Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa
File:                     3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa (raw, json)
Hash identifier:          M2gph0kR39VwaTahB+4VGccJBcRaOChYxBhZpfrsGdk=
Subject key identifier:   50:9A:19:C8:4D:D2:45:9D:D6:55:2A:A4:34:65:39:07:43:50:34:55
Certificate issuer:       /CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
Certificate serial:       2D9B25D2B5ABEED185F6DB4467368DEF796E60F6
Authority key identifier: E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa
Signing time:             Mon 27 Jan 2025 13:21:43 +0000
ROA not before:           Mon 27 Jan 2025 13:16:43 +0000
ROA not after:            Mon 26 Jan 2026 13:21:43 +0000
asID:                     262779
IP address blocks:        186.227.240.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9b:25:d2:b5:ab:ee:d1:85:f6:db:44:67:36:8d:ef:79:6e:60:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E069EE1BA9C7A36827171560AD990CCC81000EA7
        Validity
            Not Before: Jan 27 13:16:43 2025 GMT
            Not After : Jan 26 13:21:43 2026 GMT
        Subject: CN=509A19C84DD2459DD6552AA43465390743503455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:6e:77:f1:0e:c1:3c:9a:e7:ca:1b:0a:5e:
                    84:36:8f:6b:c6:3a:a6:cf:18:e1:ec:51:72:05:27:
                    7e:91:29:ce:82:ab:c9:41:87:09:d9:f0:4c:c3:e8:
                    34:1c:03:4e:c5:0c:69:17:c2:68:4f:50:55:87:f4:
                    eb:d1:0e:bf:44:bf:a9:54:f6:17:c2:4d:49:a3:0c:
                    82:36:40:a9:61:ef:7b:8d:1e:3e:4f:9c:6b:58:c4:
                    ed:c3:b8:8e:75:d3:87:46:c7:7d:8b:86:2d:c1:f9:
                    d6:f9:aa:6a:50:44:0a:60:21:48:8e:82:dd:8a:0b:
                    98:4c:ed:9d:dc:8b:07:a3:e7:92:3d:cf:71:dd:17:
                    26:db:4a:b7:13:40:a2:d1:be:79:15:dc:7c:35:eb:
                    77:48:28:84:61:fd:cf:70:b9:8d:bd:e4:7e:ba:d7:
                    c2:c3:fd:4c:a6:64:40:8a:36:17:91:db:8f:13:46:
                    71:b3:a4:5c:05:92:ba:28:c2:70:93:b7:44:a7:29:
                    0a:5f:50:c9:c5:31:80:39:82:75:76:69:0b:8e:38:
                    e7:36:90:c6:19:6d:be:5e:f9:04:6f:4e:22:17:94:
                    b5:90:bd:04:33:5f:a1:be:68:91:f9:b1:c4:2f:6a:
                    ab:5e:a8:70:2d:a0:99:15:a1:ee:5d:db:05:c8:59:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9A:19:C8:4D:D2:45:9D:D6:55:2A:A4:34:65:39:07:43:50:34:55
            X509v3 Authority Key Identifier:
                keyid:E0:69:EE:1B:A9:C7:A3:68:27:17:15:60:AD:99:0C:CC:81:00:0E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E069EE1BA9C7A36827171560AD990CCC81000EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E069EE1BA9C7A36827171560AD990CCC81000EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32302d3332203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:ad:3a:89:42:0a:6b:f8:84:4a:87:e0:71:29:05:43:a8:
         ac:0a:74:5d:83:1b:48:84:36:72:01:53:5d:9a:3f:17:3a:68:
         b0:56:05:48:77:34:eb:f4:87:66:0e:eb:11:8c:45:24:e7:cf:
         3d:76:94:a3:b6:5a:a9:20:0f:eb:47:01:cc:a9:f1:cd:a4:d3:
         9e:fa:a5:11:ad:df:47:4a:d3:e8:09:92:be:b8:79:86:3c:6c:
         9c:ad:ea:6c:4a:f4:2c:bf:2e:5a:2c:83:3a:a5:fc:5c:fc:96:
         dc:a8:b1:75:48:95:4a:6c:d7:da:4b:bc:f6:8f:e1:7d:3c:84:
         3b:23:10:17:ed:64:a3:92:46:d6:05:10:1c:4c:95:43:7a:f1:
         d3:cf:f2:f0:35:b5:36:32:24:e6:0f:12:b3:82:f0:af:80:ae:
         bd:b2:77:67:ce:cd:af:e0:b1:91:d8:aa:0f:be:e0:53:09:b0:
         12:a2:fa:4c:07:f0:c0:0c:8d:dd:80:14:45:fe:d7:f2:2a:87:
         4f:33:ec:53:a9:19:bc:f7:ca:91:d6:37:e3:3b:3c:dc:68:e9:
         0d:b9:f2:b9:93:88:25:54:f0:8f:98:26:5d:4d:83:d0:79:e0:
         c4:a3:9d:85:76:3a:01:00:43:c5:78:15:f1:cf:fb:b2:d4:01:
         f6:99:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:09 2025 by rpki-client