Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa
File:                     3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (raw, json)
Hash identifier:          nJEBpBK1Y4aLUQIWVqdqrcvZIS6tSwnE500dFXpgXrM=
Subject key identifier:   20:29:D5:7F:2B:0D:F7:88:12:31:6A:5F:D0:E7:3B:E9:D1:F3:AC:2D
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       634150EF96AA9E6A699EB53131EB76A62E32E841
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa
Signing time:             Thu 06 Mar 2025 03:55:53 +0000
ROA not before:           Thu 06 Mar 2025 03:50:53 +0000
ROA not after:            Thu 05 Mar 2026 03:55:53 +0000
asID:                     28131
IP address blocks:        186.208.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:41:50:ef:96:aa:9e:6a:69:9e:b5:31:31:eb:76:a6:2e:32:e8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Mar  6 03:50:53 2025 GMT
            Not After : Mar  5 03:55:53 2026 GMT
        Subject: CN=2029D57F2B0DF78812316A5FD0E73BE9D1F3AC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:5f:ad:e3:a8:78:d6:d7:3b:db:89:ad:18:
                    c2:07:ab:96:eb:c3:e5:5b:f1:51:d1:25:fd:d6:24:
                    73:63:76:ab:59:e9:62:fb:9a:95:43:e5:9e:84:3f:
                    97:d7:90:92:4d:ff:09:55:44:69:9e:8e:c4:1a:06:
                    07:33:17:ee:79:64:24:9e:bf:e8:b5:8e:3a:2e:fb:
                    6d:20:c8:02:22:06:c9:52:53:97:5d:5b:44:e1:a0:
                    0e:b2:5e:47:10:08:1c:72:4f:ff:f6:49:18:c5:cd:
                    a5:64:1f:3e:28:62:90:3a:98:9d:27:f3:6b:68:2c:
                    63:00:ad:25:11:a0:3d:4b:0a:ac:47:f7:12:76:af:
                    3f:72:27:f3:9c:8d:66:6f:4c:d1:84:3f:96:bb:fa:
                    97:1e:73:14:5a:7f:2c:1d:4f:16:cd:d9:71:5c:73:
                    41:ea:09:0f:21:73:b7:41:ae:7b:8b:7c:9a:3a:60:
                    c9:44:6e:d1:93:84:7f:53:e9:e9:65:a5:43:60:19:
                    da:04:7e:34:33:0d:4e:cd:80:75:4a:d8:ef:cf:9e:
                    8e:b3:bb:12:c8:5b:30:c3:82:e3:1d:bc:4d:ff:7c:
                    6f:08:c7:8c:6e:5e:e5:04:89:ce:39:92:f9:1b:f6:
                    69:ce:01:20:84:1d:91:4f:58:ec:0c:71:df:1f:2c:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:29:D5:7F:2B:0D:F7:88:12:31:6A:5F:D0:E7:3B:E9:D1:F3:AC:2D
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:65:30:db:d3:0c:4d:6d:0e:bd:e2:b9:75:23:ef:e3:70:
         7e:f5:2e:94:cc:5e:e9:3f:7e:80:ee:27:b5:f5:82:9e:45:12:
         40:c1:45:a9:aa:f0:8f:14:57:ef:d9:b1:4c:09:1b:7e:59:65:
         76:c9:36:9f:77:1b:e7:50:ef:5c:36:e3:04:ed:ad:cf:58:4f:
         55:89:ad:60:95:74:8e:13:81:3d:12:47:bc:5c:a3:bb:98:1d:
         36:f0:55:da:29:1b:69:73:54:17:73:fa:9d:1a:d0:2a:9f:be:
         16:b4:87:a5:a0:5b:f9:48:af:3d:30:58:e0:97:28:b5:90:4e:
         ab:ed:ef:31:0e:c0:59:9c:e1:09:42:00:c8:75:a0:4b:95:39:
         28:e3:2b:93:c9:85:e3:b7:90:6f:6d:06:87:c6:32:1d:87:14:
         2e:44:c5:91:af:68:58:e8:3f:68:79:db:9f:8e:64:ba:4e:3b:
         a9:77:f9:37:51:35:26:2a:8c:55:7d:56:47:31:1c:c1:e8:46:
         3d:6d:6d:44:07:54:a5:3f:0f:2e:31:84:67:76:1f:3d:16:64:
         92:03:0f:5c:c2:d4:43:cb:57:04:58:4b:da:ef:90:a1:6d:a6:
         6e:7c:29:aa:59:dd:b6:56:0d:68:48:2d:69:cf:31:f5:06:69:
         4f:b3:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:26:05 2025 by rpki-client