Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138372e38352e3234302e302f32302d3332203d3e203238323035.roa
File:                     3138372e38352e3234302e302f32302d3332203d3e203238323035.roa (raw, json)
Hash identifier:          PY+OGzqlvhqRW32h0yTWWFXfXIqUub30CptME5zvJhU=
Subject key identifier:   8E:EA:17:A7:10:C7:BB:EC:74:81:22:9B:37:AC:FD:F2:73:E4:97:CD
Certificate issuer:       /CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
Certificate serial:       15042E4DB7DF585185ED9DDC0123E119C2C52CFE
Authority key identifier: 89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138372e38352e3234302e302f32302d3332203d3e203238323035.roa
Signing time:             Wed 22 May 2024 11:28:02 +0000
ROA not before:           Wed 22 May 2024 11:23:02 +0000
ROA not after:            Wed 21 May 2025 11:28:02 +0000
asID:                     28205
IP address blocks:        187.85.240.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:04:2e:4d:b7:df:58:51:85:ed:9d:dc:01:23:e1:19:c2:c5:2c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8932ACC1911E393FFC9CEB81881A0D18DE307D35
        Validity
            Not Before: May 22 11:23:02 2024 GMT
            Not After : May 21 11:28:02 2025 GMT
        Subject: CN=8EEA17A710C7BBEC7481229B37ACFDF273E497CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:60:7c:5f:bf:9e:ec:72:3d:06:9c:70:9d:
                    0e:d7:5f:18:c5:e1:e1:6d:4d:2a:dd:f9:1e:c9:09:
                    73:b3:cb:0b:42:e4:ca:f1:42:e3:64:4c:24:da:ff:
                    f1:ba:11:6a:60:9c:72:2c:b1:95:07:8f:72:1e:c0:
                    c5:8f:1b:17:d9:c4:71:1a:ef:6b:a1:4d:6f:f6:65:
                    61:e6:1d:cc:87:0a:31:68:fb:2f:28:ff:57:94:5c:
                    11:f4:83:77:71:c1:57:62:c0:bf:dc:c2:98:bd:71:
                    4e:db:1a:d9:11:6a:4e:93:1d:a4:c5:82:ea:85:40:
                    27:fa:57:2e:dc:ff:9d:30:62:db:57:37:a3:e1:a5:
                    f7:62:ca:76:c9:82:5d:b8:6e:e8:db:d2:6a:57:20:
                    55:a1:58:eb:b2:d4:04:b1:0c:76:48:70:f1:ad:4d:
                    ae:42:56:24:3b:6c:1e:dc:c4:96:86:ef:5f:ae:67:
                    37:3c:4c:d0:03:e2:2b:44:5f:bd:ac:39:6c:c2:d1:
                    b4:11:ad:a5:79:fc:99:03:62:b0:6b:8f:ea:4f:cb:
                    68:8b:b1:13:fe:70:05:74:0d:fa:0f:9a:46:c5:3d:
                    4b:4a:f9:57:c8:f3:66:ba:ac:d2:7b:31:c3:57:8a:
                    2b:29:6d:a9:60:83:b1:29:d4:6a:c7:1e:06:f8:df:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:17:A7:10:C7:BB:EC:74:81:22:9B:37:AC:FD:F2:73:E4:97:CD
            X509v3 Authority Key Identifier:
                keyid:89:32:AC:C1:91:1E:39:3F:FC:9C:EB:81:88:1A:0D:18:DE:30:7D:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/8932ACC1911E393FFC9CEB81881A0D18DE307D35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8932ACC1911E393FFC9CEB81881A0D18DE307D35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DA2pEWXcNEgyhucTDpKQWWmCDa9xJT3NkwZAXbQWXDq/0/3138372e38352e3234302e302f32302d3332203d3e203238323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:e2:2a:fa:11:d4:0c:f0:17:6a:62:88:31:ec:52:3f:08:
         79:35:f3:37:24:79:f2:50:cd:47:e0:6e:18:86:79:ef:9c:69:
         8d:2d:90:fc:40:eb:d4:47:9d:1c:d4:c9:52:23:33:bb:09:16:
         3c:bf:a8:87:2e:51:1c:cf:21:2d:9f:c1:1b:eb:b1:b7:78:59:
         1f:30:3c:1f:18:83:7c:35:9b:7d:bb:1e:3c:64:64:08:ea:e4:
         69:44:51:fb:fb:b2:72:14:37:36:4d:90:1c:14:bd:2b:be:07:
         72:55:dd:1d:12:d7:2e:44:ad:5a:70:a9:5e:6f:56:eb:c0:66:
         12:cc:c4:5b:64:43:bf:62:f8:dc:da:31:fc:f3:4a:21:24:db:
         92:f5:e9:cb:7f:24:a1:86:09:57:e2:2f:09:21:7e:da:7b:48:
         a5:17:2f:4d:aa:37:35:73:39:29:ad:a3:99:a1:45:57:e4:69:
         26:45:7b:02:55:2f:4f:43:70:d4:47:ba:b4:04:80:99:34:3f:
         5a:53:bb:9c:cb:1e:16:c2:56:3f:6a:bf:46:a8:9f:0a:e4:75:
         96:4e:8b:b0:38:57:b8:4b:e3:7f:3f:0e:e7:16:64:26:8a:d5:
         66:ce:b8:3b:76:27:1a:c4:7c:22:ec:9a:46:b6:43:d1:fe:2c:
         a8:90:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:43:19 2025 by rpki-client