Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e342e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          PPtl1qshiNTNYEGPcnnisimxKMHEuUS/s+jYuRh1FI0=
Subject key identifier:   CA:76:39:3F:2D:68:79:1E:38:37:17:89:EF:1F:5D:ED:00:76:12:ED
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       64282DF4BCF904A8DDB47E2F515F3DA8E84CD79C
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e342e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:01 +0000
ROA not before:           Thu 04 Apr 2024 02:14:01 +0000
ROA not after:            Thu 03 Apr 2025 02:19:01 +0000
asID:                     262663
IP address blocks:        186.216.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:28:2d:f4:bc:f9:04:a8:dd:b4:7e:2f:51:5f:3d:a8:e8:4c:d7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:01 2024 GMT
            Not After : Apr  3 02:19:01 2025 GMT
        Subject: CN=CA76393F2D68791E38371789EF1F5DED007612ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:92:e8:f4:64:9e:06:79:d1:b4:e1:71:d5:2c:
                    7d:bc:0b:e4:97:90:46:30:8f:ff:3d:89:75:07:8e:
                    51:50:7c:42:97:c5:1d:d5:d6:ca:03:02:85:9e:74:
                    8e:a3:c6:de:ea:9b:fc:a4:35:82:29:41:08:6a:71:
                    53:0d:93:15:f8:1e:4a:79:de:1b:67:0e:67:b4:53:
                    dd:8d:01:e5:62:d9:1d:e2:fe:55:8a:fe:84:52:01:
                    fc:66:7a:8a:a4:28:60:f7:80:eb:21:22:4b:63:a1:
                    a8:32:6d:2e:a2:df:a9:5b:da:84:c1:3f:34:be:bf:
                    db:cd:ff:88:db:10:e8:c8:c5:5c:10:ee:3b:12:f3:
                    49:87:23:c9:db:0a:2b:78:8b:cf:58:3d:53:75:41:
                    84:55:d1:76:b6:fd:7e:af:3a:a3:00:00:55:e8:5f:
                    6b:7d:f2:b7:3a:76:6b:0b:be:bd:cd:cb:c2:85:84:
                    25:f8:2c:ab:73:7e:05:48:65:e4:46:ec:6d:08:1d:
                    ae:1e:72:32:ba:20:63:21:a4:5f:a8:c6:cc:2c:fa:
                    b2:74:95:55:95:1a:e1:b2:d8:28:69:9e:79:cb:c7:
                    41:e8:67:68:4c:96:65:98:eb:e9:29:71:e5:23:d6:
                    5c:00:c6:0a:d5:e9:35:b5:ce:55:9c:32:23:f8:13:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:76:39:3F:2D:68:79:1E:38:37:17:89:EF:1F:5D:ED:00:76:12:ED
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:a2:a3:6b:13:d8:a0:15:44:8c:ae:b8:64:d8:9d:50:0e:
         0d:4a:84:c8:17:3d:83:1d:0b:50:30:db:57:08:81:bf:5a:4a:
         df:c3:0d:fa:87:df:59:a2:bc:72:ee:63:ed:a1:58:85:07:32:
         f8:5a:56:3f:6c:77:20:e1:bb:fe:c4:a7:e1:ce:e2:ac:f2:a8:
         e6:0c:da:27:27:7a:82:62:5d:28:d6:d6:89:79:1d:35:52:e5:
         01:78:e5:bb:bc:bc:16:4e:50:e7:23:3f:76:d9:0e:29:83:7b:
         66:f0:21:b7:09:7c:6b:d4:3c:5f:7f:3d:0c:16:1f:8c:3d:a8:
         fc:62:61:48:37:c7:68:ef:9f:2f:96:fb:07:41:7a:c8:a5:63:
         6c:a6:1d:32:50:dd:d0:e8:9a:0a:f6:fe:8f:fc:b4:57:85:5e:
         dd:35:8b:9a:8f:bc:98:7d:96:fd:b4:8d:2b:cc:11:49:2b:f2:
         4e:75:56:bc:19:90:18:81:a1:f6:15:d5:7d:6a:e7:f2:34:74:
         b4:1a:7b:af:dd:bb:1d:26:b9:81:c8:70:a5:d0:9e:7d:59:3f:
         39:5c:f1:54:8e:a0:26:76:c7:34:0c:29:d4:31:ac:50:7e:9f:
         e9:17:00:ba:11:50:72:49:e6:17:71:f1:5e:a6:9f:53:87:90:
         82:37:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:19:04 2025 by rpki-client