Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          ibkfdWqZS56bFEdZovBKyA8NPbud/u10KaSacyVBbaY=
Subject key identifier:   5F:8B:E1:7B:EC:9A:BB:D9:01:15:03:DF:30:B7:B0:6F:5C:11:DF:E4
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       069557889AE8B731BA2A8F66276F2BAE720908F6
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3332203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:18:00 +0000
ROA not before:           Fri 14 Feb 2025 19:13:00 +0000
ROA not after:            Fri 13 Feb 2026 19:18:00 +0000
asID:                     52580
IP address blocks:        186.195.67.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:95:57:88:9a:e8:b7:31:ba:2a:8f:66:27:6f:2b:ae:72:09:08:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:13:00 2025 GMT
            Not After : Feb 13 19:18:00 2026 GMT
        Subject: CN=5F8BE17BEC9ABBD9011503DF30B7B06F5C11DFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:69:db:4a:8b:3d:f4:4f:f4:94:0f:3f:1d:
                    56:cd:dd:52:af:84:2d:89:7b:54:7a:53:64:68:c2:
                    7b:a2:cd:cb:bf:6a:7b:86:64:01:ce:5f:fc:e9:88:
                    df:59:44:89:2f:bb:5e:ac:ba:92:ff:e8:8d:62:d2:
                    01:69:f1:fa:98:58:8b:d1:e1:4c:40:27:78:cc:32:
                    27:eb:be:46:df:9f:23:91:ac:25:a5:33:26:5b:f6:
                    e5:f8:c8:60:ea:e7:a6:fc:dc:20:15:47:da:cc:d7:
                    a8:83:cc:0e:2e:3a:7f:16:b5:01:53:82:86:ce:35:
                    16:d6:d5:53:02:68:12:5d:cb:67:61:c9:94:04:ad:
                    bf:60:c7:e6:34:fb:8e:6a:39:2d:aa:b9:f0:b8:6f:
                    3e:54:22:f0:6a:74:af:91:5c:b0:5e:f7:a1:32:64:
                    d3:b6:27:ea:72:4c:8d:9e:b8:e2:c7:c1:3b:a5:98:
                    ce:9e:6e:68:2a:b8:36:c7:b7:a8:12:79:a0:e1:68:
                    cd:e3:f6:d7:c9:37:87:30:4a:e3:f6:70:0e:63:4d:
                    a8:86:04:74:c6:cd:b4:ae:4f:fc:c4:ff:79:1f:9f:
                    37:c8:69:3c:86:ad:6f:e4:fb:8c:6e:44:10:ee:f8:
                    ae:30:4d:8d:1c:74:0b:ad:f2:9f:2a:14:21:5c:4c:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:E1:7B:EC:9A:BB:D9:01:15:03:DF:30:B7:B0:6F:5C:11:DF:E4
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:e6:0e:5d:89:b4:f6:73:8e:99:eb:73:38:5f:e0:ed:3d:
         d1:09:84:be:a0:09:8a:2b:e4:1a:6d:36:4d:a0:e7:d8:63:88:
         0a:be:5d:4a:20:60:57:02:26:9d:3b:c4:23:4b:6f:1f:d5:e1:
         c6:1d:80:ce:88:09:a0:e0:26:b0:9e:68:cf:d0:9f:65:f9:f5:
         b8:8b:12:4d:f7:f6:0e:39:7a:a5:3c:14:66:cd:96:2f:23:53:
         33:5e:b4:72:53:ca:4d:9e:84:bc:ea:a8:2a:48:f0:dd:d8:18:
         45:87:75:1a:35:6a:ec:15:1a:48:df:39:cc:88:c4:a6:29:1f:
         49:94:4b:9a:ae:02:84:9a:e8:98:cf:6e:54:5b:75:8c:47:1a:
         2c:10:4d:20:a1:41:d3:65:a7:c1:92:d8:d4:89:e1:5d:0d:d9:
         3c:59:f1:41:f2:e6:71:f0:db:31:10:65:88:2d:9b:dd:98:3f:
         56:e1:58:26:60:58:35:a4:42:4f:1c:48:8a:60:cf:bc:17:7e:
         d8:45:9e:aa:76:1f:ca:d6:52:7e:9e:e9:f0:39:f6:6c:28:fc:
         a5:aa:5f:2d:c6:b9:e4:24:7c:cc:87:7e:d6:e8:81:40:c1:2a:
         4f:43:f2:20:05:07:eb:dc:b2:85:bd:e3:b0:ec:1f:c0:72:fe:
         10:06:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:26:25 2025 by rpki-client