Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38342e302f32342d3234203d3e203238333036.roa
File:                     3138372e39342e38342e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          ijqp+xywuwunchscnUstAWRpHQ7VOBfauv5V3Nsihhg=
Subject key identifier:   56:C6:74:63:FE:53:5D:A3:83:7E:80:45:FE:74:56:54:04:36:CE:D7
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       7224475EFECDFFD4A82E3189346FB8464F3D5EA7
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38342e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:18 +0000
ROA not before:           Tue 25 Jun 2024 15:16:18 +0000
ROA not after:            Tue 24 Jun 2025 15:21:18 +0000
asID:                     28306
IP address blocks:        187.94.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:47:5e:fe:cd:ff:d4:a8:2e:31:89:34:6f:b8:46:4f:3d:5e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:18 2024 GMT
            Not After : Jun 24 15:21:18 2025 GMT
        Subject: CN=56C67463FE535DA3837E8045FE7456540436CED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:92:f5:72:1b:0b:e3:4d:40:5d:9e:5d:e9:
                    3c:db:51:b0:d4:1c:48:91:85:13:8d:90:77:b7:3a:
                    c4:72:b2:23:67:9d:14:0a:f0:50:fd:c3:df:b2:c9:
                    2e:63:57:5a:bf:70:2c:60:dd:9b:c4:46:be:a7:8f:
                    95:e5:10:48:e0:41:a0:cd:b3:b3:84:c5:81:33:a0:
                    0f:28:cc:e0:a1:29:99:44:76:14:3b:ef:76:9f:c5:
                    31:da:58:a5:40:3c:7c:c6:90:fc:26:fc:98:c5:92:
                    fa:76:1b:79:47:c1:83:d6:67:18:8f:97:1c:76:50:
                    53:5a:f8:a7:b7:c0:db:9f:4f:51:03:af:3d:7e:01:
                    75:81:8a:3f:ae:56:f1:72:27:0e:9b:60:22:4c:14:
                    5b:8a:b0:7e:ab:7a:2e:53:01:a6:5f:9d:de:2e:96:
                    de:a6:36:51:87:aa:47:9b:df:8c:20:d7:9a:cf:64:
                    c9:14:71:c5:44:b7:9a:79:f0:7b:a2:8e:cc:70:74:
                    0d:77:aa:ff:fb:bd:f2:3f:fb:30:a0:ea:60:fc:ca:
                    65:cb:a2:5a:ea:7d:78:61:22:31:ef:1d:a2:fd:2f:
                    66:b1:65:f0:c8:95:e1:d8:49:e8:e7:f2:11:68:b7:
                    ec:ae:19:b8:fe:fd:2a:da:c3:17:31:6d:d3:1d:4e:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:74:63:FE:53:5D:A3:83:7E:80:45:FE:74:56:54:04:36:CE:D7
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38342e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:e5:0a:e4:13:68:6d:d3:4d:a5:da:43:18:55:0b:a4:ff:
         56:6f:00:76:8e:31:4f:2c:e1:81:79:b0:7f:5b:51:dd:dc:6a:
         41:04:a0:87:25:4e:e1:1c:6a:b0:9b:6b:84:20:2b:92:0a:33:
         d3:b1:08:bc:d8:57:36:d9:57:4e:dc:c4:de:c4:ff:49:64:ce:
         a4:d1:12:9c:c5:62:55:eb:2e:36:ca:9a:c1:ed:a1:47:31:a3:
         2e:45:04:83:34:87:e1:76:4d:c8:46:77:22:98:e2:ab:0a:6f:
         f1:63:4d:7e:25:ac:b9:df:37:a1:1a:78:ce:3d:a9:08:ca:b3:
         40:27:4e:d2:26:02:05:9c:86:0f:45:05:b0:14:65:61:b3:25:
         ac:cb:64:8f:34:c5:d4:7d:a1:0e:2b:2a:5a:c7:ba:ef:67:be:
         b2:8f:9c:d5:fb:3f:c7:ab:dc:de:9c:dc:6d:af:10:ac:f5:ff:
         13:b2:9f:c5:b7:88:77:e9:92:d4:2b:67:45:4c:a3:65:03:8a:
         3e:de:32:1c:c0:dc:bc:10:b6:68:11:9f:ed:2b:49:37:14:2c:
         f0:07:53:2e:0f:12:e9:08:ad:49:c6:9a:e7:e8:a0:4d:62:9e:
         59:a6:53:e3:f9:fc:a9:cd:8a:0e:ec:30:66:d6:cd:be:66:b7:
         2a:21:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:30 2025 by rpki-client