Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e39322e302f32342d3234203d3e203238333036.roa
File:                     3138372e39342e39322e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          kgmx6h63rvFTFXs9tfTkKCX9MUCKrZvSyvvIkfkvwVk=
Subject key identifier:   5D:A6:72:A5:7F:59:19:67:CA:A9:AA:CD:5A:14:50:C9:A9:65:DB:98
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       0A90E2BF7D1F422AFD6D8130388AAB32685BF811
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e39322e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:19 +0000
ROA not before:           Tue 25 Jun 2024 15:16:19 +0000
ROA not after:            Tue 24 Jun 2025 15:21:19 +0000
asID:                     28306
IP address blocks:        187.94.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:e2:bf:7d:1f:42:2a:fd:6d:81:30:38:8a:ab:32:68:5b:f8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:19 2024 GMT
            Not After : Jun 24 15:21:19 2025 GMT
        Subject: CN=5DA672A57F591967CAA9AACD5A1450C9A965DB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:88:fa:e8:76:85:4f:83:00:90:b9:fd:63:
                    17:88:b6:7f:88:8c:86:67:68:e9:37:a3:df:bf:c4:
                    39:df:d9:53:0e:16:17:39:ae:b4:0f:3a:41:a0:e7:
                    4d:80:6f:9f:6f:99:f9:f9:03:e1:40:82:60:e7:fc:
                    11:56:67:1b:89:a3:03:e2:c9:bb:49:a0:de:1f:a4:
                    e6:e7:9e:62:e4:08:d1:20:11:f2:41:a4:26:ec:b3:
                    ed:af:68:66:82:96:9b:c9:b4:86:7f:88:c5:7f:02:
                    02:20:4f:2d:6d:09:c3:c8:56:53:c7:29:99:30:ea:
                    95:f2:a8:38:55:53:2b:2e:b6:c3:27:da:ab:a9:80:
                    31:f9:30:a6:22:fd:2e:a0:a6:a4:1c:7b:60:bf:19:
                    83:5d:55:e7:8c:23:7f:ba:94:da:37:12:04:b3:38:
                    d1:c6:47:b2:d6:40:df:20:0a:05:81:ee:18:f5:32:
                    b7:5f:62:00:e6:c7:3b:fa:1c:bf:41:0e:f3:00:00:
                    7b:48:a0:14:54:0c:0d:4c:1d:a8:66:e6:3a:11:7c:
                    6b:21:76:40:2f:c5:60:2e:fe:f0:d0:43:4e:04:be:
                    e6:c7:fe:c5:4c:00:5f:c6:6c:89:f8:4f:06:e8:b3:
                    1b:d2:23:8d:e3:39:17:ea:0e:03:4a:b0:e3:66:d6:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:72:A5:7F:59:19:67:CA:A9:AA:CD:5A:14:50:C9:A9:65:DB:98
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e39322e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:27:89:84:18:25:0e:06:dc:51:0c:a0:97:cc:9c:28:2b:b3:
         97:b7:79:a2:a9:c7:e2:60:b5:97:5a:06:90:53:65:8f:b6:60:
         9f:d1:4d:a1:e5:23:88:a3:c8:6f:8c:18:c6:ef:20:e8:fa:23:
         87:16:75:2c:b0:39:c6:b3:bd:55:c6:6c:9b:4a:95:25:47:be:
         36:65:53:1e:85:a5:b9:de:e9:7f:f3:80:a2:94:4a:0c:58:7f:
         30:61:4f:bf:03:49:cc:84:32:ab:f9:e6:97:a4:fa:80:2e:dd:
         d2:ad:93:bd:08:1e:d4:3b:12:fc:bf:bb:d4:39:ff:7c:fb:a7:
         cc:a1:ea:a0:41:6f:3b:29:f0:0c:78:01:ac:7b:ca:8e:74:29:
         98:d1:bb:8c:21:91:9c:4a:28:e2:69:cb:8a:67:09:b8:fa:4d:
         af:0f:55:71:eb:45:be:30:0d:76:85:f7:f5:34:71:86:ce:59:
         3e:ed:3f:c4:96:10:fb:8c:f0:1c:11:70:11:b1:d1:d2:5f:60:
         a5:84:d7:2d:c1:dd:e5:f8:e3:4c:40:08:89:40:d6:31:cc:a7:
         76:45:47:08:41:ad:ec:c3:72:e9:38:07:72:75:c8:c6:25:76:
         9d:f0:39:c2:42:8f:2d:56:4b:97:71:78:9e:45:d5:d6:d7:b0:
         77:22:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:25 2025 by rpki-client