Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33342e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          0zN38nQmwwyx74EB036UOWmg0YES6jV0R7zWqDPEmp8=
Subject key identifier:   EF:B3:02:11:31:84:C1:E5:78:D1:10:A6:75:A5:A6:8B:A6:1F:9F:E0
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       51D779DC479453D90ED095502967C46FBCCE138E
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33342e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:04 +0000
ROA not before:           Thu 04 Apr 2024 02:14:04 +0000
ROA not after:            Thu 03 Apr 2025 02:19:04 +0000
asID:                     262663
IP address blocks:        186.216.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d7:79:dc:47:94:53:d9:0e:d0:95:50:29:67:c4:6f:bc:ce:13:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:04 2024 GMT
            Not After : Apr  3 02:19:04 2025 GMT
        Subject: CN=EFB302113184C1E578D110A675A5A68BA61F9FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:84:35:5a:5c:c1:af:fe:2b:12:0c:6c:06:
                    ce:89:35:38:7d:fa:c5:9a:47:d5:1d:a7:1d:3d:d0:
                    ed:e9:7b:d7:52:26:fa:3c:e8:fe:e3:5c:6b:17:5a:
                    e3:f1:1e:74:42:0b:8d:4c:70:46:97:ee:9b:17:90:
                    1f:e6:8d:da:fe:f9:a2:9c:30:81:8d:80:af:45:36:
                    c6:38:26:a6:95:1e:67:0e:6e:2f:9b:90:02:4c:49:
                    12:97:93:b5:b2:33:d1:ac:82:2f:df:8b:5a:74:58:
                    f0:29:26:94:f8:9b:3f:6f:49:95:03:c6:fd:94:27:
                    33:90:b6:08:60:28:4f:de:b0:25:72:53:88:b8:96:
                    31:e1:fe:4e:b8:64:ac:e1:70:85:0b:40:51:7b:5e:
                    6e:3d:94:13:35:a0:cb:92:f8:3f:5a:18:06:a1:8a:
                    d2:56:e0:6e:6e:9a:ea:6b:87:c2:cc:dc:f2:b4:08:
                    01:cb:e3:cd:d1:2c:d2:a6:00:63:6c:e1:3d:44:ff:
                    f7:ad:66:95:e4:8d:6e:7a:fa:9b:70:d6:73:97:f4:
                    b8:ec:91:b9:cc:d3:13:32:9b:d5:37:86:79:fc:b4:
                    27:08:b0:a3:76:c6:bc:46:cf:f6:d0:51:5f:5b:f8:
                    5c:c1:a6:b7:bd:a8:54:4f:2d:f7:10:cc:a5:8f:df:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B3:02:11:31:84:C1:E5:78:D1:10:A6:75:A5:A6:8B:A6:1F:9F:E0
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:ff:e9:a0:e1:cc:93:8a:27:c8:6a:41:e2:c1:a8:38:23:
         a0:4b:ba:22:b8:72:7d:4b:2f:b6:ad:19:3f:f9:1b:d6:a0:1a:
         d8:22:04:d2:e1:85:38:b7:13:f1:f4:2f:57:26:2d:3a:10:58:
         b2:05:ff:24:35:b9:f5:6b:ee:0d:50:45:02:31:0e:aa:88:4b:
         d4:fd:ea:d9:fe:41:24:0f:4c:f3:a9:0d:28:10:0e:72:ea:f2:
         8b:f5:61:45:97:3d:39:fa:e4:3c:49:b5:86:38:28:bc:12:32:
         c7:e2:26:4e:31:c4:7c:8d:db:ad:a3:95:03:ca:a8:90:f6:ae:
         6e:96:12:97:44:5c:6c:7d:07:4d:7d:51:b2:01:2d:12:61:d1:
         10:52:0f:9a:2d:f0:68:88:6c:e2:a6:5d:0b:fd:5b:b4:2f:67:
         a9:de:8b:21:c6:ef:6a:4a:85:e9:69:d9:78:ee:e2:c1:a9:59:
         d3:88:50:7b:ac:fd:b7:aa:a7:27:b4:86:13:88:af:35:08:19:
         74:bc:2c:50:0d:20:f0:7f:3a:2e:f4:a5:cf:94:50:6d:a6:f0:
         a3:3e:e8:0b:ae:21:5a:f3:79:ff:00:89:ac:16:b2:f3:ed:ca:
         72:2e:91:fa:59:e3:bf:8e:0c:59:7e:83:b9:ab:f1:52:3c:eb:
         bd:58:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:15:11 2025 by rpki-client