Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3138372e3131302e3234302e302f32302d3234203d3e20323632373330.roa
File:                     3138372e3131302e3234302e302f32302d3234203d3e20323632373330.roa (raw, json)
Hash identifier:          9fXNrn8pIzc5K1tf3Ro7Y9GlWpErtMBZU9SytmwWIcw=
Subject key identifier:   AF:5F:25:48:8C:3F:27:81:1A:A2:71:17:F6:59:75:AF:D0:87:ED:C0
Certificate issuer:       /CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
Certificate serial:       08E273C95993E31F6AA4CC4E9AF19AE74D1C0346
Authority key identifier: E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3138372e3131302e3234302e302f32302d3234203d3e20323632373330.roa
Signing time:             Wed 14 Jun 2023 14:00:00 +0000
ROA not before:           Wed 14 Jun 2023 13:55:00 +0000
ROA not after:            Wed 12 Jun 2024 14:00:00 +0000
asID:                     262730
IP address blocks:        187.110.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e2:73:c9:59:93:e3:1f:6a:a4:cc:4e:9a:f1:9a:e7:4d:1c:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9213DD4021CE06AB92F4683859FB848C0A265FD
        Validity
            Not Before: Jun 14 13:55:00 2023 GMT
            Not After : Jun 12 14:00:00 2024 GMT
        Subject: CN=AF5F25488C3F27811AA27117F65975AFD087EDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:60:8f:e2:e9:dd:1d:ba:46:71:37:bb:f1:
                    48:4e:b3:16:3b:6c:90:9c:6b:f1:9c:79:fa:d8:aa:
                    9d:12:62:8a:06:38:11:f3:d1:82:c0:60:ef:9b:1c:
                    50:c4:82:0c:ce:7f:35:a3:40:63:e5:55:de:d6:3d:
                    6f:7a:5f:e0:41:15:f1:0c:56:d7:09:2e:da:5e:d7:
                    6e:14:92:36:db:f9:ed:bb:d7:b1:2b:da:fc:eb:03:
                    5c:50:a9:27:fa:20:d4:3a:04:86:3f:c1:a9:c1:97:
                    0b:10:ed:a2:3f:4a:67:ad:8f:64:67:56:df:26:ed:
                    12:0a:47:f2:60:dc:ae:54:ce:65:8a:95:7e:04:e9:
                    07:72:df:6e:af:5b:69:cc:50:c6:44:cf:c6:22:28:
                    ff:35:a3:63:c9:d2:11:47:f4:14:05:81:38:0d:67:
                    dd:73:97:62:6f:6a:17:aa:55:46:aa:13:f1:a8:f3:
                    17:72:77:0c:4f:0e:8b:7a:e4:64:36:c9:5b:16:6c:
                    13:f3:2c:bf:74:8d:64:e3:93:47:b3:8a:cd:c0:5d:
                    b8:92:58:f9:fc:92:50:d9:05:2f:37:35:5e:ae:ef:
                    1c:77:b7:67:a4:ce:fb:c4:b8:6a:6b:a3:fe:37:25:
                    d9:f6:b9:79:7d:32:e1:49:5c:66:96:5c:19:0b:9d:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5F:25:48:8C:3F:27:81:1A:A2:71:17:F6:59:75:AF:D0:87:ED:C0
            X509v3 Authority Key Identifier:
                keyid:E9:21:3D:D4:02:1C:E0:6A:B9:2F:46:83:85:9F:B8:48:C0:A2:65:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9213DD4021CE06AB92F4683859FB848C0A265FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bT49NANhaBtN8pntdNKGXgkSmJu1Y2LtvQMooH1o5Rv/0/3138372e3131302e3234302e302f32302d3234203d3e20323632373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:19:56:6c:12:84:d5:2b:62:a5:b3:33:5e:db:96:c4:27:
         cf:f9:9d:5e:af:0f:0b:76:39:bb:aa:ec:7b:94:33:b8:fd:10:
         07:ea:c9:4d:90:a8:4e:fb:df:4a:40:67:c5:0e:d6:c4:23:11:
         ae:b9:14:41:79:cb:19:d9:47:31:98:63:e7:d9:c2:8e:60:40:
         39:2d:ac:95:58:08:fa:de:b6:7e:8f:a2:eb:72:4b:b4:21:c5:
         0b:fb:03:12:ee:5b:c7:03:5f:87:92:87:2b:65:b0:24:8c:ec:
         72:b0:c5:aa:bd:46:e3:88:57:e1:13:76:47:17:8a:b3:ff:03:
         cc:0d:0b:e3:c6:0f:f6:34:6d:af:c1:36:06:e5:52:82:8c:fc:
         96:21:d6:83:05:72:d1:94:54:2a:b6:ed:05:15:11:2e:a9:80:
         ba:9a:9b:f9:3f:3b:41:6a:28:a3:6b:4f:7d:f7:cd:f2:9c:f7:
         b6:48:56:54:a2:b7:7e:54:67:36:07:2b:c6:64:0d:57:2b:21:
         2f:8a:49:e3:7a:cf:f1:64:d1:40:36:1c:6e:32:1b:fd:d4:53:
         59:76:07:c5:2a:71:46:7c:b9:7c:5c:f1:d2:fe:c6:a3:b0:f5:
         ac:04:61:39:a5:c5:23:87:0e:45:ff:8c:54:30:3f:71:ce:ac:
         8f:50:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:37:34 2025 by rpki-client