Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37312e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37312e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          ZZt07ucz/UJHfMCZUOMvNT2rnwcceCDs/9+aQfNQFjs=
Subject key identifier:   03:BF:B8:20:3F:D4:1E:23:5B:B5:85:DD:90:AA:B0:A9:A6:8E:C6:DA
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       0A8FF688BC119D8A626ECADF91407FC4D61543FD
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37312e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:52:01 +0000
ROA not before:           Mon 27 Jan 2025 21:47:01 +0000
ROA not after:            Mon 26 Jan 2026 21:52:01 +0000
asID:                     52580
IP address blocks:        186.195.71.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8f:f6:88:bc:11:9d:8a:62:6e:ca:df:91:40:7f:c4:d6:15:43:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:47:01 2025 GMT
            Not After : Jan 26 21:52:01 2026 GMT
        Subject: CN=03BFB8203FD41E235BB585DD90AAB0A9A68EC6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:7a:c4:91:5a:1f:54:8f:53:fb:7f:57:76:
                    fe:b8:96:df:40:c9:07:d6:be:14:ef:46:5b:9b:4c:
                    b3:8a:2f:ef:f6:5f:21:83:49:c7:13:43:01:7a:91:
                    dc:21:fe:c3:4a:4a:8a:e8:75:08:19:60:13:b0:b2:
                    ad:ad:c8:74:3a:55:36:fa:50:a1:0c:5b:45:e0:e9:
                    9b:6f:18:b3:3b:22:5a:b7:7d:e9:85:de:20:25:d6:
                    14:c4:01:22:62:07:da:5e:43:5d:f6:35:72:d8:98:
                    ff:ea:c1:dd:c0:c2:13:e6:e1:cf:00:91:3a:2d:18:
                    90:af:8e:52:8a:46:25:9a:a6:4c:90:48:d4:3d:cb:
                    0e:5b:b5:ac:19:6b:4e:e3:dd:35:08:9f:78:e7:10:
                    4c:f9:df:1d:71:8d:ee:d4:39:40:19:6d:fc:9c:10:
                    8e:83:bb:88:20:72:8a:fb:30:e2:27:81:84:97:5a:
                    dd:8c:4a:e7:41:ab:ca:90:20:8b:4a:43:de:b3:6c:
                    e3:9e:c4:ba:68:57:7a:99:30:af:28:53:c8:bc:c3:
                    52:92:04:c7:cc:a2:dd:31:57:ae:1f:61:b0:e7:3a:
                    d6:43:e1:d9:c2:53:1e:6a:d3:2e:9a:e0:00:7e:df:
                    ee:95:3a:32:51:fd:03:10:8f:9c:59:fb:ca:5e:1a:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BF:B8:20:3F:D4:1E:23:5B:B5:85:DD:90:AA:B0:A9:A6:8E:C6:DA
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37312e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:32:05:2d:9a:40:91:24:01:2b:a5:b2:06:c0:90:06:c4:ce:
         da:97:60:29:4a:fb:65:a3:d1:f0:03:e2:1d:08:eb:e8:53:f7:
         83:64:f6:b4:dd:90:10:40:7c:67:7f:49:25:ba:0e:8a:6e:5e:
         1f:23:11:94:32:2a:bb:64:50:01:07:78:2a:48:90:58:b8:b2:
         b9:4e:56:7b:71:33:b5:71:3f:a2:fb:19:aa:9a:2b:b2:f3:3e:
         3f:3a:98:e9:c9:4d:47:cb:c6:0a:d6:b9:6c:7c:ab:36:62:3c:
         72:77:27:82:ee:fc:b6:20:72:6e:a8:50:83:bb:5e:75:05:5d:
         d0:eb:3b:7e:76:4b:52:ea:36:a0:8a:09:7f:24:a1:c4:01:80:
         75:7a:42:ce:30:af:d7:a9:df:3f:1d:77:24:d0:ec:e8:29:52:
         33:18:61:de:fa:88:ce:27:a3:01:16:79:fd:e7:6d:a6:87:3e:
         a7:70:ef:7d:32:d6:9a:1d:a3:d3:9c:c1:46:99:81:08:ba:d2:
         01:b7:bb:0d:ee:5c:95:12:b5:6a:fe:58:d1:d9:ed:c0:a6:69:
         dc:69:0e:44:e8:fb:43:de:b0:2d:50:13:02:5e:4c:6b:1a:8f:
         dd:fa:64:23:8e:e3:29:f1:89:91:23:ad:0f:40:27:99:46:36:
         0c:6e:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:17:59 2025 by rpki-client