Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138372e302e36342e302f31382d3234203d3e203232363839.roa
File:                     3138372e302e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          oAj/LfnqXO/BUH41+m4oSKnyCQOKSaZoMA4ZWIMXqf8=
Subject key identifier:   91:9D:BF:E1:CC:D1:59:BF:7F:D8:A9:1A:92:89:2D:76:AB:52:59:7F
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       03518151263C0B402CC9B424BFC826A6669299F6
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138372e302e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:16:00 +0000
ROA not before:           Fri 27 Aug 2021 14:11:00 +0000
ROA not after:            Fri 26 Aug 2022 14:16:00 +0000
asID:                     22689
IP address blocks:        187.0.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:51:81:51:26:3c:0b:40:2c:c9:b4:24:bf:c8:26:a6:66:92:99:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:11:00 2021 GMT
            Not After : Aug 26 14:16:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:4e:a2:7a:20:be:bb:d5:64:a2:9d:90:21:
                    77:b0:4c:d1:9b:e2:59:ea:3c:09:3f:1c:e4:84:de:
                    67:4e:88:77:8f:f2:ef:c1:9d:65:fd:39:47:f7:22:
                    67:22:f1:f8:6b:31:b8:f2:9f:d3:56:48:50:8d:5b:
                    0d:2d:9b:75:b1:92:5a:3d:f9:4f:d7:c4:76:1e:86:
                    70:5e:ce:1c:71:dd:fe:eb:3e:05:af:e1:da:64:c9:
                    95:bb:3b:aa:42:ef:b5:6f:f3:e0:ce:48:4a:e7:5b:
                    04:52:06:9e:54:e9:78:4a:07:ba:d1:84:3b:ec:e5:
                    f6:3d:c6:4a:5e:94:82:58:ff:d0:f7:16:f6:13:d2:
                    33:88:42:77:7e:b9:1b:f7:bc:fa:3d:0f:dd:54:b7:
                    ba:c2:90:0d:11:ec:64:65:69:de:cd:ce:a6:0e:c7:
                    4c:fc:07:ff:fa:61:b8:a8:ae:a1:8f:11:1f:81:e5:
                    ae:db:1d:d5:2c:54:be:e7:81:13:57:36:db:1f:bb:
                    1f:af:2e:40:8e:1a:f7:a9:39:a8:76:02:ba:d3:61:
                    34:60:52:58:8b:b6:71:2a:f2:ea:c0:42:82:29:6c:
                    bc:99:2d:98:71:44:c7:c3:97:a5:f4:96:35:0d:10:
                    a3:4e:ad:b6:e7:de:4e:89:2d:d2:39:df:a6:44:29:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:BF:E1:CC:D1:59:BF:7F:D8:A9:1A:92:89:2D:76:AB:52:59:7F
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138372e302e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:85:bc:97:cc:64:32:df:f6:fa:de:bd:61:9b:42:c2:65:
         34:e5:a6:3a:a5:78:c6:32:db:9b:00:be:ef:45:dc:40:28:3a:
         a5:98:71:0a:a5:9d:bf:16:fd:f7:0b:91:7a:9a:f1:bb:45:a2:
         37:5c:ec:eb:6f:5b:c4:95:60:69:37:e9:fe:50:4a:a5:95:05:
         d4:c3:dc:71:e6:05:5e:b7:95:11:1f:11:d1:d7:71:fe:69:8f:
         16:e3:0c:5f:71:18:db:c6:52:9f:00:37:68:17:d4:c7:1c:1d:
         9f:1b:85:99:e2:f8:1b:a3:46:2c:d8:ee:45:1b:07:04:03:eb:
         81:21:9f:de:54:66:44:9e:a0:48:2f:66:eb:87:84:9e:86:9f:
         db:13:64:a8:b8:a4:7d:2f:f1:8b:1c:66:e8:d4:23:c1:4e:ce:
         ca:0e:e1:50:f2:0f:4a:fa:0c:32:73:f3:5b:3e:0e:16:76:de:
         36:78:73:c8:0f:b8:ac:ca:77:0b:48:64:4a:65:26:f0:1e:79:
         7e:b5:28:a5:6d:48:fb:e8:3c:91:ed:27:77:dd:b7:dc:dd:9a:
         f5:73:7b:e1:a8:7b:c6:83:6a:00:17:3b:8e:a0:26:fd:87:22:
         c3:b2:50:72:c2:ae:09:09:59:fb:62:59:13:0a:21:dd:2e:38:
         a6:a6:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:03 2025 by rpki-client