Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133312e302f32342d3234203d3e203533313237.roa
File:                     3138372e3131302e3133312e302f32342d3234203d3e203533313237.roa (raw, json)
Hash identifier:          QevhVraXM5DO7Qpm9ayMpXQoHf/sgeu1JDRD3z9VkLs=
Subject key identifier:   F1:52:B0:85:1C:7F:A7:DE:6D:9D:71:EF:2C:D3:22:38:B6:23:9D:3C
Certificate issuer:       /CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
Certificate serial:       6ABC3728D3BD7D0E4A7FADF806BEF594FA1DA832
Authority key identifier: E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133312e302f32342d3234203d3e203533313237.roa
Signing time:             Thu 16 Jan 2025 22:11:45 +0000
ROA not before:           Thu 16 Jan 2025 22:06:45 +0000
ROA not after:            Thu 15 Jan 2026 22:11:45 +0000
asID:                     53127
IP address blocks:        187.110.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bc:37:28:d3:bd:7d:0e:4a:7f:ad:f8:06:be:f5:94:fa:1d:a8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0
        Validity
            Not Before: Jan 16 22:06:45 2025 GMT
            Not After : Jan 15 22:11:45 2026 GMT
        Subject: CN=F152B0851C7FA7DE6D9D71EF2CD32238B6239D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:13:f4:52:9d:76:90:ce:f1:bf:e3:f4:47:
                    90:be:23:06:1b:3d:6f:05:3f:06:f1:9d:15:fa:64:
                    e5:df:d8:21:ab:c6:b7:14:ad:97:0f:c3:d6:0f:a0:
                    9e:29:dc:18:7e:0f:b3:1f:6a:02:c5:91:be:61:93:
                    e3:df:75:ec:5f:3a:15:61:aa:57:39:d2:93:2d:a9:
                    d1:4c:5d:1d:f3:56:f2:9c:0e:e0:3e:ae:96:27:71:
                    c9:75:0d:da:62:c1:91:6c:a9:08:b4:92:83:16:b4:
                    d0:00:34:72:85:3f:68:64:df:3e:83:9d:61:79:21:
                    db:68:98:bb:66:e4:eb:29:03:6a:40:96:84:b9:ab:
                    5c:26:70:d4:d6:8a:88:01:6e:a6:c3:39:72:e9:ee:
                    15:a4:ec:f1:c4:4e:36:ae:e2:94:75:be:f5:0c:de:
                    8e:ed:ec:53:bc:eb:57:a6:68:9d:72:83:a0:fc:ba:
                    c0:83:bf:36:1d:da:6f:e7:d7:ac:1e:14:df:fa:b7:
                    8a:68:e1:4a:99:a9:06:22:29:7d:79:da:41:81:1e:
                    8a:7b:78:64:33:c3:09:b7:75:44:81:0e:4e:d4:5d:
                    35:14:62:58:06:df:a8:27:40:7b:4f:e1:24:f4:37:
                    99:27:4d:16:f6:98:f2:1d:94:3c:cd:b0:44:12:f8:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:B0:85:1C:7F:A7:DE:6D:9D:71:EF:2C:D3:22:38:B6:23:9D:3C
            X509v3 Authority Key Identifier:
                keyid:E1:E1:5F:EE:A8:B1:B9:EC:3F:EE:E3:49:F8:63:70:6D:48:8F:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1E15FEEA8B1B9EC3FEEE349F863706D488F93C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133312e302f32342d3234203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:0b:5b:70:49:b6:ca:be:fc:a1:c6:00:65:4c:71:fe:5a:69:
         30:62:c0:08:21:66:2e:bb:6a:f7:b7:ad:8d:60:50:9a:11:b8:
         c5:e6:3d:16:0d:68:ac:54:dd:83:ac:55:ae:19:af:7d:c2:8b:
         52:f9:11:ea:7f:6b:1c:5f:65:22:2a:1e:7c:c7:1c:58:f8:b1:
         5e:a1:d9:4c:34:cf:6c:76:3b:32:48:11:01:df:9b:dc:01:be:
         0b:7f:98:9f:24:19:91:9f:11:bf:6a:d5:41:eb:30:72:65:74:
         85:cc:1f:d4:fc:ec:71:f7:c3:5f:04:cb:78:42:c1:de:c1:c8:
         d9:fd:ef:61:7d:c7:6a:ae:8e:f9:46:5c:d2:c7:4c:c0:1b:60:
         ee:1a:c6:a1:eb:41:a6:ae:6f:2d:d3:9b:5f:bd:b8:c7:7c:c2:
         d4:14:12:1d:67:7d:2e:6a:76:71:8a:b7:f7:f8:13:27:5c:dd:
         35:2c:16:22:d4:b7:18:43:92:f3:b8:dc:7b:1c:3e:c3:a6:6d:
         0a:d8:11:d7:df:82:5a:83:71:a8:a1:16:cd:5c:eb:0a:5d:75:
         b1:9f:cf:5f:68:23:d8:ec:26:ba:69:72:3a:6c:04:bb:f0:05:
         19:e6:09:5d:a7:a2:7b:89:e0:16:8a:82:81:60:6b:dd:83:fb:
         5c:6b:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:12:21 2025 by rpki-client