Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36352e302f32342d3234203d3e203532353830.roa
File:                     3138362e3139352e36352e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          wLKuZFDwz3FY8sp6xJEfvSGi4YbxEVSRGltadUixK0w=
Subject key identifier:   EC:DC:EC:0C:24:DD:53:88:A1:B0:7F:19:A8:92:AF:DE:9F:7B:C1:30
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       112A29D2C4B0F4BE3FC9D94A6282E8973FEAE5C7
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36352e302f32342d3234203d3e203532353830.roa
Signing time:             Wed 06 Sep 2023 17:03:47 +0000
ROA not before:           Wed 06 Sep 2023 16:58:47 +0000
ROA not after:            Wed 04 Sep 2024 17:03:47 +0000
asID:                     52580
IP address blocks:        186.195.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2a:29:d2:c4:b0:f4:be:3f:c9:d9:4a:62:82:e8:97:3f:ea:e5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Sep  6 16:58:47 2023 GMT
            Not After : Sep  4 17:03:47 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:ec:34:91:0b:a8:1d:e4:34:1e:dd:b3:7a:
                    0e:57:ec:66:3c:2a:92:8f:ec:10:50:8f:0f:bc:9c:
                    15:c9:3b:e5:3d:20:f8:55:f5:4a:d2:81:28:bb:11:
                    ca:87:59:f3:49:9b:0d:6b:48:f1:48:19:77:5a:72:
                    14:c6:f0:f6:ae:46:ff:02:0a:43:2c:8d:92:64:0b:
                    a4:ce:21:af:c2:3e:c6:37:ec:7f:d2:5c:06:ee:49:
                    57:1c:36:ce:83:9f:8d:4c:79:c7:4b:0f:b1:b2:3c:
                    cb:61:08:55:ee:6f:ef:85:94:ff:bb:9d:c4:b1:3f:
                    e7:30:88:92:24:a3:f8:e2:71:40:50:61:5c:c6:7a:
                    6d:f3:1d:be:ff:9d:1c:da:26:4a:ef:6f:af:5f:60:
                    dd:d8:6d:93:00:8e:95:f6:d9:2d:a6:ea:0f:69:8a:
                    a6:b5:90:e9:84:73:e9:7a:ad:4b:7f:da:40:af:84:
                    aa:77:9f:01:09:7b:ec:cf:d1:7b:9f:88:93:15:92:
                    f8:94:4c:49:4a:fd:5e:85:92:16:ce:cb:99:c1:16:
                    58:69:e4:42:08:b8:50:a3:96:62:8b:ce:a9:75:b1:
                    30:97:ec:e7:77:df:f4:93:7c:d3:d8:79:31:4b:6c:
                    91:6e:c9:94:46:28:f6:d1:3e:ec:ad:6a:19:3b:72:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DC:EC:0C:24:DD:53:88:A1:B0:7F:19:A8:92:AF:DE:9F:7B:C1:30
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36352e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:b1:22:0b:0e:56:24:7b:1d:ad:9b:4a:92:cd:fa:a4:79:99:
         10:b1:91:7d:50:20:9b:50:4c:1d:1e:cd:9b:5b:cf:79:ab:63:
         41:88:4f:23:c7:7d:65:27:a6:e9:3d:3a:e4:d3:cd:46:af:2c:
         24:d3:b4:68:a4:0a:bf:8a:74:a5:42:e3:61:d3:9c:a8:09:f3:
         36:ef:81:53:7f:be:c3:e3:5c:cc:f4:0c:06:cc:35:ad:56:b4:
         c9:df:d8:43:ef:f5:6d:c7:cf:c4:9b:ec:e0:04:d4:6a:01:5c:
         9f:dc:49:53:64:a9:50:7a:92:c8:cc:3b:19:e3:b2:98:d7:2d:
         d0:b7:ae:14:36:fc:a4:b1:70:52:d1:2e:c8:58:70:17:a4:cd:
         bf:3a:8a:32:da:84:b0:79:32:65:20:84:6b:64:c4:5f:fd:c8:
         de:b3:96:1f:f6:1b:03:51:1e:72:dd:48:d4:f1:cb:c9:75:64:
         9b:a4:81:b7:81:e2:b2:4c:c7:21:60:29:eb:83:2f:51:7d:41:
         9c:1c:ec:5f:63:ca:2c:a6:72:f0:e2:f4:04:25:af:1d:52:8e:
         80:7a:32:30:97:96:49:8f:bd:cf:b6:ec:75:71:73:f7:8b:0f:
         7a:14:6e:4a:90:c9:82:33:52:ed:ae:78:46:61:85:80:c3:a1:
         ee:1d:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:13 2025 by rpki-client