Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          w5wTpz6bx1liy6sS27VANYwjOedYr/otR7H0rpGUOvY=
Subject key identifier:   0F:9B:4D:F0:37:79:FE:53:6A:40:85:A7:37:3F:4A:6F:9E:1B:20:75
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       733F7815A7033C46268923A35AD3DA120DA73C51
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     28220
IP address blocks:        187.110.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3f:78:15:a7:03:3c:46:26:89:23:a3:5a:d3:da:12:0d:a7:3c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=0F9B4DF03779FE536A4085A7373F4A6F9E1B2075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:1c:9a:66:df:31:70:3b:25:8f:1c:22:65:
                    4e:e9:57:59:74:9f:36:bc:6b:00:09:53:e4:4b:7a:
                    74:7b:dd:0d:09:ec:5e:da:39:11:ad:92:51:b9:9e:
                    05:b0:fd:b8:bc:30:df:09:01:b5:df:d4:db:67:75:
                    0b:cc:7a:ee:6f:d7:35:37:a3:a3:6b:de:b2:e3:46:
                    28:d1:25:eb:e3:20:7f:c6:0b:5b:df:35:9a:6a:01:
                    a9:ee:bb:c0:5a:3c:07:40:85:fb:7d:26:ab:26:6a:
                    de:ce:de:c2:f6:bc:b2:a2:b9:45:3b:75:f9:bf:76:
                    20:6e:c4:71:11:ab:c5:d1:2e:7a:9b:e7:57:3b:b1:
                    3b:6b:0a:85:33:93:78:9b:a4:29:fd:b4:83:b1:72:
                    88:ab:2a:ae:7b:91:62:ad:b6:c3:f2:39:39:56:ac:
                    ff:57:4e:8c:2e:d2:3c:27:68:19:22:6a:44:fe:d8:
                    99:95:52:67:6b:f8:e6:39:4b:29:5c:2c:19:d0:d1:
                    4a:34:7b:32:fc:d8:e1:e7:ac:6b:da:b6:8b:d7:8f:
                    7e:24:8d:1d:e6:e9:30:49:bd:e6:7e:02:4d:e4:7a:
                    eb:e1:b4:d1:ca:b3:8a:6d:39:8f:cb:38:62:28:a1:
                    de:4b:20:db:98:1a:37:57:17:60:d8:8d:b2:63:e3:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:4D:F0:37:79:FE:53:6A:40:85:A7:37:3F:4A:6F:9E:1B:20:75
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:eb:f9:51:d0:62:1c:55:21:50:f6:9c:c2:13:36:b7:4d:
         57:8c:72:74:e7:d1:2a:e2:0c:6f:23:ac:fb:45:6f:45:90:43:
         64:b0:1d:3b:65:91:b3:53:85:c3:d4:b3:68:06:26:21:53:f6:
         fc:d3:09:14:d6:7e:c5:83:61:b8:60:ec:ff:0d:49:a3:37:2b:
         4b:55:39:40:f6:df:f8:71:b9:bc:21:cf:9f:8d:28:e5:58:3c:
         f7:fc:74:34:62:18:64:b2:36:84:a9:94:88:04:0a:cf:2a:e7:
         30:85:d2:ee:6e:6b:20:8c:6d:7f:98:5e:9b:dd:29:08:d7:71:
         dc:cd:02:54:2f:a7:b9:40:37:c9:2c:40:6c:7e:dd:18:f3:b4:
         2c:68:16:47:f2:e2:d9:68:a5:3c:fb:e8:d7:5e:49:f4:70:27:
         20:b7:a7:a3:ab:56:7a:e4:a6:4c:30:90:5e:e6:06:59:2f:05:
         80:88:37:01:e3:51:76:1c:39:2e:ad:28:64:21:2e:8f:55:78:
         9c:29:20:9c:4b:5a:44:07:0d:04:8e:2d:0c:80:7b:af:76:c3:
         ac:c0:39:98:03:21:14:fb:1d:c3:84:06:9b:45:20:fb:dd:c9:
         21:55:45:35:bd:05:1e:07:64:ac:7b:f9:3f:ba:a8:1e:e5:17:
         ca:51:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:44:33 2025 by rpki-client