Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132332e302f32342d3234203d3e20323730393632.roa
File:                     3138372e38342e3132332e302f32342d3234203d3e20323730393632.roa (raw, json)
Hash identifier:          +7Ju8gRs0SawVY0CSXv7HTfcl6+QyGbGKaXTXiomm5Q=
Subject key identifier:   31:78:C3:C6:E8:85:D2:C5:92:06:A2:02:69:DB:41:A9:E5:7F:58:75
Certificate issuer:       /CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
Certificate serial:       44D0C8E26A80BEC1C3F3F9F64852F7C808D28E37
Authority key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132332e302f32342d3234203d3e20323730393632.roa
Signing time:             Tue 04 Jun 2024 18:38:11 +0000
ROA not before:           Tue 04 Jun 2024 18:33:11 +0000
ROA not after:            Tue 03 Jun 2025 18:38:11 +0000
asID:                     270962
IP address blocks:        187.84.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d0:c8:e2:6a:80:be:c1:c3:f3:f9:f6:48:52:f7:c8:08:d2:8e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000
        Validity
            Not Before: Jun  4 18:33:11 2024 GMT
            Not After : Jun  3 18:38:11 2025 GMT
        Subject: CN=3178C3C6E885D2C59206A20269DB41A9E57F5875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:44:25:b4:7a:82:51:37:b2:08:00:f5:27:9a:
                    ea:2f:cf:a3:36:72:84:74:14:83:a9:80:b5:f2:9d:
                    3d:fe:9d:10:15:eb:c5:5e:db:8b:f5:50:9e:3c:db:
                    1e:26:48:66:fa:76:dc:63:5c:c3:1c:c9:dd:a5:86:
                    55:15:09:1d:7c:8e:c9:f3:85:53:c5:47:bd:0c:fc:
                    df:d1:96:1f:fe:25:5e:9b:e3:45:63:51:ee:a7:2d:
                    0a:aa:97:89:22:e3:46:79:24:92:9f:80:4e:ea:8c:
                    e0:de:91:66:98:96:f5:cc:e9:3f:c4:cd:a3:ef:25:
                    b0:0e:c3:24:a3:ea:b1:08:18:8a:4e:a7:53:a7:e4:
                    9f:91:72:79:a2:32:0e:64:04:f2:28:4c:fa:2a:ae:
                    ce:4a:bd:c0:7a:82:f5:c0:52:9c:e6:25:fd:e8:61:
                    32:47:18:8f:c7:a2:f6:41:4c:33:fa:47:73:ce:8b:
                    2b:2c:a1:c3:dd:c5:d6:73:9e:b7:6a:3c:39:01:41:
                    12:bc:73:17:f2:b9:10:d6:25:d6:97:8e:60:4b:28:
                    74:fc:eb:de:04:64:8e:08:72:9a:e7:db:02:cf:c3:
                    a2:2a:dc:85:20:18:13:f0:50:5a:6f:2f:98:63:70:
                    0c:4a:eb:1d:68:02:b2:00:42:da:21:ac:e8:88:d2:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:C3:C6:E8:85:D2:C5:92:06:A2:02:69:DB:41:A9:E5:7F:58:75
            X509v3 Authority Key Identifier:
                keyid:08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132332e302f32342d3234203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:9f:a0:e8:8b:fe:e8:67:0d:4e:1d:4a:6e:a3:a9:9f:4e:3d:
         f8:d3:c6:13:f9:50:df:16:63:42:e9:a6:a5:dc:cb:fe:78:0f:
         41:05:7e:a2:ae:8a:f5:92:3b:58:9d:98:4f:ca:6a:9f:fa:60:
         ed:81:12:2f:d3:87:60:1a:02:59:8d:26:e2:7b:99:b4:a8:50:
         ac:d0:fa:4c:4d:8e:98:4a:ab:3e:5e:6e:40:44:bd:f3:d2:ff:
         20:2e:2e:f2:f0:99:24:62:16:22:e6:c2:19:c2:93:0c:7a:05:
         27:24:b7:b5:0d:f9:99:3a:54:70:77:a5:ad:44:83:df:32:63:
         c5:4c:6b:3d:c6:fc:6a:1f:81:8d:a2:5a:6b:1c:5c:73:ca:89:
         db:42:39:d5:a3:f0:94:e1:fc:b6:fe:b4:6f:3e:87:db:77:26:
         1e:c5:24:25:bf:c7:96:76:b0:51:53:3a:64:34:c4:0e:f2:46:
         fa:d8:e6:45:f9:12:32:77:34:ff:a7:13:d1:44:1b:ae:ae:88:
         8e:cb:b6:12:60:1c:c6:42:2f:5c:ea:5e:8e:fb:69:c0:f4:87:
         a2:6a:ef:7b:fe:da:78:91:16:ed:17:dc:c0:dd:db:c0:41:9b:
         b9:86:a7:21:6e:68:40:0f:f4:d8:20:c8:55:e4:df:40:a4:f6:
         21:9a:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:30:24 2025 by rpki-client