Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36362e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          a4+y+TReQTn1f8q1BBfn61BZYmF+kVTKZl6CW5kxfWo=
Subject key identifier:   D3:F8:0B:11:D4:DA:2B:A1:5A:36:CE:AB:29:7C:6E:59:BA:07:E1:D2
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       5A35B9F8A11291655003430D236A6AF579336EB8
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:51:41 +0000
ROA not before:           Mon 27 Jan 2025 21:46:41 +0000
ROA not after:            Mon 26 Jan 2026 21:51:41 +0000
asID:                     52580
IP address blocks:        186.195.66.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:35:b9:f8:a1:12:91:65:50:03:43:0d:23:6a:6a:f5:79:33:6e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:46:41 2025 GMT
            Not After : Jan 26 21:51:41 2026 GMT
        Subject: CN=D3F80B11D4DA2BA15A36CEAB297C6E59BA07E1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:f6:a6:11:cd:e6:e3:c3:f1:10:e8:a7:9d:
                    da:c1:a6:f1:f0:c9:78:66:5d:d3:6d:44:e6:26:7d:
                    bd:c0:ac:c8:6b:25:98:ae:12:c0:07:82:43:2e:be:
                    10:9d:0e:4a:c6:94:5b:0a:33:ce:43:f3:51:5b:e5:
                    f0:54:37:0f:2f:9b:b2:0d:f0:23:e0:b9:12:f8:0a:
                    1d:d6:f1:06:32:21:b0:58:c7:5b:84:a5:28:7c:8d:
                    bc:2f:80:5e:b6:93:97:0a:39:e3:f7:c3:00:22:a5:
                    8b:ef:01:0c:9e:84:e9:94:4c:9b:cf:12:a7:13:3d:
                    40:c2:ea:a0:97:c4:44:7c:ca:96:80:77:f0:6d:62:
                    39:3d:b3:57:e2:dc:64:44:cf:05:45:05:62:ea:25:
                    46:a6:98:c7:33:54:57:db:b8:2e:85:ea:fa:79:1e:
                    ec:69:ff:a2:47:57:6e:c9:40:97:c8:8b:8a:8c:9d:
                    42:9c:9b:a4:35:21:da:a5:2b:c9:97:fc:cd:3e:2c:
                    81:28:57:d7:fe:56:53:3c:58:fa:0c:e9:40:23:72:
                    ab:35:23:dd:ea:f4:60:96:56:32:2c:28:e3:ff:cb:
                    9f:8c:04:24:82:20:9f:2b:bc:0f:bf:07:3b:5e:07:
                    0e:fd:38:8e:70:41:56:9c:53:5c:5a:cf:4b:2d:fc:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F8:0B:11:D4:DA:2B:A1:5A:36:CE:AB:29:7C:6E:59:BA:07:E1:D2
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36362e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:24:9a:36:15:5a:9f:36:32:93:73:ea:a2:50:d0:b8:ad:e9:
         95:42:14:ff:69:11:01:0e:2a:61:b2:0d:ff:cc:cb:2e:8d:16:
         d5:aa:95:5c:d9:ba:27:32:b3:e6:95:40:69:25:44:95:66:6e:
         c6:ad:4c:b6:87:c0:ff:93:07:f3:a0:d9:6e:c9:11:0c:5e:92:
         8c:79:37:22:62:54:66:4e:54:23:15:59:cd:32:dc:24:c9:e6:
         45:c8:de:3e:21:02:e4:b2:75:9e:6c:74:72:07:65:ea:04:cd:
         b4:ae:56:bf:ed:4a:82:45:ac:58:df:4a:c5:13:01:3d:a4:fa:
         9d:27:92:04:1e:fd:03:37:c0:d0:b1:1d:84:ee:0c:d2:da:01:
         cd:ab:3d:58:da:5a:07:67:19:91:6f:37:4c:88:cc:bb:c3:23:
         cb:b9:5a:a1:ed:b9:fe:88:60:0a:1d:93:de:8d:f0:c7:b6:92:
         5c:8b:12:f6:26:d5:c4:d4:75:b9:eb:1d:4f:9c:c8:9f:0e:ee:
         94:b2:b3:0e:a0:71:8e:f5:78:3c:50:54:28:f1:e6:29:c5:91:
         c6:ed:fe:96:87:47:29:6f:20:e8:75:6c:4a:52:c3:8f:ab:48:
         79:38:bc:c5:96:b4:94:72:c9:c2:2b:44:27:59:63:f7:58:46:
         e2:a3:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:09:30 2025 by rpki-client