Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa
File:                     3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (raw, json)
Hash identifier:          KszOIxvzdb2byYIAkB/jo2J14kAdHgZWkp71wd+hZKU=
Subject key identifier:   F9:0F:B8:C2:A1:6F:3F:4C:DE:EA:B3:34:E6:C6:B9:A3:9E:E8:5F:82
Certificate issuer:       /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Certificate serial:       07FC9E415CBA2D084F1F9618E7791D8C01067D11
Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa
Signing time:             Thu 19 Dec 2024 19:47:01 +0000
ROA not before:           Thu 19 Dec 2024 19:42:01 +0000
ROA not after:            Thu 18 Dec 2025 19:47:01 +0000
asID:                     265928
IP address blocks:        187.109.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fc:9e:41:5c:ba:2d:08:4f:1f:96:18:e7:79:1d:8c:01:06:7d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
        Validity
            Not Before: Dec 19 19:42:01 2024 GMT
            Not After : Dec 18 19:47:01 2025 GMT
        Subject: CN=F90FB8C2A16F3F4CDEEAB334E6C6B9A39EE85F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:2e:50:34:76:ac:f0:f1:d9:3e:98:8f:f1:
                    23:e3:82:97:27:5b:d6:6d:2f:a4:02:6f:bb:3b:0a:
                    62:4c:f2:f5:1a:68:35:b9:3b:f5:68:e0:8b:c0:0e:
                    33:d5:7f:28:45:f1:f2:57:e5:ff:f4:12:db:68:e5:
                    8d:fd:de:cd:82:24:84:f3:01:f8:3f:63:ab:1c:6d:
                    bd:d4:88:67:04:b7:0b:71:91:30:cf:6a:15:f1:59:
                    3a:c0:93:7f:bc:92:c8:a7:bf:72:18:b4:5e:ca:88:
                    ac:bb:64:3c:f2:73:c8:05:5a:e6:a7:0c:14:75:9e:
                    2f:89:ea:ea:29:5d:4c:be:4d:43:da:77:ad:c5:bd:
                    f9:26:45:e3:c9:d4:22:42:15:00:a1:0a:95:81:8c:
                    26:da:0d:32:d4:c2:9f:44:2b:30:48:d2:0b:6e:7b:
                    07:20:1b:38:89:c3:e7:9e:00:fa:71:f3:9a:7c:07:
                    31:c8:b9:30:62:13:ed:fa:22:9d:b8:89:42:5b:11:
                    67:be:e2:65:a3:08:05:6a:5c:0a:ec:0f:71:14:60:
                    d2:9a:10:c4:93:20:77:b9:5b:a1:b0:65:76:81:79:
                    a4:35:84:cb:84:74:0a:7a:ab:f6:b0:58:cd:66:7b:
                    ff:76:09:79:78:85:f6:63:1c:6e:d4:e7:75:a3:13:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0F:B8:C2:A1:6F:3F:4C:DE:EA:B3:34:E6:C6:B9:A3:9E:E8:5F:82
            X509v3 Authority Key Identifier:
                keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:aa:5b:5e:bf:5a:83:11:a2:9e:69:81:fe:81:de:5f:a6:
         c3:37:14:c9:18:c2:1f:fa:24:cd:c5:3c:24:da:ff:47:ea:7c:
         e6:5e:52:6e:45:9a:77:dc:e2:03:a0:b2:5a:a1:2c:2e:97:9a:
         9d:69:db:c3:2a:57:d4:c2:48:41:4e:62:fa:06:b1:70:e7:2c:
         18:a7:e1:86:f4:3e:68:87:29:e9:75:2c:e6:e9:61:80:42:fc:
         ce:19:79:67:3c:ed:59:09:31:a6:44:52:d1:47:12:2c:50:c4:
         0f:5e:e9:3f:03:e9:a4:0e:09:26:1d:f3:13:1f:3b:23:a4:c0:
         bc:02:0d:96:58:cc:46:97:f5:3c:54:52:42:b3:88:51:f6:8d:
         79:de:3e:43:6e:d4:c5:c7:25:a1:25:3d:a6:26:a1:36:99:fc:
         30:bc:44:07:3b:6c:91:ce:cf:c3:96:14:f1:ff:b7:5b:8e:ae:
         da:ce:3c:98:16:9b:83:39:3c:86:99:40:0d:03:c3:a2:08:3b:
         99:dc:df:8d:56:6a:81:c1:5c:1c:42:44:6a:98:52:36:95:7b:
         63:3c:56:10:70:0a:14:7e:55:cf:f3:e9:b5:28:95:65:54:64:
         71:22:54:1a:5c:6a:1e:d7:8c:8c:85:11:53:33:6b:a3:b8:fe:
         1c:20:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:05 2025 by rpki-client