Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
File:                     3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          8P++dIvVL9cVPeF6kQ9dlfW+y+48EDEnpaGZVI1Z78w=
Subject key identifier:   DB:1D:DF:5D:F5:39:47:96:FE:C0:1F:31:38:51:4D:AD:BC:10:FE:0D
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       08E4ACED94ED0CA6B82469ECDA0AF3C59CECD862
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
Signing time:             Thu 06 Mar 2025 23:46:08 +0000
ROA not before:           Thu 06 Mar 2025 23:41:08 +0000
ROA not after:            Thu 05 Mar 2026 23:46:08 +0000
asID:                     28279
IP address blocks:        186.208.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e4:ac:ed:94:ed:0c:a6:b8:24:69:ec:da:0a:f3:c5:9c:ec:d8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Mar  6 23:41:08 2025 GMT
            Not After : Mar  5 23:46:08 2026 GMT
        Subject: CN=DB1DDF5DF5394796FEC01F3138514DADBC10FE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:18:8f:03:b3:a5:60:7a:4d:54:69:6e:10:
                    b7:65:7b:a9:82:58:db:69:6f:db:a7:ac:12:1d:70:
                    a4:1a:b3:35:36:87:15:41:5a:78:b5:b6:03:69:b7:
                    3e:28:6c:c9:5a:20:ff:9f:d2:5e:32:57:61:d6:9e:
                    ad:4f:8f:ba:ed:67:e7:fd:a0:cc:11:62:b5:fc:3a:
                    97:3e:63:70:36:82:cf:82:53:e6:74:0f:f7:6a:d1:
                    36:09:4a:f8:cb:f6:3a:b2:dc:36:ec:db:93:aa:28:
                    17:61:01:fb:36:78:a5:3d:fe:9f:24:50:5b:94:bd:
                    07:57:2c:37:11:90:e0:c6:0c:c4:27:60:ac:7b:19:
                    e9:52:2e:78:49:4d:5a:9f:6e:e1:61:9b:21:26:c8:
                    43:6b:66:88:09:94:6a:ab:c6:5f:36:9c:76:b1:36:
                    e7:9d:25:4f:87:8f:1b:b9:b7:c9:48:eb:e1:cb:fa:
                    c1:22:fc:9c:d4:07:ed:86:4c:b8:5f:ef:9f:52:e1:
                    d3:b8:73:96:87:0e:87:47:a3:ff:fa:44:8c:bd:b6:
                    e4:61:84:cc:5a:9b:a2:64:90:06:d5:ec:58:7a:b0:
                    b2:fe:64:c1:33:4e:1f:e4:c4:57:88:18:bf:2d:54:
                    86:79:bf:7a:99:26:cc:b2:d6:96:2d:23:7d:81:0a:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:DF:5D:F5:39:47:96:FE:C0:1F:31:38:51:4D:AD:BC:10:FE:0D
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:00:01:ad:86:52:b6:be:a3:df:69:15:93:c6:98:b8:4a:
         06:cc:cd:54:dd:52:13:87:57:0e:bc:76:99:23:7a:22:fa:9b:
         c7:2b:9b:d6:77:53:49:2b:8c:23:4c:43:0a:05:d6:83:97:4a:
         d8:68:b2:85:3e:7b:16:32:c6:2d:ac:2e:d5:4c:36:43:fa:4c:
         5e:ce:12:aa:eb:3a:74:9a:59:4b:29:58:fa:71:13:22:de:db:
         f9:d1:6d:f2:f3:25:b7:3a:51:68:87:6a:89:87:bc:02:ee:4d:
         a6:d5:d7:23:dc:72:02:3e:aa:03:89:03:e6:07:3f:fd:e2:89:
         be:c4:e1:da:35:bd:08:9c:e7:be:91:e4:9c:5a:bf:51:04:b2:
         0e:53:51:8d:63:bb:93:9b:c2:3f:6d:e9:45:f6:ef:86:af:5f:
         d6:70:c0:ba:f1:58:53:aa:ac:e1:45:08:d6:03:be:fe:1e:a1:
         c2:ce:5f:dd:de:7d:66:30:2d:7a:35:14:08:d2:dc:43:cb:7f:
         67:3f:85:7c:e0:c5:5e:90:44:84:58:38:8a:e7:75:ec:3e:dd:
         e6:58:f2:b2:35:f5:c7:bf:f4:54:e5:b5:1c:0c:81:82:b5:1a:
         b4:19:c5:eb:b1:f2:2c:ff:9f:aa:5a:3a:39:20:4f:0a:0f:ad:
         77:14:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:37:15 2025 by rpki-client