Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa
File:                     3138372e39342e3132382e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          VLJ8PJfwEwIcNCDXgSDVI74xzJfjpMbAvX5IVAdjgNk=
Subject key identifier:   20:6D:C5:6B:89:D5:EA:1E:F4:52:1C:7B:89:37:36:D3:E7:19:60:11
Certificate issuer:       /CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
Certificate serial:       4521D5E5732930AF9CD5865B1A49D7C32C25A72A
Authority key identifier: 69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa
Signing time:             Mon 24 Apr 2023 12:51:40 +0000
ROA not before:           Mon 24 Apr 2023 12:46:40 +0000
ROA not after:            Mon 22 Apr 2024 12:51:40 +0000
asID:                     28359
IP address blocks:        187.94.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:21:d5:e5:73:29:30:af:9c:d5:86:5b:1a:49:d7:c3:2c:25:a7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
        Validity
            Not Before: Apr 24 12:46:40 2023 GMT
            Not After : Apr 22 12:51:40 2024 GMT
        Subject: CN=206DC56B89D5EA1EF4521C7B893736D3E7196011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:3a:0d:e6:59:f1:39:5e:3c:40:cc:d6:67:
                    c9:df:52:18:9d:8c:25:0b:b7:a2:12:85:f0:2f:3a:
                    6c:60:6e:21:a2:a1:ea:b9:fc:20:f8:ec:40:bd:77:
                    31:6d:a1:6d:33:d4:1b:87:46:8a:85:87:a0:b7:4d:
                    7e:4a:f1:23:0e:51:d0:18:6a:c3:dd:12:3f:f6:b1:
                    8a:17:04:0e:91:1d:70:74:6c:5b:25:95:22:0e:6d:
                    24:f5:31:ab:8e:86:17:b3:f6:af:c1:9c:f9:f4:66:
                    2f:c4:ce:87:46:4e:a8:cf:44:07:12:01:4a:28:29:
                    19:62:92:cc:9f:03:af:f5:12:90:33:74:47:07:a7:
                    3d:d9:80:2e:3f:81:66:50:b3:cd:62:55:28:dd:ec:
                    84:b4:a4:48:b6:df:33:7b:78:c3:78:c9:18:20:a6:
                    f3:df:78:e1:9e:55:ff:1b:da:47:0f:6b:c2:8b:1b:
                    71:8f:ba:2b:56:e5:ee:57:1d:c8:2e:ff:a3:aa:20:
                    4c:ad:70:90:15:fe:dc:ca:ef:99:f3:e0:40:5e:7c:
                    f2:15:97:59:29:2e:27:89:1e:00:11:a3:be:29:73:
                    1b:64:09:8b:db:42:f0:89:4d:f4:a4:e5:30:9c:66:
                    78:5c:26:7a:d8:a8:50:ae:a7:d2:65:54:e3:ed:c8:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6D:C5:6B:89:D5:EA:1E:F4:52:1C:7B:89:37:36:D3:E7:19:60:11
            X509v3 Authority Key Identifier:
                keyid:69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:74:5c:ed:84:97:fe:8d:90:d1:74:38:76:6b:c7:bc:e0:33:
         b7:f5:8a:56:36:25:b9:8a:e3:01:29:13:d7:1a:45:2f:93:10:
         61:6e:b7:19:3a:93:bd:cf:53:9b:5a:48:09:9a:86:3e:6f:cd:
         ed:78:47:c9:72:b4:80:09:29:dd:df:9d:ff:5d:f8:e5:dd:02:
         8a:4c:e2:6b:21:27:f4:3a:63:aa:03:93:30:60:fe:01:39:53:
         a8:fc:6d:f0:71:2e:a5:ab:c5:0e:be:fe:c1:aa:42:5b:a5:0c:
         06:4b:9b:03:e3:49:56:b1:52:91:54:0b:bb:4d:30:d4:1e:c0:
         06:93:65:94:82:a8:44:20:08:11:3b:8f:8a:46:b7:76:34:b9:
         47:92:87:8a:24:32:cd:7f:9c:1b:47:86:c8:d6:5c:29:29:f5:
         e2:3c:94:bf:54:28:ba:c5:53:cc:be:6c:57:17:12:d5:14:fe:
         f5:aa:94:85:9d:49:2d:75:8f:e2:25:31:f4:28:a2:d0:df:9f:
         d6:f2:ec:34:a3:c2:7c:51:fb:53:3d:d0:d4:de:b8:92:1d:9e:
         3f:c0:f8:53:fd:4d:b7:bb:5c:65:58:75:71:79:6c:67:53:6e:
         1c:5d:2c:56:12:0a:11:94:cc:07:57:26:f6:3f:93:63:a6:e1:
         e2:b0:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:27:55 2025 by rpki-client