Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39362e302f31392d3332203d3e203238363234.roa
File:                     3138372e3131302e39362e302f31392d3332203d3e203238363234.roa (raw, json)
Hash identifier:          0K/WRPgeuRykDZnBZAyrBLlAHVcX6qJaTFHyD6l45Qo=
Subject key identifier:   48:37:AD:49:2A:A7:B2:94:18:E2:41:32:46:AC:96:2F:EE:8E:2B:FA
Certificate issuer:       /CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Certificate serial:       0224326138B2E88B46C86566D2E227A07B907152
Authority key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39362e302f31392d3332203d3e203238363234.roa
Signing time:             Tue 02 Apr 2024 13:18:52 +0000
ROA not before:           Tue 02 Apr 2024 13:13:52 +0000
ROA not after:            Tue 01 Apr 2025 13:18:52 +0000
asID:                     28624
IP address blocks:        187.110.96.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:24:32:61:38:b2:e8:8b:46:c8:65:66:d2:e2:27:a0:7b:90:71:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
        Validity
            Not Before: Apr  2 13:13:52 2024 GMT
            Not After : Apr  1 13:18:52 2025 GMT
        Subject: CN=4837AD492AA7B29418E2413246AC962FEE8E2BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:42:5a:58:fd:28:c5:db:a2:b5:f3:a0:10:
                    2c:9d:c1:ea:76:1f:16:45:83:bd:80:59:3b:b7:c5:
                    f4:1d:31:15:a2:56:cc:00:ca:77:b2:05:06:1c:0b:
                    4b:b2:ad:81:39:17:f0:22:97:11:94:d4:38:53:39:
                    97:85:61:be:f0:7a:4e:40:a3:de:48:5d:09:70:a7:
                    77:f4:64:34:a9:23:1a:69:80:d8:f7:a2:fa:99:96:
                    e6:d8:1d:b3:52:f0:89:8c:c6:29:b6:cb:ab:26:89:
                    12:74:92:52:31:9a:63:7b:52:5f:6a:a5:b2:58:d5:
                    97:54:70:a7:6c:f2:1f:10:09:c6:2e:1e:db:97:82:
                    d6:c5:36:84:18:0b:7b:96:96:df:0e:f4:70:34:b9:
                    07:b1:66:04:2c:c4:0c:e7:23:d0:a4:69:ef:80:36:
                    0c:84:71:12:50:a3:80:c4:68:a6:8f:7a:e4:1a:25:
                    14:e5:c8:ca:4d:64:ef:08:27:9b:64:73:b5:37:ce:
                    a8:95:b1:d7:14:1b:54:3a:5c:4c:e4:09:42:fd:3e:
                    21:2a:37:58:21:26:9a:a8:de:b4:f9:96:3c:cb:90:
                    21:e1:b7:eb:23:f7:29:0c:51:7e:30:5c:d1:fd:c2:
                    1d:7f:5d:89:f2:02:de:7f:23:ef:3c:b4:96:d1:6f:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:37:AD:49:2A:A7:B2:94:18:E2:41:32:46:AC:96:2F:EE:8E:2B:FA
            X509v3 Authority Key Identifier:
                keyid:DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39362e302f31392d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:76:8b:40:2b:65:dc:76:c6:67:ab:5f:bd:bd:19:41:5b:
         03:d5:7e:0b:f5:f7:7c:e1:a0:1d:f6:99:1c:5b:5d:9a:58:7b:
         a1:d9:1b:80:5b:b4:c7:82:e4:44:b9:03:81:eb:3b:fc:9a:e1:
         97:4d:ad:ce:23:8d:5e:23:3c:4a:d2:2b:6a:c3:d2:aa:96:57:
         92:7c:cc:0e:ef:08:50:38:ec:7b:7f:19:5d:7f:df:20:24:a0:
         75:f7:8a:57:4d:6c:e9:2e:b0:7c:cb:3f:3e:0d:c7:77:42:be:
         5a:57:85:88:34:18:bf:7f:fb:1b:7e:eb:22:40:ec:bb:f7:1b:
         9e:4c:61:a0:99:03:ff:2d:b1:6e:3a:bc:ff:e1:39:ad:f1:62:
         21:f4:e0:f9:43:de:a7:c4:30:5f:0c:1d:b9:e5:4c:2f:68:a8:
         9e:a8:b4:fc:4a:f1:52:66:34:01:78:80:0d:7a:50:9f:26:84:
         ef:ca:3c:30:aa:d9:e8:89:14:ba:c6:ba:b1:92:ac:ee:44:78:
         af:c3:7d:93:11:50:f0:eb:dc:74:20:fc:12:72:26:40:02:fb:
         16:b5:86:bc:42:f9:78:e9:b8:d2:60:a8:2a:5f:18:be:33:ad:
         f9:53:15:f9:5a:54:bd:a4:16:88:98:4b:ac:5c:d3:b2:fe:fd:
         05:9a:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:39 2025 by rpki-client