Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          h8i0mgB00mQmpI0+16Ua3uFTWtuiA6KyG9U+QfPssgY=
Subject key identifier:   8C:66:96:47:F7:B0:07:79:09:34:74:70:E2:EC:E6:2E:77:E8:94:7B
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1C12E290913A93118E9815B5767D1D40378E4BD2
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:55 +0000
ROA not before:           Thu 04 Apr 2024 02:13:55 +0000
ROA not after:            Thu 03 Apr 2025 02:18:55 +0000
asID:                     262663
IP address blocks:        186.216.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:e2:90:91:3a:93:11:8e:98:15:b5:76:7d:1d:40:37:8e:4b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:55 2024 GMT
            Not After : Apr  3 02:18:55 2025 GMT
        Subject: CN=8C669647F7B0077909347470E2ECE62E77E8947B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:73:72:8c:b3:9c:68:9c:3a:12:59:f1:83:8d:
                    fa:5b:3f:05:7f:5a:0e:58:50:b3:90:f3:6e:4b:d5:
                    b8:60:6d:d2:90:12:5f:08:a3:80:6a:50:33:a8:ef:
                    71:94:7d:4a:db:58:63:09:12:31:a4:a7:95:c5:88:
                    15:19:a8:84:5f:7c:43:8a:88:ed:20:ab:bd:4e:64:
                    c3:7e:0a:cc:6f:8d:70:41:d0:21:e1:f6:ce:ca:e5:
                    07:f8:78:28:ed:3b:94:5e:d7:13:92:be:de:eb:2b:
                    e7:76:83:ba:11:1c:3c:ab:f3:ee:9b:38:18:30:1d:
                    e2:35:92:6e:b5:d9:d1:fb:fb:48:7c:26:e9:a0:0a:
                    c0:b1:97:a1:53:fd:2b:54:7e:1e:90:f5:12:1c:34:
                    8e:43:5f:32:dc:21:a8:58:70:83:96:bf:42:eb:6a:
                    13:74:cd:60:3c:ba:df:c2:a6:6f:eb:c0:e9:88:04:
                    b5:0c:35:57:09:47:74:4d:c4:38:89:3f:d7:c2:a2:
                    ca:b5:8b:0b:ac:c4:44:89:8b:81:d4:d4:5e:1d:e7:
                    47:1c:cf:00:ef:9f:d1:a7:9e:56:6b:71:a4:e1:67:
                    82:c7:a1:6c:89:a9:7a:f1:b3:78:92:ea:16:ac:48:
                    70:49:a0:88:5c:1b:07:0f:33:30:9a:17:cf:f5:d0:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:66:96:47:F7:B0:07:79:09:34:74:70:E2:EC:E6:2E:77:E8:94:7B
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:12:95:86:59:73:33:ca:c9:7f:c3:bb:a5:ed:ad:3a:8e:c5:
         6c:97:1b:54:34:8f:70:77:01:b2:36:0c:92:96:2a:50:37:21:
         c5:be:67:d7:a9:11:94:16:2d:3f:60:ba:f0:09:16:05:ca:9f:
         d3:bc:d4:19:73:53:f7:df:40:a8:d1:cc:17:f4:c9:73:f7:0e:
         79:56:35:25:85:68:0b:f7:aa:42:be:4e:7b:0d:7a:26:e1:dc:
         57:1e:8e:6e:24:7a:01:97:b2:f6:50:f6:b2:79:d9:7a:9f:b2:
         6f:07:17:12:93:62:81:12:7f:08:2f:b5:89:16:ba:15:1a:43:
         ca:90:e0:fe:e4:05:fb:9a:0d:13:d2:30:9d:54:5d:da:f1:f4:
         8e:cb:f3:2c:78:ee:d2:65:73:18:52:27:e3:1b:bf:43:22:11:
         2c:ee:7f:f1:b9:7d:48:d9:f5:b5:9b:e9:b5:fc:07:aa:23:99:
         df:c7:b6:79:a0:b5:63:f3:ca:47:c9:83:b7:84:f0:db:f7:46:
         5e:7e:63:f5:c8:55:1d:d2:70:2e:71:6e:c1:98:61:85:51:23:
         6d:28:8e:44:f1:8c:ac:ee:29:99:70:ea:de:03:8c:43:85:3b:
         ae:96:78:cb:91:b9:cb:3e:ef:7e:9f:14:ae:8d:bc:3e:6e:a7:
         f9:9c:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:44:15 2025 by rpki-client