Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38392e302f32342d3234203d3e203238333036.roa
File:                     3138372e39342e38392e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          T9iHkumkFJbhEHkKwGsdAyT9bH1RtlRg2WFxRPdgy64=
Subject key identifier:   FD:69:94:FA:10:29:35:E4:AF:F4:80:4F:E4:E0:4E:16:DE:74:E3:BF
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       4F03170399511EFCD2AC8F681B68C68DB9936234
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38392e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:19 +0000
ROA not before:           Tue 25 Jun 2024 15:16:19 +0000
ROA not after:            Tue 24 Jun 2025 15:21:19 +0000
asID:                     28306
IP address blocks:        187.94.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:03:17:03:99:51:1e:fc:d2:ac:8f:68:1b:68:c6:8d:b9:93:62:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:19 2024 GMT
            Not After : Jun 24 15:21:19 2025 GMT
        Subject: CN=FD6994FA102935E4AFF4804FE4E04E16DE74E3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:a3:b2:b7:a8:02:fe:7e:2e:2b:4e:92:9c:
                    88:cb:4d:44:60:a7:87:bb:d6:d9:a3:70:77:4b:44:
                    d7:3a:ef:b3:af:dd:ad:a1:b8:9a:46:ba:fc:db:1d:
                    68:a3:01:8f:59:1f:cb:66:52:1e:49:4c:6c:f0:6a:
                    18:b6:cf:9e:29:c6:6e:47:59:20:a6:51:8e:9c:15:
                    ef:0c:7d:fc:74:c5:f1:bb:9a:1c:0f:7c:b4:f3:9a:
                    4f:5d:b5:4e:a6:8b:a0:84:a8:25:85:6b:35:02:23:
                    9d:b3:d9:60:52:4d:e3:76:97:91:84:ae:54:ca:9b:
                    2d:ff:75:a8:84:2d:66:2a:89:36:3f:81:5f:8d:45:
                    8a:d0:b3:5e:fb:4a:ca:9e:12:88:87:dd:cb:c6:ae:
                    73:47:f8:20:9e:3e:69:4c:ab:55:7e:12:cb:81:a2:
                    89:55:62:cf:f9:4f:e7:2b:79:63:5f:82:dd:11:ed:
                    cd:3b:e3:64:bd:7d:4c:d6:ae:52:81:67:12:cb:f9:
                    46:79:ec:39:89:2f:4f:54:66:ce:a4:d3:b5:e6:2a:
                    5e:eb:7b:2f:30:99:6f:25:ce:81:c4:53:7a:af:1e:
                    78:84:48:43:fe:95:b9:dc:bf:79:50:f5:3d:a3:7c:
                    46:e5:4e:97:eb:5e:ad:70:59:b7:14:59:ac:fd:ea:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:94:FA:10:29:35:E4:AF:F4:80:4F:E4:E0:4E:16:DE:74:E3:BF
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38392e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:92:3c:8d:13:b2:39:d4:cb:d2:09:18:e0:d2:52:85:50:27:
         76:cf:88:1d:8e:7a:d1:6e:5a:ed:f3:96:b1:fb:ae:87:05:2e:
         f6:f9:25:47:48:7a:ee:f0:eb:82:e7:46:f1:88:92:ef:b4:16:
         99:26:4d:23:8a:9c:30:d5:80:8a:bc:e4:72:d4:5b:e1:4a:62:
         34:ce:67:bc:88:41:67:57:70:50:6e:1f:48:47:a2:bd:f8:08:
         6d:60:17:d9:33:19:67:c1:b0:4f:b9:5b:71:4a:39:1b:6b:f3:
         08:46:e9:e4:bf:bd:34:0b:88:c3:21:55:68:28:41:b8:a2:79:
         ee:2f:df:a3:cb:1c:e6:f0:af:c1:09:36:6b:5d:e7:86:0b:67:
         2a:10:41:0a:d9:df:c5:3f:2e:26:5b:51:c3:b3:2f:7e:46:50:
         7e:73:04:56:d3:83:0d:ae:c7:05:df:9c:5c:fc:7a:2c:dc:1c:
         fb:8d:58:80:cd:3a:80:d5:d6:d8:b7:c5:24:02:f3:cc:3c:97:
         2d:14:e0:86:76:31:f9:90:02:a2:3f:77:7a:30:67:20:aa:86:
         ff:85:1b:68:70:71:9d:44:3e:dd:14:ed:d9:df:76:a0:5a:15:
         e7:07:d6:45:66:19:95:50:8f:ea:b0:74:cd:20:cc:da:a9:c3:
         39:62:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:38:47 2025 by rpki-client