Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
File:                     3138372e31382e3132382e302f31372d3137203d3e203238323730.roa (raw, json)
Hash identifier:          BhbOSevnxNkiKAKKUKVs9N9cBd6T/v57Snl16rZj498=
Subject key identifier:   8C:57:8B:A3:CE:55:DD:37:01:CA:2B:71:3F:69:A7:63:AA:65:0D:92
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       687CF64108C1E5DA4C49ABB2E7E8BEDF4D4FECE5
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     28270
IP address blocks:        187.18.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7c:f6:41:08:c1:e5:da:4c:49:ab:b2:e7:e8:be:df:4d:4f:ec:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=8C578BA3CE55DD3701CA2B713F69A763AA650D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:1c:1f:b6:d3:20:3d:6d:1a:06:4a:59:35:
                    1d:88:4c:fa:b3:f2:3b:81:44:ad:7d:64:dc:9e:2a:
                    9d:34:85:26:ed:c2:94:59:1f:a1:7b:bc:ba:bc:87:
                    ed:5a:42:ce:0c:53:5f:5b:f2:24:c3:f0:b2:f8:b3:
                    3e:de:ea:5d:33:5f:34:c0:64:64:31:da:6f:6e:d3:
                    51:00:34:3c:b1:3e:50:a1:45:79:31:90:72:04:3b:
                    34:29:a5:dc:10:53:2e:63:3b:01:74:f9:18:18:32:
                    5c:12:4a:22:f3:38:33:46:53:10:7b:e6:91:cc:d3:
                    04:35:e8:18:5e:3c:a3:1a:79:e5:c1:b1:41:02:42:
                    44:9e:90:5f:74:9a:89:3a:04:3e:a7:e3:1a:3d:1d:
                    c9:53:22:9d:2f:b2:91:b0:7b:26:95:32:1b:7d:cb:
                    ec:bc:3c:e2:66:d9:43:42:a8:9f:08:0f:34:4d:ce:
                    d3:c3:ea:8e:a7:33:3f:47:40:55:96:41:e6:9a:64:
                    03:82:55:39:38:57:01:8e:a5:0d:28:c6:3d:d3:f0:
                    56:e1:f0:45:da:5e:c5:5e:10:04:c2:ad:c8:84:71:
                    6e:63:45:08:12:b0:5f:0d:3c:fd:16:61:b3:cf:f2:
                    ea:9a:4a:1b:37:5c:30:df:d6:b8:04:95:07:97:32:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:8B:A3:CE:55:DD:37:01:CA:2B:71:3F:69:A7:63:AA:65:0D:92
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a6:e2:ee:a2:07:d4:07:0a:c9:a6:91:f7:c1:79:10:57:8e:b1:
         18:76:2e:37:78:a3:eb:32:c6:04:cf:46:cb:5f:50:aa:5d:fb:
         e8:e2:2e:94:46:98:ad:2d:9c:19:e5:4d:06:58:0e:36:ac:6c:
         d3:e9:aa:7a:26:d0:13:c6:65:54:e9:cc:32:1c:9a:9b:9f:87:
         da:13:4c:01:1d:b2:6e:3a:64:4a:81:9d:d0:64:6f:59:10:81:
         b3:85:1f:a0:c0:9d:0b:f6:ea:25:44:dd:6b:06:57:24:32:a1:
         44:c1:59:37:1b:eb:25:ae:bf:2c:c9:45:34:7b:d2:c9:77:47:
         70:2f:ef:ac:25:d0:82:28:fa:77:0a:ad:06:d8:4d:3a:f7:51:
         cf:78:40:4e:ee:15:de:bd:32:0c:5a:4e:6f:4f:30:1e:02:78:
         81:08:ae:26:f4:95:1a:20:2c:a7:98:02:c4:05:0f:25:92:dc:
         d7:2a:2f:4a:d6:97:5e:d5:ec:4c:e2:b5:40:22:98:80:80:7a:
         71:21:29:8c:f2:e6:a9:80:89:5c:7f:5f:fc:67:10:8d:18:e3:
         a2:0e:65:b5:f7:2b:5e:3e:6e:17:ca:ea:c1:dd:70:28:d1:12:
         77:da:f9:ed:0e:cb:28:87:dc:30:b5:23:15:7f:2d:87:19:e8:
         e8:77:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:15:30 2025 by rpki-client