Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa
File:                     3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          hLeCrdSSynF2LnpoJY1ucW+9kX3MfnghtIzUteZF8Dg=
Subject key identifier:   87:35:23:38:F1:95:F5:E8:E2:A3:BF:63:12:74:F4:09:A2:77:5A:20
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       593E5ADC41F681CA06F9AF74C58EB4CDABEC4336
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:05:54 +0000
ROA not before:           Mon 08 Apr 2024 14:00:54 +0000
ROA not after:            Mon 07 Apr 2025 14:05:54 +0000
asID:                     265303
IP address blocks:        187.120.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3e:5a:dc:41:f6:81:ca:06:f9:af:74:c5:8e:b4:cd:ab:ec:43:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 14:00:54 2024 GMT
            Not After : Apr  7 14:05:54 2025 GMT
        Subject: CN=87352338F195F5E8E2A3BF631274F409A2775A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:f7:5f:dd:35:dc:46:64:4d:b9:27:88:07:
                    18:27:3f:64:98:d6:b6:56:90:4c:70:12:32:fa:25:
                    6f:96:89:b8:f9:80:6f:04:3b:6b:5e:16:2d:cb:56:
                    42:b7:6f:04:5c:ee:63:37:78:87:ee:af:67:93:5e:
                    f1:da:a7:28:88:7f:c2:39:98:97:82:72:2c:5c:6e:
                    92:9e:47:e9:f1:a1:e4:c6:39:ac:11:4a:44:03:57:
                    d3:e6:27:4f:78:7b:d8:94:9e:f7:d0:8e:9f:9b:42:
                    f1:23:ee:d4:74:1a:85:08:7c:b4:3d:be:4b:c1:75:
                    f9:ee:a0:a2:5b:93:c1:5a:43:d4:ff:62:5c:ee:55:
                    81:89:09:32:9c:81:97:45:c9:7b:27:56:51:6c:c8:
                    1b:ad:bf:8e:b5:a7:c5:46:bc:72:00:ef:9d:b8:fa:
                    de:d5:b6:69:a7:73:6e:c9:65:6c:fe:46:42:69:51:
                    d0:88:8b:28:70:4e:12:39:85:5b:94:f8:9b:a5:01:
                    27:36:1a:3e:40:fc:fe:5e:73:d9:86:8d:f3:f1:2e:
                    88:55:49:0b:66:25:c8:50:7e:dd:dc:09:36:df:e2:
                    2d:0b:60:8f:d1:a4:db:e9:89:bd:4e:d8:7c:1d:11:
                    52:2b:45:a3:c9:07:60:c7:46:9d:de:a4:6e:51:0b:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:23:38:F1:95:F5:E8:E2:A3:BF:63:12:74:F4:09:A2:77:5A:20
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:fb:29:19:fb:c3:ba:fd:f0:06:88:a8:43:84:36:39:2d:
         11:15:51:07:66:98:61:af:cf:b7:b4:37:18:07:9f:5b:85:ca:
         01:47:1c:bf:9a:0c:eb:7a:ba:a6:37:57:a0:37:0a:48:1a:57:
         bc:ab:26:04:2c:80:42:aa:a2:ab:eb:15:7b:50:b2:ca:bf:ab:
         91:ae:c6:6f:8c:53:bc:76:1f:16:8e:f6:3e:4b:a0:23:97:cd:
         65:75:27:66:68:af:c9:17:4c:e6:85:3d:d8:b5:4d:41:a8:5d:
         80:d4:1d:c4:f4:c0:9c:38:e3:a8:d9:10:b1:38:f4:81:6a:5e:
         73:ef:3e:0c:a3:02:e0:e9:f8:d3:15:86:c4:51:d3:07:8b:00:
         b9:0b:47:68:1d:eb:47:cb:d3:09:cf:a3:0e:9b:76:ea:72:4d:
         1a:80:0f:3f:19:05:d3:93:55:4b:de:61:09:9b:6e:f9:ce:17:
         74:ec:ad:e1:aa:de:55:95:4d:00:64:da:21:b2:0f:bf:12:dc:
         12:e6:93:0c:66:05:ca:5f:61:38:0f:2c:2a:df:74:5b:58:ac:
         c4:c7:49:33:80:ec:c6:f8:2e:a1:23:b4:cc:b5:25:5a:6c:f8:
         e9:45:d5:71:09:81:c9:f4:e3:52:9e:cd:c2:46:0d:d7:c3:17:
         05:ba:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:14 2025 by rpki-client