Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          45l7riPHva6leuQv/Le2VFZrrrQSJlxTSDKllm9WtJg=
Subject key identifier:   BE:86:70:B9:85:AD:C4:BB:7D:FE:A7:4F:AC:E0:7C:3D:52:00:9B:C5
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       7E12598220EB432A1DFC5670A509125B5F0054E3
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:51:46 +0000
ROA not before:           Mon 27 Jan 2025 21:46:46 +0000
ROA not after:            Mon 26 Jan 2026 21:51:46 +0000
asID:                     52580
IP address blocks:        186.195.68.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:12:59:82:20:eb:43:2a:1d:fc:56:70:a5:09:12:5b:5f:00:54:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:46:46 2025 GMT
            Not After : Jan 26 21:51:46 2026 GMT
        Subject: CN=BE8670B985ADC4BB7DFEA74FACE07C3D52009BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:f8:7e:36:bd:38:cc:b2:a1:2b:ec:68:a2:
                    6a:89:3b:49:da:c0:66:e5:f3:69:ad:65:db:c1:5b:
                    b2:ef:f7:e4:cc:c1:3b:03:57:23:67:90:cf:61:45:
                    35:5c:1d:37:4d:c8:b0:48:6e:7b:c6:d1:08:d3:bb:
                    f7:8c:7c:8e:57:5f:84:2e:e8:81:dc:07:a8:fc:85:
                    62:a0:86:46:80:2c:ba:84:d5:ef:6a:ea:33:81:35:
                    46:56:8a:a8:64:42:86:31:76:9f:48:c5:3c:24:34:
                    8e:4d:30:97:0c:74:61:36:77:c8:de:4d:31:1d:c1:
                    ac:7e:22:57:b2:c4:8c:ee:de:d3:63:b9:f0:01:97:
                    7b:b9:3b:ef:82:f7:9e:a1:a0:76:1d:a3:ae:04:3d:
                    2e:77:8c:42:b8:80:0c:7a:20:2e:63:90:18:fd:75:
                    cc:5c:ff:9d:ad:c8:f3:d6:01:e4:3d:13:cc:7f:97:
                    81:1a:14:f8:aa:fc:9e:b5:00:b1:4d:1c:f8:f6:3c:
                    d2:a2:b3:ad:78:97:c4:bd:05:f2:b2:02:81:96:ce:
                    a6:47:21:4d:87:63:9a:e3:93:43:d9:ab:42:6e:ff:
                    c9:e5:24:2a:d1:32:97:58:6e:b4:21:f4:c4:b5:cd:
                    7f:dc:fa:12:da:62:9d:77:14:13:7a:49:71:4c:40:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:86:70:B9:85:AD:C4:BB:7D:FE:A7:4F:AC:E0:7C:3D:52:00:9B:C5
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:59:7c:c1:05:e7:02:53:4d:aa:a0:0a:ca:f0:43:ae:74:
         ff:70:0b:e2:b7:41:42:b4:df:93:7a:4c:9b:45:72:46:ab:b9:
         08:06:7f:04:8c:d5:33:56:97:ad:d0:d0:5b:e5:6a:ec:76:17:
         53:a3:db:b3:6d:06:1e:12:d8:5b:b5:98:77:97:d3:e4:0a:dc:
         72:b0:61:06:18:7a:13:f2:da:a6:65:07:69:72:14:c3:fa:a1:
         78:5d:01:e8:62:c6:92:83:c5:76:85:46:a5:4c:e4:63:53:1b:
         50:51:a7:ce:40:78:d7:21:7c:c3:fa:3e:86:af:e8:b4:f1:47:
         5f:11:91:e0:5b:dd:48:cc:3f:0d:b7:62:c1:d6:ce:18:1f:73:
         66:ac:9d:de:74:2b:e4:56:ad:96:7a:09:c0:cc:0e:35:d4:0b:
         0f:44:3c:d7:f8:57:07:86:d9:eb:32:aa:7d:24:b1:90:73:a4:
         b8:66:e3:83:2e:2d:78:75:d7:a2:d0:08:98:9b:b8:1e:a6:b1:
         8c:98:35:e0:ee:98:19:fa:1c:73:99:2a:b7:1a:d5:94:11:8e:
         d6:e2:c4:c3:fd:fc:d2:b2:f9:45:af:77:85:c4:d3:76:71:87:
         6c:fe:8c:c3:61:41:cd:32:24:b1:c8:59:d4:01:94:34:e9:a8:
         8f:91:e8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:21:23 2025 by rpki-client