Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31382e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e31382e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          y8hdBq6YgEZJXrZQJ9mGS5tZCzeUMt44CkQ7PiTSE9c=
Subject key identifier:   FC:D9:0D:80:30:E4:41:D7:F5:B5:10:04:03:80:A4:31:FF:28:05:00
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       2755AA6D3543D8D4F5B07D5EBD98DB67EF3940BD
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31382e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:17 +0000
ROA not before:           Wed 13 Mar 2024 11:58:17 +0000
ROA not after:            Wed 12 Mar 2025 12:03:17 +0000
asID:                     28135
IP address blocks:        187.86.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:aa:6d:35:43:d8:d4:f5:b0:7d:5e:bd:98:db:67:ef:39:40:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:17 2024 GMT
            Not After : Mar 12 12:03:17 2025 GMT
        Subject: CN=FCD90D8030E441D7F5B510040380A431FF280500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fe:d4:c3:24:2f:39:4d:10:71:d5:51:31:37:
                    e5:8c:da:10:3b:87:67:e3:92:e8:21:39:e4:3e:8f:
                    f6:fc:ec:f7:31:f6:3f:a8:ae:d9:34:5a:c6:ea:c5:
                    d0:9a:a5:3d:a2:d7:40:b2:f7:08:20:74:40:f0:38:
                    ee:4c:60:82:c4:3f:e0:57:2b:e6:79:f8:82:6b:93:
                    73:4a:76:43:d8:4c:c5:75:e0:24:34:42:72:7f:1b:
                    c5:dc:7f:57:d8:59:79:bb:0b:ba:74:0b:c2:27:4d:
                    6f:e2:2b:b4:78:90:d4:9f:c6:20:79:13:10:8f:e9:
                    fd:c3:ba:71:ad:ee:fc:fa:4a:42:4e:2f:e7:98:f8:
                    01:18:c5:4d:ea:5c:c9:93:e8:a9:d1:4b:62:7a:06:
                    3a:11:b1:d9:82:a8:7b:7b:4b:a3:87:fc:c4:8b:5e:
                    19:2d:78:15:73:2f:19:b8:51:0d:df:c5:71:11:e4:
                    7f:8e:63:85:4f:71:07:d7:36:d5:d1:6c:b3:3b:71:
                    32:14:2a:92:a8:f1:57:b9:2d:bf:62:cc:fd:e8:e6:
                    b3:74:2d:a4:52:10:e4:6b:82:03:38:08:ee:42:f1:
                    9d:56:54:bc:67:3c:6e:94:8e:86:5a:12:23:35:aa:
                    55:de:32:d3:0f:f8:96:76:09:4f:bc:62:13:9c:d9:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:0D:80:30:E4:41:D7:F5:B5:10:04:03:80:A4:31:FF:28:05:00
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31382e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:37:5f:2a:d4:35:8c:ef:d0:95:14:7f:55:8d:06:47:ab:
         0d:f6:dc:eb:66:e8:b3:58:9f:0f:d7:d9:8b:cc:a1:3c:f1:3f:
         c5:d9:68:99:99:c2:27:54:1e:e4:c2:73:80:be:f0:8a:56:b6:
         36:33:f9:e9:1e:18:d3:a5:1a:1d:1d:79:66:f7:4b:c3:6a:a3:
         b9:26:cc:0c:61:d5:cb:ed:68:3d:7a:7c:46:b7:78:cd:2c:71:
         92:1e:d5:69:19:e6:de:9b:60:fa:42:21:b6:88:cd:50:f0:22:
         07:5c:2d:20:ec:ad:df:9b:f4:a7:0f:bc:0f:e2:4f:94:2c:71:
         e9:97:83:e1:67:46:3d:f9:64:4f:d0:c4:a5:bf:59:dc:ae:20:
         66:c4:e5:53:d0:55:df:5e:dc:02:60:20:74:e4:e7:14:12:b9:
         b4:42:bc:e4:64:18:93:7e:12:29:a1:a3:31:b9:1a:e6:69:7b:
         60:b0:3d:da:fc:4f:d8:71:45:0d:b8:f4:0f:4d:a0:0a:c1:16:
         f6:ad:c9:c0:2a:4b:97:ab:a8:b1:3d:65:7d:c5:ea:6f:b1:c9:
         de:b3:c8:b3:b8:04:b1:1f:7f:25:04:5a:7b:eb:e8:70:da:6f:
         a9:61:f5:b3:0c:a4:18:83:b4:36:89:14:4b:6b:f6:fd:89:8d:
         9c:46:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:10:47 2025 by rpki-client