Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38342e302f32322d3234203d3e203238333036.roa
File:                     3138372e39342e38342e302f32322d3234203d3e203238333036.roa (raw, json)
Hash identifier:          dTQV9YMg+Bnf8HVp+EHM7h+JzxpFS3qAnz0jPLNhqQk=
Subject key identifier:   9D:1E:1E:D3:DA:0B:8C:47:5D:90:0A:50:CF:4D:6C:9F:0C:1A:E5:E5
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       24C87170A2A2ECA4CC0BA066A03A50D7A1165283
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38342e302f32322d3234203d3e203238333036.roa
Signing time:             Mon 04 Nov 2024 19:02:58 +0000
ROA not before:           Mon 04 Nov 2024 18:57:58 +0000
ROA not after:            Mon 03 Nov 2025 19:02:58 +0000
asID:                     28306
IP address blocks:        187.94.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c8:71:70:a2:a2:ec:a4:cc:0b:a0:66:a0:3a:50:d7:a1:16:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Nov  4 18:57:58 2024 GMT
            Not After : Nov  3 19:02:58 2025 GMT
        Subject: CN=9D1E1ED3DA0B8C475D900A50CF4D6C9F0C1AE5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:21:27:08:6d:37:4e:38:dc:8a:be:c7:16:
                    cf:d3:08:a9:77:d2:64:64:52:82:83:52:a8:e2:e3:
                    b0:19:d8:80:c2:a4:62:f7:8a:3e:a9:42:2d:23:c5:
                    d3:a4:66:99:8f:6f:33:e1:89:bb:5f:f7:a1:43:ee:
                    2f:64:58:e1:26:83:b1:6a:cf:3e:da:d3:fd:ef:18:
                    59:a8:51:6f:b0:5f:8f:6d:40:46:f2:97:e9:a4:85:
                    cd:3e:b4:51:72:f6:66:37:0c:6c:d0:f4:0b:95:17:
                    40:38:91:f0:63:7d:cc:d7:82:6b:fe:26:58:02:ad:
                    97:d6:6c:d1:a2:1c:1f:1f:70:d5:7d:af:10:44:7b:
                    3e:5f:90:91:03:ec:2f:ed:d8:77:3b:26:29:bf:e0:
                    d2:99:89:e6:07:71:aa:d1:4a:c3:0b:97:2e:d7:a7:
                    ba:b7:12:5f:f0:d7:5a:6c:88:86:1e:61:d2:b4:d6:
                    e0:d3:b3:79:99:49:58:11:19:67:4d:89:35:68:78:
                    e0:7d:15:36:06:5a:e8:60:6b:cd:be:24:25:d4:41:
                    e8:17:40:ba:a3:49:7f:5b:02:98:48:12:05:a5:14:
                    75:83:0c:5a:8e:9d:98:72:31:4d:86:ce:25:ca:33:
                    f2:31:6e:99:db:14:9d:21:7a:93:88:30:80:a7:bc:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:1E:D3:DA:0B:8C:47:5D:90:0A:50:CF:4D:6C:9F:0C:1A:E5:E5
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38342e302f32322d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:60:b9:59:16:22:cf:4a:8a:66:d8:56:8c:fd:8f:7a:73:f3:
         c0:f5:bf:c9:61:0a:91:78:c8:97:78:58:a0:8e:6f:50:29:d3:
         9b:c3:b3:ec:aa:07:8d:d8:b4:e8:4d:97:6a:8a:35:76:b7:3c:
         8c:d5:91:6d:dc:49:02:17:3f:1d:18:ba:2c:39:b2:87:5c:5c:
         07:dd:7f:75:68:3a:2b:b8:f6:5c:ba:03:50:59:53:c9:db:54:
         9a:9f:53:2f:3e:f7:20:45:38:d4:49:cb:8d:1b:95:7d:90:78:
         63:ff:f3:f9:2b:03:04:b1:d6:c0:dc:55:7a:c1:0a:00:ac:5c:
         b9:84:f8:ac:00:e4:54:7d:48:dd:5f:1f:ea:29:3e:f6:d7:fe:
         f8:88:8b:ab:51:bf:db:a0:83:59:53:60:ce:1b:0f:03:86:96:
         11:e1:f2:aa:6c:c1:68:cc:fd:70:4c:f4:32:e4:06:49:b2:de:
         dc:8b:6e:5f:59:e9:47:3c:b7:3c:c9:9b:95:4a:9e:a1:fa:fe:
         c7:59:8c:e0:6a:2f:8d:15:20:65:d8:c2:83:f0:ea:0a:33:cc:
         b8:34:a4:9f:10:58:91:85:ca:10:51:a4:3c:41:9d:2e:51:25:
         07:40:31:79:83:04:70:c0:1b:36:a4:65:a9:8e:93:52:ac:4d:
         08:c2:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:00 2025 by rpki-client