Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e372e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          ANnbaTaynnCmlq08VfYOdDFhX3M60g6Hn1BOPrbXveI=
Subject key identifier:   72:15:97:6E:57:79:63:9A:AC:4D:37:16:D1:94:6E:0B:E5:FB:32:EE
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7FD499B2C7C0B37B267BA3878B9AB0F563946456
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:59 +0000
ROA not before:           Thu 04 Apr 2024 02:13:59 +0000
ROA not after:            Thu 03 Apr 2025 02:18:59 +0000
asID:                     262663
IP address blocks:        186.216.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d4:99:b2:c7:c0:b3:7b:26:7b:a3:87:8b:9a:b0:f5:63:94:64:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:59 2024 GMT
            Not After : Apr  3 02:18:59 2025 GMT
        Subject: CN=7215976E5779639AAC4D3716D1946E0BE5FB32EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:83:20:33:ff:1c:b2:4f:5e:3f:91:cf:3b:
                    7d:59:f2:f2:e9:80:fb:16:65:7b:09:a2:55:cb:03:
                    a5:07:3c:82:cf:62:0e:bf:50:d3:33:92:01:ff:3f:
                    9a:18:70:c5:b6:e0:65:52:3f:55:b6:69:4c:62:10:
                    d9:ee:c7:49:9d:d8:35:f8:ca:88:5d:10:16:be:54:
                    1a:26:c5:90:d9:7d:04:f0:0d:df:e7:9e:88:5a:ff:
                    ea:a9:84:68:6d:cf:97:69:36:a3:02:4d:ba:4c:67:
                    bf:11:94:05:e9:6c:61:f5:1e:e7:fc:33:70:5b:79:
                    a5:ba:54:68:8c:fb:77:93:63:3f:a5:45:35:9e:2b:
                    61:73:81:55:23:2a:99:5d:8e:57:d5:12:1b:60:6d:
                    a5:d8:5f:98:c0:8c:f7:e2:4a:bf:10:75:42:a3:c9:
                    10:61:08:33:d4:a6:a6:9e:2b:aa:7f:5f:77:5e:04:
                    f1:c0:7e:3a:da:3f:34:ef:6c:cd:81:40:dd:69:d1:
                    ba:ec:63:b8:01:4c:dd:6f:a1:50:b6:db:51:9f:bc:
                    29:41:71:70:f4:a6:83:df:a1:7b:9d:5c:5f:a6:0f:
                    48:6f:d4:be:ba:0c:d7:52:e3:bf:d4:32:a0:0e:a4:
                    ab:a5:0d:48:ec:77:60:ce:f7:d8:e5:05:69:0e:b8:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:97:6E:57:79:63:9A:AC:4D:37:16:D1:94:6E:0B:E5:FB:32:EE
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:31:1a:81:23:41:1b:8f:60:00:4e:52:84:e2:51:74:b4:
         95:bf:96:29:dd:e8:7d:48:bd:7b:e6:1e:79:b1:66:45:4b:bb:
         8d:45:8b:2b:34:7b:f6:6f:e1:44:ec:19:04:7e:71:c0:6e:5a:
         1f:82:02:d6:68:71:e1:2d:46:b9:fe:cc:1b:1a:b3:f3:36:a3:
         30:6f:f4:5c:04:82:c7:01:9c:50:49:42:cc:c4:48:07:51:c5:
         1d:81:5c:38:f7:93:61:35:c5:47:4b:7d:4b:28:4d:c9:a1:64:
         5e:c2:a9:be:03:a7:b3:04:d7:72:63:7b:71:77:0e:b0:cf:fb:
         cd:58:1c:bc:3a:6a:88:dc:8b:68:ec:24:ee:01:fc:2b:fa:67:
         c5:b9:e8:c4:a1:6e:9a:0e:d2:f6:f1:7f:97:ae:07:4c:3f:00:
         f4:2f:35:77:99:2e:5c:c8:35:51:83:d5:14:ac:d1:16:22:ae:
         52:b5:d7:c9:6b:e2:f5:cf:d7:4d:54:88:13:6a:f1:78:87:79:
         f1:e7:42:50:59:be:77:9a:87:9d:8b:99:ba:d6:6b:5a:c3:19:
         16:54:b9:07:ab:33:9b:2b:8f:f7:57:e6:9d:83:7b:cd:f2:b3:
         8e:8f:11:35:2d:20:9e:5d:dc:52:d4:7c:69:47:71:6e:24:f6:
         2b:6a:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:22:38 2025 by rpki-client