Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          PedZisBJNGHN4CNevcDRtCLPGmmen6552RwZP4TAgYQ=
Subject key identifier:   47:86:B9:9A:90:FC:6E:26:80:4D:4F:7B:04:52:45:3A:89:5B:E3:79
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2D66AB0A767ED006AB5503D6904E39BA68D38B00
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:03 +0000
ROA not before:           Thu 04 Apr 2024 02:14:03 +0000
ROA not after:            Thu 03 Apr 2025 02:19:03 +0000
asID:                     262663
IP address blocks:        186.216.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:66:ab:0a:76:7e:d0:06:ab:55:03:d6:90:4e:39:ba:68:d3:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:03 2024 GMT
            Not After : Apr  3 02:19:03 2025 GMT
        Subject: CN=4786B99A90FC6E26804D4F7B0452453A895BE379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:41:fe:09:9b:f9:e6:ac:55:f6:74:94:42:d2:
                    bf:f6:33:c3:5c:45:5c:dc:79:d2:f7:08:51:63:d9:
                    e8:75:a3:b1:26:be:d1:fc:c6:db:f5:ae:7b:99:28:
                    af:76:97:cc:c3:50:fe:df:d7:23:49:34:48:b3:31:
                    6c:20:27:61:c8:12:18:f5:6e:00:c9:04:49:51:79:
                    ce:81:c9:c7:90:1a:31:27:da:77:49:be:68:46:ba:
                    06:29:bd:d9:70:0e:93:c8:0c:da:d1:7c:b8:d4:cd:
                    a8:30:f9:6a:57:b0:d4:79:72:a3:86:e9:6c:fd:f0:
                    e1:29:25:ff:2b:f1:b3:dc:b7:59:03:db:12:09:eb:
                    60:e5:3c:1d:a2:e1:e3:e0:3c:08:8e:ef:19:e3:70:
                    07:48:ff:b1:4d:d1:d9:35:39:25:92:64:54:97:1f:
                    93:d2:9f:f2:f9:37:35:df:35:d0:cd:f6:5d:a8:52:
                    75:1c:7b:ef:bd:8f:61:04:75:c2:4e:12:36:29:d3:
                    4c:29:ff:49:72:f7:d0:01:49:82:da:9b:56:d2:36:
                    1d:36:f2:1f:f5:f5:0b:18:3c:3d:45:82:56:a3:fa:
                    88:ab:4c:ab:ff:57:f6:f8:08:bf:84:c4:97:73:d1:
                    8d:10:eb:44:48:a8:a5:2a:76:7d:2c:9e:2c:2e:ef:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:B9:9A:90:FC:6E:26:80:4D:4F:7B:04:52:45:3A:89:5B:E3:79
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:41:95:a4:cd:e3:41:50:1d:e2:f1:9f:83:e0:da:86:53:
         5a:6b:05:5f:52:b0:52:76:07:79:52:82:4e:fa:8e:6d:58:63:
         82:e6:d8:60:c3:ca:b8:3b:7c:fa:d8:0b:f8:ee:a6:e2:4b:dc:
         47:2b:7f:03:50:c4:f5:9a:be:1d:42:bf:bc:0c:68:73:ec:1d:
         36:5e:0e:64:2a:35:29:14:4a:2b:22:31:24:fe:64:24:a0:d8:
         83:c0:a1:f1:62:78:fd:0a:72:de:50:a5:4b:db:25:33:50:a0:
         d9:d1:a3:8a:98:77:a5:e3:18:25:48:b4:d0:fa:a7:64:ea:a8:
         ee:28:15:ec:3f:42:78:78:84:db:00:ac:79:67:5d:88:b9:2c:
         92:75:61:56:f0:94:a9:85:36:c1:b2:b1:7f:c5:0e:9d:cb:d8:
         83:6e:a2:c1:bc:cc:86:9d:a0:67:f2:dd:34:ec:41:6d:46:e3:
         d3:b2:28:8c:5a:1e:14:93:b2:5a:07:9d:1e:42:64:7f:b4:92:
         ca:d7:ab:64:7b:ea:48:ac:bc:6b:88:3f:fa:c0:00:cc:ed:9f:
         9c:0f:58:69:29:70:bc:bf:ce:c7:8a:85:83:11:fa:d8:15:d8:
         d7:f8:e3:87:4a:7f:2a:0a:03:1b:a3:e2:23:f6:23:bc:c6:55:
         79:6d:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:21:27 2025 by rpki-client