Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e382e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          m/6kj/Gf3uEqJSfEfMCTWQQH4reXPNfgxfghCy9nDJ4=
Subject key identifier:   78:1B:57:1C:66:96:48:85:B0:18:12:A3:97:02:CE:8A:01:7C:7F:EB
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       77FA7CFFF992F4B3ADD226C2834B8D654E77E2A5
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:14 +0000
ROA not before:           Wed 13 Mar 2024 11:58:14 +0000
ROA not after:            Wed 12 Mar 2025 12:03:14 +0000
asID:                     28135
IP address blocks:        187.86.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fa:7c:ff:f9:92:f4:b3:ad:d2:26:c2:83:4b:8d:65:4e:77:e2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:14 2024 GMT
            Not After : Mar 12 12:03:14 2025 GMT
        Subject: CN=781B571C66964885B01812A39702CE8A017C7FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:09:e0:d8:1b:9a:15:46:c4:30:97:30:c3:
                    0d:d0:1d:f9:28:41:9b:33:9c:c4:fc:17:fb:73:65:
                    e7:ea:a0:e5:6a:b3:9a:2a:70:65:43:dc:ed:c7:92:
                    3b:55:e8:4e:80:28:65:b5:43:a7:9b:4c:26:ac:d8:
                    40:ce:f4:74:95:80:4b:a5:97:c0:0c:82:ae:15:98:
                    d4:04:3d:d4:2c:c2:8e:90:ef:bf:65:13:41:0e:5e:
                    0d:ba:7d:0d:af:8f:c3:d5:23:37:0f:9c:b4:80:90:
                    67:75:44:af:1b:af:0f:88:da:db:e2:1f:48:1d:fa:
                    f8:7a:16:db:97:e6:de:8e:11:a4:be:db:30:9f:36:
                    ec:b0:e0:22:4a:5c:1c:f6:67:fc:f7:0a:09:e1:fd:
                    83:6a:d5:e4:63:4b:0d:1f:f9:f4:0a:42:2a:42:d7:
                    7e:3b:5a:0b:6f:a3:41:dd:76:d2:0b:11:be:e7:15:
                    2c:5e:45:ea:e9:22:aa:ee:5f:cf:2d:93:ae:5b:40:
                    3f:f7:3d:65:f1:b9:ed:0f:62:14:26:ff:39:f8:65:
                    84:78:59:76:18:c1:e2:9c:08:bf:f9:f4:08:b3:7c:
                    4a:d2:d9:d5:9d:94:90:e9:62:2f:a2:58:08:f0:39:
                    32:cb:9f:00:6c:c0:39:c9:26:92:32:94:3c:a8:b6:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1B:57:1C:66:96:48:85:B0:18:12:A3:97:02:CE:8A:01:7C:7F:EB
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:4d:31:6b:09:fc:20:30:33:05:b0:9e:8d:5d:3c:f3:b6:
         c7:c0:38:ec:4f:03:af:60:05:0e:67:01:50:04:ae:ee:f6:76:
         03:9b:ed:f6:fb:c6:98:91:e2:e9:2a:0a:6c:14:36:d3:7a:77:
         64:fe:7d:b8:c8:8b:ae:21:b8:c0:98:79:8f:5c:3d:16:0a:91:
         69:84:08:7b:3a:4f:8a:25:67:fb:81:36:0b:8c:95:e1:25:fa:
         ad:64:50:97:cf:fb:9a:8b:08:f9:85:e2:b0:f9:12:36:6e:0f:
         c6:83:7d:ba:ae:fe:84:f9:9c:ea:e1:12:38:d5:1f:ea:26:e7:
         87:6d:26:cb:5a:be:22:05:1b:42:27:88:74:c6:da:33:d7:17:
         84:52:a6:10:01:0b:1b:b9:8b:14:a8:fe:c9:5f:81:52:32:f9:
         68:48:ae:01:f0:64:87:1c:db:9b:e0:88:e9:50:9c:73:17:73:
         0b:04:e6:3b:f6:4a:01:14:5a:a3:86:d7:6b:c9:3b:26:63:76:
         33:21:73:26:1f:70:9c:71:b0:d9:86:0f:56:02:6e:5f:e1:3b:
         df:75:40:1a:e1:0e:ac:41:2a:7e:fb:65:33:3a:88:b2:24:ce:
         d3:a6:5b:1a:a5:e7:0e:81:a0:d6:6e:c1:51:74:84:d3:86:47:
         c4:3f:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:00 2025 by rpki-client