Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          cjZSFaTPZeKsOUcRVtPH3uO8rbO1RQ1SaPtxLl1oBNE=
Subject key identifier:   BB:04:1D:9B:38:DF:2B:C9:EE:83:C4:09:5A:9E:E5:06:81:B4:DC:CF
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       12856F89C0A7BB53C93D4462619BDBE633989B55
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:51 +0000
ROA not before:           Thu 19 Sep 2024 14:06:51 +0000
ROA not after:            Thu 18 Sep 2025 14:11:51 +0000
asID:                     262494
IP address blocks:        168.205.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:85:6f:89:c0:a7:bb:53:c9:3d:44:62:61:9b:db:e6:33:98:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:51 2024 GMT
            Not After : Sep 18 14:11:51 2025 GMT
        Subject: CN=BB041D9B38DF2BC9EE83C4095A9EE50681B4DCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:29:dd:4d:cb:a1:1d:04:87:c6:bf:bf:27:
                    0f:f5:5b:d1:79:3d:32:4e:57:ad:c2:ac:22:f2:f1:
                    16:98:92:f9:d9:02:51:14:45:23:1c:29:e0:1b:a2:
                    51:3e:8b:8e:12:f8:6b:ee:86:92:ad:2c:27:36:9d:
                    22:c1:16:1d:d2:da:32:eb:66:98:0f:14:28:e7:0e:
                    45:fc:1c:3e:71:6c:e4:86:e7:4a:c5:ea:43:59:93:
                    b2:d5:7a:8f:c9:4c:0c:5a:71:a1:26:07:2a:82:0d:
                    3c:33:db:24:8f:49:a4:33:a4:d4:61:d5:4a:17:4d:
                    47:8a:e5:a1:e6:9e:3c:ea:d3:5f:3e:ac:0a:14:b4:
                    47:bd:12:cf:1d:05:cf:30:7b:20:0d:7e:e1:99:86:
                    af:e5:df:e9:1d:60:e0:ab:80:44:33:91:14:32:ef:
                    13:84:5d:be:0a:e8:fb:79:35:4e:7d:29:bf:7b:42:
                    ff:d4:a4:d0:9a:04:c0:fe:42:48:14:fb:83:28:a2:
                    1f:05:db:11:96:ce:17:b0:2f:33:80:20:0a:cc:e2:
                    98:cc:19:cd:63:38:9b:f1:ab:a1:23:1e:eb:f9:f5:
                    2d:6a:30:68:b7:5a:5b:e9:9c:9f:73:d4:bf:87:e4:
                    4b:84:18:48:ea:67:09:e7:16:ea:5c:e0:f6:cc:81:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:1D:9B:38:DF:2B:C9:EE:83:C4:09:5A:9E:E5:06:81:B4:DC:CF
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:26:31:5a:da:03:a9:85:5f:cf:fe:e7:3e:af:d0:06:07:c4:
         d0:f2:9e:e3:7e:8b:8c:1a:65:e9:f1:2a:98:ab:1b:5d:dd:b6:
         5a:9e:11:67:b6:7e:c8:95:d7:bb:29:36:a5:74:fc:58:d5:9d:
         b2:98:ab:d8:ae:c0:db:ad:ce:5e:11:b3:2f:17:80:fe:c6:2b:
         02:a3:5a:cf:50:fb:93:53:4c:21:8a:fe:08:4b:76:2a:c6:88:
         a7:3a:7c:e3:58:06:77:45:1f:93:61:be:6a:13:d7:b3:ea:62:
         9c:33:00:22:2f:e6:01:78:46:f8:09:8c:7d:ef:12:24:8b:42:
         64:c7:47:61:d7:3c:47:c6:e5:f8:ba:67:1b:f5:9a:70:bf:bb:
         43:8f:71:6d:9e:bb:aa:40:b8:6b:73:99:c9:30:77:2c:1e:21:
         19:e2:39:ed:1e:e9:d8:06:9c:40:11:0f:1d:e0:38:66:b2:49:
         e1:6a:b2:ab:7e:e5:3b:31:2b:26:d9:15:36:46:cc:f4:d2:7c:
         ca:f8:20:d5:5e:aa:8d:2a:78:a9:61:4c:cc:4e:e0:e7:69:98:
         c9:71:5f:59:cb:60:4b:b9:45:92:62:a6:d6:8a:ad:02:86:22:
         62:2e:e9:9d:c3:ce:9e:96:8b:6e:68:14:9b:df:a5:f0:c0:6c:
         c7:8a:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:07:47 2025 by rpki-client