Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa
File:                     3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa (raw, json)
Hash identifier:          eLJgQJ1z2+j6RaCzRnrHVR03+4vwkffeYB82NGe2QkY=
Subject key identifier:   88:D1:53:AC:14:E2:8A:30:53:98:F4:31:A9:B9:61:44:43:B6:C8:88
Certificate issuer:       /CN=692E5389B43EC82E803E641336341B3122E298F3
Certificate serial:       0B9ED162B1315FBB03E6C7FEE0BF202A641FC8BB
Authority key identifier: 69:2E:53:89:B4:3E:C8:2E:80:3E:64:13:36:34:1B:31:22:E2:98:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692E5389B43EC82E803E641336341B3122E298F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa
Signing time:             Wed 17 Jan 2024 14:28:13 +0000
ROA not before:           Wed 17 Jan 2024 14:23:13 +0000
ROA not after:            Wed 15 Jan 2025 14:28:13 +0000
asID:                     270989
IP address blocks:        187.86.172.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9e:d1:62:b1:31:5f:bb:03:e6:c7:fe:e0:bf:20:2a:64:1f:c8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692E5389B43EC82E803E641336341B3122E298F3
        Validity
            Not Before: Jan 17 14:23:13 2024 GMT
            Not After : Jan 15 14:28:13 2025 GMT
        Subject: CN=88D153AC14E28A305398F431A9B9614443B6C888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:b3:fe:23:d6:e1:b2:e3:e4:b6:59:b0:43:
                    e0:37:7d:e9:57:b0:83:8b:0e:3f:8d:46:da:32:65:
                    3a:18:b2:32:31:67:b9:7d:96:25:50:74:bd:c1:8e:
                    93:5a:32:26:09:9e:79:a6:12:1b:68:3e:15:55:03:
                    5e:f0:7f:c7:ef:96:63:12:5f:5c:5e:7c:e4:5c:a7:
                    67:1d:42:94:6e:5f:97:6b:a5:00:97:1a:4f:e4:f3:
                    43:e6:a9:d4:09:4d:bf:e3:ef:9f:09:82:d7:8b:56:
                    4f:2d:21:63:a2:ef:96:8d:fd:d5:d6:a5:7b:e6:e0:
                    a4:6d:a2:33:01:1a:3a:7b:44:07:80:7d:73:4c:bf:
                    92:2a:37:7f:a2:2a:8c:6a:23:5e:bd:7d:0c:cb:1e:
                    70:5c:66:f8:ee:4e:58:ca:04:6e:0e:14:be:e1:98:
                    52:0e:1a:f8:4b:0f:34:cd:13:88:e9:99:3c:f7:94:
                    a5:1f:aa:e1:e4:ae:18:d2:2c:55:ad:b7:dc:16:e5:
                    fc:21:fd:5b:78:fc:75:6d:40:04:90:cb:86:06:63:
                    19:82:f2:4e:a0:3c:7d:1e:52:04:ed:ee:10:6d:a2:
                    1c:3b:f0:b7:b4:dd:5b:04:6a:f9:2c:23:4b:9c:5c:
                    97:f0:38:79:19:9e:a5:b2:cc:f0:ad:ea:ae:53:88:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D1:53:AC:14:E2:8A:30:53:98:F4:31:A9:B9:61:44:43:B6:C8:88
            X509v3 Authority Key Identifier:
                keyid:69:2E:53:89:B4:3E:C8:2E:80:3E:64:13:36:34:1B:31:22:E2:98:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/692E5389B43EC82E803E641336341B3122E298F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/692E5389B43EC82E803E641336341B3122E298F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:39:59:cc:4a:77:11:71:fd:bd:64:c3:8f:88:33:9c:32:31:
         59:db:dc:1a:9a:32:07:2d:cb:46:27:9f:d9:84:de:3c:67:cb:
         9f:a4:55:bc:0f:a3:b9:73:8c:d1:4e:fc:f8:6e:18:bb:a8:38:
         52:ae:8f:f8:2f:fa:32:53:ef:be:83:d7:e9:9f:bd:fb:68:52:
         53:f9:29:b0:36:05:dd:c4:42:26:56:d1:3b:50:0e:b6:b0:ce:
         3d:e6:df:dd:85:7b:72:01:fe:30:9b:88:6c:b7:eb:fd:2b:19:
         27:2d:3e:46:ec:16:8b:45:a0:38:33:15:15:bd:f8:d1:54:58:
         b6:c2:62:f5:b0:0a:51:e2:6c:0b:cf:b1:60:dd:43:2e:2c:19:
         db:27:30:08:8d:bd:e0:9b:fd:40:b3:99:1c:fc:e3:d2:ae:6a:
         9a:e6:5f:89:85:c2:26:ad:02:66:a1:82:1e:4d:42:60:b7:70:
         64:56:67:31:c1:66:ab:f1:80:91:65:36:56:ac:2e:be:c7:d1:
         45:9c:8f:fe:b5:70:65:4d:05:73:40:1e:6d:0a:5c:30:b9:53:
         a4:80:4e:c3:44:a6:da:e5:50:ab:d6:b8:6d:c2:b6:71:a9:bc:
         61:3e:08:e3:f9:48:81:00:77:28:23:5d:6c:95:48:5b:74:86:
         33:d0:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:35:21 2025 by rpki-client