Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37322e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          K8XAfFBAD7B/7914zKRrYFrPckloiU6YlsFan7nGuEU=
Subject key identifier:   3F:89:3C:DB:4E:2A:19:87:EA:B1:27:57:B7:CC:EC:6B:B2:67:C0:DF
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       235EB220D141E6693B245FB0239CEE453205CC05
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3332203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:52:08 +0000
ROA not before:           Mon 27 Jan 2025 21:47:08 +0000
ROA not after:            Mon 26 Jan 2026 21:52:08 +0000
asID:                     52580
IP address blocks:        186.195.72.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5e:b2:20:d1:41:e6:69:3b:24:5f:b0:23:9c:ee:45:32:05:cc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:47:08 2025 GMT
            Not After : Jan 26 21:52:08 2026 GMT
        Subject: CN=3F893CDB4E2A1987EAB12757B7CCEC6BB267C0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:5e:0c:9d:67:72:a6:26:b3:51:e1:ad:93:
                    68:84:83:3c:86:59:17:d5:23:7a:83:11:54:5b:d5:
                    33:e8:19:be:23:18:84:fa:fe:d7:1e:c7:17:30:61:
                    20:06:b8:0a:45:94:5d:a3:b2:ad:2a:d0:87:07:71:
                    86:79:42:02:61:b7:fb:08:1f:78:c2:98:b3:c8:dd:
                    d6:05:e3:d4:1e:0d:e1:fd:67:1a:7e:80:42:9e:49:
                    94:e1:ef:59:99:56:bc:eb:81:31:48:51:39:4e:b3:
                    6b:45:75:5f:fc:80:70:c2:3f:e4:04:39:f9:6d:18:
                    4d:41:89:5c:49:5f:66:1d:a1:77:75:1c:b1:68:44:
                    a8:4b:41:3b:b3:62:4b:7e:35:79:e7:3d:0e:ae:b2:
                    7f:e2:43:6c:d1:72:29:d8:c2:14:a2:60:c9:89:2a:
                    8c:bf:e3:17:09:ce:d6:c7:89:e8:4c:45:fc:a6:6a:
                    d6:d1:3f:97:48:9a:ee:54:ad:85:c6:ba:61:00:44:
                    67:e2:4b:6a:cc:72:77:ad:6d:6e:60:56:3e:1d:67:
                    ae:34:0c:fa:db:e4:9f:54:de:a1:80:3a:31:0c:0f:
                    f6:32:9c:e9:d8:92:55:cf:17:d5:cc:7d:01:e5:f6:
                    16:eb:ce:a5:66:38:b8:49:e0:d2:5a:5c:1c:d0:a8:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:3C:DB:4E:2A:19:87:EA:B1:27:57:B7:CC:EC:6B:B2:67:C0:DF
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37322e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:a3:f1:7e:72:ed:92:89:2f:44:33:7a:48:1b:40:92:b6:
         f0:08:6f:5a:4e:c1:59:4b:e8:30:dd:c1:40:5a:13:ea:60:cd:
         6f:4d:95:d6:bb:df:1e:18:61:ed:e6:b1:65:ec:99:8d:48:33:
         32:86:5e:46:b0:6b:16:be:72:a2:37:20:92:a5:ef:bd:a7:56:
         cd:d6:ed:78:19:53:ff:9d:d1:03:3b:82:89:05:15:a4:12:05:
         de:21:92:f7:19:53:52:ca:a4:78:77:69:89:7a:58:a4:c8:c0:
         00:8f:6f:56:3a:46:84:06:c9:fb:20:c1:08:2d:2f:4a:76:5b:
         cb:9f:8f:03:84:7f:03:ad:6d:31:63:7c:47:a7:5c:07:86:5b:
         ea:f7:a0:61:de:e4:b1:5d:51:af:a4:fa:c7:b7:94:11:f0:c2:
         27:2f:4f:3f:65:e2:33:fa:b8:e3:dc:1b:8f:c3:cc:dc:d5:f8:
         06:27:3e:ad:57:c3:20:70:68:85:7f:b7:92:50:d9:b1:c0:fc:
         39:1b:6a:bb:9c:0e:e6:74:bf:6e:74:33:f3:69:21:f1:52:92:
         bd:97:5e:7d:38:76:4b:43:98:0b:10:fb:1a:ae:68:df:b3:c3:
         87:18:97:85:c9:1d:3b:eb:56:ef:97:f4:24:92:28:e2:8c:94:
         2a:90:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:28:22 2025 by rpki-client