Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          30aYZTioi3OMHmpHR/T9MDiU2ZNTrFhq3AH4VXx6JX0=
Subject key identifier:   1C:FF:56:74:F8:BC:D3:07:7D:DC:3B:2B:D9:0F:48:F8:3C:FB:D4:90
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       4B7308C1BF33AD563558D79BE9C99D6044153FCE
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:56 +0000
ROA not before:           Thu 19 Sep 2024 14:06:56 +0000
ROA not after:            Thu 18 Sep 2025 14:11:56 +0000
asID:                     262494
IP address blocks:        168.205.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:08:c1:bf:33:ad:56:35:58:d7:9b:e9:c9:9d:60:44:15:3f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:56 2024 GMT
            Not After : Sep 18 14:11:56 2025 GMT
        Subject: CN=1CFF5674F8BCD3077DDC3B2BD90F48F83CFBD490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:03:09:51:17:ef:8b:e8:d3:80:05:64:ad:
                    29:f9:23:e7:df:9a:40:77:9a:82:ff:2a:33:df:be:
                    94:06:36:58:4c:23:5f:77:3f:a0:bd:55:17:1d:e0:
                    31:8b:9d:72:16:ae:ac:92:b2:c0:05:99:10:7e:f5:
                    e0:3c:37:ae:98:c7:cc:d8:56:c6:2b:4d:89:45:78:
                    d4:5a:0a:00:1f:6a:75:80:37:1b:9b:20:f7:ce:47:
                    38:c3:fd:75:0d:49:24:d4:30:50:01:0b:70:2b:25:
                    e7:00:1d:e1:f7:af:46:06:4c:49:55:ff:7d:e3:57:
                    0e:d3:bf:5a:c5:cc:65:45:fd:21:2b:c6:de:d0:48:
                    8a:86:bc:38:10:53:e5:53:64:45:7a:49:95:37:d5:
                    09:4f:40:49:31:71:be:90:33:62:8d:ac:e4:76:d6:
                    0b:a6:20:d5:1d:79:aa:c9:7c:eb:20:ec:e3:66:2e:
                    9e:cb:f7:40:77:c7:cf:4a:02:d1:fd:b6:ff:6a:17:
                    09:a1:44:90:86:f0:a7:14:d9:2c:33:2f:9d:a9:4f:
                    e0:63:3c:ae:35:84:75:9b:b6:eb:92:87:e6:90:59:
                    7e:b4:7d:f9:15:97:0d:fb:82:14:73:52:07:da:59:
                    a2:9e:cb:68:78:71:e2:ca:8d:a2:87:64:4a:d5:a5:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FF:56:74:F8:BC:D3:07:7D:DC:3B:2B:D9:0F:48:F8:3C:FB:D4:90
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:04:e2:fc:24:cb:f1:9d:74:ac:49:13:d4:46:91:cc:b5:cb:
         d9:ae:40:aa:79:30:b5:a7:42:14:b8:a3:6c:c4:b1:31:ff:43:
         16:11:bb:19:ac:06:ec:6e:ce:36:72:78:9b:4c:00:3c:26:56:
         99:a6:fd:b3:43:5d:62:5b:c1:25:a6:93:b2:35:27:61:48:9a:
         8d:20:6d:70:23:6f:ae:bd:90:9e:33:44:55:9c:40:17:be:ea:
         c4:5b:9f:d7:26:b9:26:f4:12:b8:8b:41:67:cd:4b:07:01:0c:
         93:b0:72:81:58:9c:3d:8d:8e:9c:a8:02:9d:66:04:2f:f0:f9:
         1f:24:a7:cd:9e:9d:bb:b4:46:49:d3:c6:9f:d2:03:95:4b:8e:
         bf:3c:95:03:17:4f:b1:e0:68:4b:6f:95:40:f0:6b:ec:7e:80:
         8f:93:28:5f:a2:1e:e2:3d:a7:37:2d:ed:50:36:60:ec:69:dd:
         77:c0:0e:86:d2:3a:61:d0:fa:5b:f1:48:7e:aa:1e:85:42:dd:
         7b:2e:2b:b8:93:71:b1:62:b1:88:61:61:87:bb:51:83:17:ba:
         69:37:9b:a9:ae:17:83:86:d8:64:85:e5:bc:d7:d8:8e:59:a6:
         79:c2:b4:7d:c0:ae:b8:cd:8c:64:39:b1:d3:d9:32:d0:09:e3:
         60:d1:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:10:28 2025 by rpki-client