Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32312d3231203d3e203238333036.roa
File:                     3138372e39342e38302e302f32312d3231203d3e203238333036.roa (raw, json)
Hash identifier:          x0cNVu1dfMpOLml3FsEy8u0BNqdx9xRdhFyWDvMGifI=
Subject key identifier:   95:17:22:A1:F4:01:AC:98:5A:80:C1:EE:B1:62:40:CE:47:87:19:07
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       1A5E39E11EA59B41C509ABAAF38DD552ADE20259
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32312d3231203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:13 +0000
ROA not before:           Tue 25 Jun 2024 15:16:13 +0000
ROA not after:            Tue 24 Jun 2025 15:21:13 +0000
asID:                     28306
IP address blocks:        187.94.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5e:39:e1:1e:a5:9b:41:c5:09:ab:aa:f3:8d:d5:52:ad:e2:02:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:13 2024 GMT
            Not After : Jun 24 15:21:13 2025 GMT
        Subject: CN=951722A1F401AC985A80C1EEB16240CE47871907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:68:58:8c:db:e3:e3:ae:d9:39:26:f2:24:
                    50:e5:0f:4f:94:8c:3e:ab:3b:4b:c6:5a:b3:34:13:
                    58:0b:c0:48:ce:1e:f9:56:7b:7b:ad:f9:b1:f7:42:
                    c2:61:47:d6:1e:63:48:3b:05:17:f9:cd:23:76:59:
                    e4:b8:8b:92:e9:c4:a5:1e:3c:45:96:f0:6c:97:54:
                    de:9c:2f:e4:ac:3b:13:d5:04:49:38:5c:22:2f:74:
                    1b:78:ed:86:88:61:f6:1b:22:47:a8:cf:44:6c:96:
                    86:54:8f:f2:5e:58:ee:a7:67:26:9a:18:43:cb:e1:
                    68:2d:f8:ad:9d:16:94:1e:5a:3c:54:b4:fa:54:50:
                    cf:19:0e:8a:43:f6:e4:45:0c:dd:b0:82:19:cf:3a:
                    3f:29:ba:2e:91:24:07:fb:90:b9:be:7f:4a:aa:c3:
                    49:bb:f2:e5:e7:80:b6:ee:6f:b9:70:bc:98:06:89:
                    18:76:e3:67:e7:c5:9c:98:e4:af:75:47:db:d1:8d:
                    e0:76:d2:38:a6:5b:1d:11:51:d0:09:90:42:37:11:
                    96:ac:06:3b:b7:cb:24:6d:ad:07:39:11:3b:f8:bc:
                    50:f7:32:97:d1:35:02:c6:2e:2b:63:5b:c3:10:f8:
                    1c:f2:74:30:85:ad:90:7b:69:2f:3f:dd:26:ce:1c:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:22:A1:F4:01:AC:98:5A:80:C1:EE:B1:62:40:CE:47:87:19:07
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32312d3231203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:73:75:b0:2a:ba:e1:35:1f:d7:c7:60:b5:c2:84:0d:19:
         a0:7a:cd:db:d3:3b:4d:29:fa:be:94:68:66:1a:f5:c2:fc:06:
         8c:d2:50:73:bb:7e:fa:28:90:fa:35:fd:db:1a:eb:b4:9d:83:
         01:4e:b6:af:bd:f6:70:56:60:1a:5a:62:db:90:7f:0c:41:cf:
         18:6e:79:66:c5:7c:31:d6:25:23:5e:95:45:9c:18:a5:dc:d4:
         5e:03:b6:64:c1:96:1e:05:7e:be:3a:82:f5:63:8d:b3:49:f9:
         6b:b2:70:01:b2:93:17:44:54:a5:83:57:5f:37:a3:e8:ed:17:
         f4:6d:08:ef:a2:bb:9f:53:bb:d7:c4:0b:c2:2a:71:4b:63:b4:
         11:94:a8:d5:8d:dd:57:5d:32:02:f4:54:f6:4f:35:ff:5c:23:
         66:22:69:c0:4c:af:17:73:a6:dc:ce:56:89:38:b8:9b:34:6a:
         a6:e9:95:59:2f:99:25:90:2f:bb:d3:a1:43:b0:74:1c:fb:71:
         63:12:ff:1f:69:15:a3:8a:25:9a:f8:8f:ac:28:0e:78:05:3a:
         96:cc:f9:92:e7:77:e3:bf:05:18:81:b9:a4:09:19:b2:cd:f9:
         3a:09:ca:f2:ea:d0:de:f5:22:5d:27:73:6f:7e:41:3a:a0:bb:
         63:d4:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:22 2025 by rpki-client