f3:29:
                    94:86:87:6c:fe:74:32:88:24:b4:09:75:c7:1b:d3:
                    73:51:e0:57:81:ee:8d:88:14:1b:b5:28:f9:90:dd:
                    f7:1d:45:d3:24:74:28:05:1f:90:08:6b:39:94:25:
                    68:ed:e9:da:37:39:f2:07:23:34:d9:0a:90:ed:c2:
                    48:19:dc:61:16:62:fd:64:80:81:d3:4e:e5:67:3f:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:44:DD:A7:B6:94:A8:FA:EC:F9:C9:ED:33:A3:AF:30:DF:5A:0E:3B
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e302e302f32302d3230203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:e6:c7:c6:aa:dc:68:9f:25:d4:f7:c6:4a:bc:2c:7f:30:
         19:01:b3:f1:ab:e4:21:df:2a:f5:d6:1a:cf:09:57:43:86:03:
         fb:e0:ab:c1:c4:4d:fd:79:5f:61:43:33:27:46:f0:ad:31:0b:
         c7:44:71:7a:2a:04:4e:c6:29:18:de:ab:83:34:1a:40:c0:7e:
         ee:93:33:81:ff:8e:85:ed:94:29:78:3d:8b:5c:20:df:1d:7d:
         cd:7e:92:80:29:4a:9e:f8:2c:5d:90:22:a7:b5:4b:34:9c:d2:
         70:94:b1:0f:b0:d0:8f:dd:a8:2a:70:5b:b2:16:e3:b5:b0:05:
         23:6c:ae:2f:43:2b:1b:18:82:07:a2:d7:c0:d8:07:de:58:3d:
         4a:40:99:9f:98:83:d8:d0:98:c2:83:4d:ef:4a:70:ab:e4:35:
         78:40:84:1f:22:5e:fb:cb:c9:35:84:e1:e0:2a:7a:67:88:72:
         1c:b4:cf:60:e7:bc:af:d9:c5:70:fd:b2:c1:88:29:5f:3d:fd:
         6c:f4:3c:32:aa:b7:8e:a4:06:fc:6c:0f:e6:ab:84:83:f9:62:
         4e:e9:07:3d:c1:48:93:54:fb:5d:87:f6:79:ad:55:13:df:fc:
         c2:2b:c5:1a:50:de:1d:9c:f5:0d:bc:7f:7d:2b:8e:ff:48:64:
         9c:e9:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:38 2025 by rpki-client