Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3132382e302f32302d3230203d3e203533313237.roa
File:                     3138372e3131302e3132382e302f32302d3230203d3e203533313237.roa (raw, json)
Hash identifier:          BuPIN/NdnR6Hu4SPJvo0RgNAGYvUxKaKOtgvkrLXbaU=
Subject key identifier:   AD:A5:43:98:F2:F6:3F:82:83:76:DE:D8:7C:96:91:4F:B1:21:58:D5
Certificate issuer:       /CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
Certificate serial:       355E716398FE2047187F51067674B14FE1BC9FDD
Authority key identifier: E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3132382e302f32302d3230203d3e203533313237.roa
Signing time:             Thu 16 Jan 2025 22:11:47 +0000
ROA not before:           Thu 16 Jan 2025 22:06:47 +0000
ROA not after:            Thu 15 Jan 2026 22:11:47 +0000
asID:                     53127
IP address blocks:        187.110.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5e:71:63:98:fe:20:47:18:7f:51:06:76:74:b1:4f:e1:bc:9f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
        Validity
            Not Before: Jan 16 22:06:47 2025 GMT
            Not After : Jan 15 22:11:47 2026 GMT
        Subject: CN=ADA54398F2F63F828376DED87C96914FB12158D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:71:54:a6:fe:5b:d2:c8:72:f2:2b:36:bb:
                    47:ec:bd:00:af:a7:53:d1:c1:62:dc:75:4c:76:82:
                    a0:bd:06:75:e7:34:67:2b:b6:53:17:9c:1b:88:7d:
                    e6:e8:99:4e:9c:bc:1d:6d:67:3a:ee:8b:73:ca:11:
                    5b:e7:31:6c:13:f3:f7:cc:19:43:83:86:fb:ed:e2:
                    3d:6f:fd:20:ed:f4:55:d2:17:18:4d:45:23:ba:c3:
                    26:92:08:76:30:d9:df:fc:1d:e4:c3:31:80:1a:98:
                    59:18:4e:a0:e9:cf:18:54:fc:47:89:19:c0:36:85:
                    2c:e9:81:6d:d8:00:f4:9b:92:2a:86:e7:e0:b9:1d:
                    b8:e2:c8:d1:dc:10:c2:57:74:04:db:54:26:c9:90:
                    68:28:7a:fb:92:fb:7a:ad:81:a1:ff:8d:1b:7c:f3:
                    ec:97:06:1e:56:c8:6e:20:34:b1:76:fb:bc:33:20:
                    ff:e9:8b:4f:f9:8a:21:c3:a7:21:b0:0f:ca:8d:57:
                    78:0e:76:7f:7f:c2:c5:f2:69:e2:3b:60:aa:79:88:
                    2c:8d:73:8e:c7:3f:06:94:e2:b3:5c:73:60:b1:aa:
                    c5:df:97:b3:43:bd:79:76:65:2e:d3:06:9e:73:70:
                    83:81:c1:29:f7:2f:fc:b0:01:82:27:50:44:5b:a1:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:43:98:F2:F6:3F:82:83:76:DE:D8:7C:96:91:4F:B1:21:58:D5
            X509v3 Authority Key Identifier:
                keyid:E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3132382e302f32302d3230203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:21:c8:25:ec:01:30:7d:0a:1b:24:c1:ef:91:81:18:e4:a1:
         3e:d7:49:c2:69:51:21:ff:8d:07:df:2b:72:a7:73:36:a8:e1:
         a0:e1:72:74:f0:1a:eb:a4:cd:e2:1a:81:65:41:41:79:e9:db:
         47:b3:9a:5f:83:21:93:bb:72:38:1e:81:18:47:d9:87:41:a4:
         db:c0:5c:87:9f:a3:26:45:4a:a8:a9:89:62:25:2b:99:63:ed:
         64:69:72:be:29:5c:03:d7:31:e8:d0:0e:2f:89:54:ea:56:e6:
         d9:4e:fc:1f:48:25:a1:cd:7d:8b:ff:06:23:30:7c:fa:55:ac:
         37:e9:fc:ef:7f:1f:5c:dd:96:7c:d5:c5:f6:22:99:21:99:30:
         77:41:63:2c:a6:5c:01:b6:7a:65:7a:29:dd:19:31:bb:0f:77:
         45:a3:3c:95:f3:08:84:b5:3e:01:6e:86:37:46:9c:dc:3e:64:
         36:e0:3c:8f:43:ab:e3:94:7e:b1:1c:28:52:e6:2b:d9:22:d5:
         37:b7:21:99:44:28:7b:d5:ae:b9:27:fc:a2:7a:71:fa:60:16:
         b6:46:dc:77:58:7e:9a:68:41:c6:3b:80:0e:96:2a:ab:82:fa:
         46:7f:8b:4f:28:53:ec:32:0e:96:0c:64:38:27:7c:7a:bc:c2:
         8d:31:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:16:46 2025 by rpki-client