Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e382e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          g59S38zRv1hT2UcBOqBAo5iPu0PPV1Y87tsBBngFnRo=
Subject key identifier:   16:5A:33:8E:E7:8E:BE:7C:CE:BE:0D:D8:4E:5D:B9:96:EB:C0:2B:FD
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       13DD247F597B008C9D5D9919080FD36F7A5DD975
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:02 +0000
ROA not before:           Thu 04 Apr 2024 02:14:02 +0000
ROA not after:            Thu 03 Apr 2025 02:19:02 +0000
asID:                     262663
IP address blocks:        186.216.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dd:24:7f:59:7b:00:8c:9d:5d:99:19:08:0f:d3:6f:7a:5d:d9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:02 2024 GMT
            Not After : Apr  3 02:19:02 2025 GMT
        Subject: CN=165A338EE78EBE7CCEBE0DD84E5DB996EBC02BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:98:3b:95:85:95:99:db:57:37:ca:39:ee:
                    b3:7d:99:6e:73:2f:2c:3b:9b:0b:43:99:ad:a1:92:
                    9a:74:d7:10:e4:4e:cf:77:b1:8b:e8:5d:08:2c:f5:
                    58:66:f3:18:23:e7:7f:34:97:50:1c:a9:fa:d9:2d:
                    52:20:30:ac:7a:8c:ed:22:29:91:d9:b4:7f:81:71:
                    87:77:41:9b:23:31:9f:d7:c1:61:24:19:0e:85:dc:
                    a3:f3:22:fe:3a:5f:db:87:ca:59:0b:82:65:95:f5:
                    ce:09:4f:e8:ee:ec:c1:a9:fb:7a:82:e2:d4:0a:10:
                    23:23:a4:d6:b2:ba:84:81:59:ef:e0:43:d2:52:82:
                    51:66:dc:19:b2:77:8b:82:67:2a:5b:93:0d:b7:51:
                    c8:06:e3:aa:5a:93:91:53:b9:c6:2f:c0:50:82:9a:
                    c7:48:79:92:83:62:06:55:73:c0:bc:e3:5c:1a:58:
                    c3:d9:2e:bc:21:6e:8b:48:43:59:09:95:13:16:e1:
                    c5:4d:f0:76:96:48:05:45:68:ec:3f:ef:16:e0:ee:
                    c7:fc:af:59:db:00:d4:2b:ba:be:99:f5:7e:63:f3:
                    4c:7f:fb:2c:23:12:da:66:97:ac:68:8a:66:95:ec:
                    d3:fb:84:f5:9e:97:01:76:15:5f:a2:0d:35:28:0e:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5A:33:8E:E7:8E:BE:7C:CE:BE:0D:D8:4E:5D:B9:96:EB:C0:2B:FD
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:ff:47:b5:64:f9:aa:cd:f4:40:5b:17:db:47:17:61:76:db:
         f3:9a:d5:7d:d6:0b:06:e2:91:37:8b:78:2c:a7:57:ca:38:05:
         83:ca:f3:6e:e4:11:d7:9f:99:dc:75:25:c1:75:aa:f6:1d:de:
         9f:58:c0:25:27:f1:31:6e:79:81:7b:5b:1c:e7:07:47:4e:ec:
         86:be:65:a2:2a:cd:12:98:d1:db:1d:a4:71:62:9c:96:3a:07:
         9d:a7:97:5e:3d:e1:8b:d0:7d:31:65:4e:eb:8c:08:33:45:ea:
         9f:fb:8b:1a:eb:4d:1b:65:a6:ee:73:a7:20:8c:33:10:1a:ca:
         8a:7e:0d:60:a9:7a:7c:54:01:1d:e8:8f:b9:de:0d:cb:8c:30:
         9d:4d:7d:fc:a6:67:32:60:69:17:a1:a3:33:30:d4:92:25:75:
         c6:5a:2e:f6:0d:48:fb:bd:d1:e1:e8:e7:78:b1:12:f5:c9:20:
         0e:a1:69:02:67:89:13:33:ef:b0:4f:da:80:a2:fa:e3:ac:43:
         23:07:d4:3b:71:31:33:16:e2:d3:43:37:cc:ed:a7:a1:ed:77:
         e0:0f:a2:16:79:01:08:5f:d9:a3:1d:73:9b:d0:ff:e7:3c:4d:
         76:b1:57:68:c1:4f:f1:f5:10:f4:67:83:ef:dd:c5:16:c1:5e:
         39:78:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:46:39 2025 by rpki-client