Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e362e302f32332d3233203d3e203238313335.roa
File:                     3138372e38362e362e302f32332d3233203d3e203238313335.roa (raw, json)
Hash identifier:          6HXr8Xkv3cjndUofvXflbvdnTkWvU+ha7VnXvb/vAok=
Subject key identifier:   B3:DA:E9:F3:29:FA:3B:FB:A9:05:53:E8:4C:1C:BA:1A:2C:B1:86:BA
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       7A37235D79BDEB9DE1B1CA4A4743D365B6C8A465
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e362e302f32332d3233203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:15 +0000
ROA not before:           Wed 13 Mar 2024 11:58:15 +0000
ROA not after:            Wed 12 Mar 2025 12:03:15 +0000
asID:                     28135
IP address blocks:        187.86.6.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:23:5d:79:bd:eb:9d:e1:b1:ca:4a:47:43:d3:65:b6:c8:a4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:15 2024 GMT
            Not After : Mar 12 12:03:15 2025 GMT
        Subject: CN=B3DAE9F329FA3BFBA90553E84C1CBA1A2CB186BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c9:14:19:b1:17:f5:6f:58:ed:f8:3b:3d:74:
                    8c:f1:77:f0:d4:67:97:d0:e5:4a:fc:f8:65:64:6e:
                    27:cb:e5:bc:fa:32:e4:cc:ea:4b:8c:df:51:e7:40:
                    d3:92:e2:0a:df:12:69:aa:98:24:d8:19:9a:8b:62:
                    a3:4e:4a:f0:ca:cd:f2:cf:0c:45:b2:ef:af:61:7b:
                    ae:20:06:4b:26:b8:93:31:79:5d:b7:5c:83:40:95:
                    31:20:01:21:ef:68:3d:a4:a9:14:7b:17:cf:1c:f7:
                    30:8e:b2:98:80:da:77:a5:a2:03:7f:0e:20:42:61:
                    e8:f2:00:e8:84:e7:a5:bc:ab:f1:aa:a2:d9:96:c5:
                    49:a7:53:19:9d:ad:c2:df:b6:f4:5e:fb:2d:af:d4:
                    27:71:0b:c1:ed:56:f5:bf:da:4c:14:99:12:7e:13:
                    94:c3:0d:e5:eb:a0:74:a3:54:8e:25:75:7a:2c:e3:
                    56:34:26:55:47:ce:48:ef:32:44:5f:17:c1:a5:91:
                    61:e7:e9:c2:b7:3d:cf:e7:d9:5a:33:56:3e:43:9d:
                    7d:a1:8c:6f:4c:73:67:b7:18:e6:22:28:e3:ae:d6:
                    45:91:fd:c7:8f:a3:f9:c5:2c:28:83:58:1d:74:d0:
                    a5:64:12:0c:98:03:e1:30:c2:ac:72:cb:79:c3:cd:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:E9:F3:29:FA:3B:FB:A9:05:53:E8:4C:1C:BA:1A:2C:B1:86:BA
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e362e302f32332d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:9d:46:53:ce:aa:f1:d6:27:54:7d:07:84:f0:83:bc:ea:
         bf:b7:0e:c5:a2:73:1d:f3:fe:61:7c:ee:ee:66:2a:60:fc:a8:
         d4:b7:8d:2b:71:92:63:3e:66:7e:42:c2:6b:f3:f2:d9:66:ca:
         0f:02:8c:43:4a:1d:28:24:70:6b:c5:da:9b:c1:26:06:4a:7e:
         dd:69:e5:c7:52:49:32:c9:67:8e:94:ac:f3:bd:db:26:3b:3b:
         46:d1:c0:ce:a8:4f:0a:c4:ab:6a:6e:71:ad:9b:af:35:91:75:
         66:55:e0:b8:f3:b2:46:67:fe:b1:5b:ca:18:74:cc:f5:6a:59:
         40:db:bf:7a:b6:38:22:4e:6e:e3:2a:56:43:aa:0f:21:41:dc:
         66:28:ea:db:02:11:d0:5b:35:f1:ac:99:83:c7:b1:60:f7:12:
         09:dc:be:99:f6:4a:23:7c:62:1b:2a:fe:b5:2d:14:b1:3d:2e:
         5b:6d:34:9e:d4:e7:58:21:37:c1:87:ea:53:4d:51:18:2c:0b:
         04:8b:b1:3e:53:64:ba:d6:ad:5f:77:dc:86:db:4c:f5:3b:48:
         f6:21:8b:a2:92:81:01:3f:e5:39:a8:1a:cf:28:3a:40:e6:f4:
         c2:6c:0d:17:17:62:1f:b4:01:40:5b:0e:8b:dd:13:63:37:41:
         1a:9a:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:47 2025 by rpki-client