Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138372e39342e3132382e302f32302d3332203d3e203238333539.roa
File:                     3138372e39342e3132382e302f32302d3332203d3e203238333539.roa (raw, json)
Hash identifier:          pGwZUYVRodoHBQrsh+J+ESXcN0Z4wV9iTLJaqMtaQQs=
Subject key identifier:   55:B2:93:57:15:55:80:92:03:8A:7D:FF:FC:AC:26:41:63:34:6C:D7
Certificate issuer:       /CN=743645EE32CC2F2FD36B3672BC1D73CF661FE0AA
Certificate serial:       3C8F920AFAFBB78A46B7A814E8E1A30FA2BBE99D
Authority key identifier: 74:36:45:EE:32:CC:2F:2F:D3:6B:36:72:BC:1D:73:CF:66:1F:E0:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138372e39342e3132382e302f32302d3332203d3e203238333539.roa
Signing time:             Thu 20 Jul 2023 19:59:22 +0000
ROA not before:           Thu 20 Jul 2023 19:54:22 +0000
ROA not after:            Thu 18 Jul 2024 19:59:22 +0000
asID:                     28359
IP address blocks:        187.94.128.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8f:92:0a:fa:fb:b7:8a:46:b7:a8:14:e8:e1:a3:0f:a2:bb:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743645EE32CC2F2FD36B3672BC1D73CF661FE0AA
        Validity
            Not Before: Jul 20 19:54:22 2023 GMT
            Not After : Jul 18 19:59:22 2024 GMT
        Subject: CN=55B2935715558092038A7DFFFCAC264163346CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:2c:12:1f:49:4a:3a:84:41:de:93:3c:cd:
                    be:9a:60:4e:16:a6:6d:1c:38:72:65:b7:01:46:6e:
                    71:6d:9f:29:e4:69:d1:f9:0b:f7:06:b9:05:80:10:
                    cc:d2:19:4a:d2:d1:a9:3b:06:32:8a:10:e5:c7:b1:
                    9a:fc:9a:bb:d8:5f:18:75:b7:a0:9f:b9:85:d0:ad:
                    30:7d:56:1b:48:1e:7b:09:cd:ef:ac:5a:fd:1e:f7:
                    48:6d:6c:d3:0e:39:9e:a9:95:c3:d5:f8:71:85:e2:
                    d8:34:a7:06:5d:4e:4f:3d:0c:34:86:f1:9c:08:74:
                    df:25:f3:ba:68:7c:09:bc:d0:6f:be:a9:80:3b:83:
                    56:34:fb:3a:0f:e5:2a:c1:1d:2b:87:83:29:19:18:
                    11:1c:e1:d8:7d:46:6a:a4:08:4e:4c:58:44:f3:b3:
                    ca:64:5d:06:cd:fb:ed:a2:1f:e8:43:62:99:51:c7:
                    e0:ac:aa:87:1d:47:ea:69:09:59:2f:b0:65:1c:5a:
                    07:80:90:0c:3d:72:5b:b8:40:bf:ac:bd:f8:49:0b:
                    9b:36:cf:d3:06:13:d7:6a:ea:8d:15:8c:55:40:2e:
                    14:e0:06:02:39:b5:c3:74:1e:b0:5f:f2:5a:79:f4:
                    b0:80:31:ff:c8:1e:51:95:cf:58:0a:19:61:87:e3:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:93:57:15:55:80:92:03:8A:7D:FF:FC:AC:26:41:63:34:6C:D7
            X509v3 Authority Key Identifier:
                keyid:74:36:45:EE:32:CC:2F:2F:D3:6B:36:72:BC:1D:73:CF:66:1F:E0:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/743645EE32CC2F2FD36B3672BC1D73CF661FE0AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/3138372e39342e3132382e302f32302d3332203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:75:5d:c6:f1:61:dc:70:3b:07:39:ab:9f:b7:20:02:57:
         62:05:8b:64:b4:35:71:6b:90:66:13:8f:04:aa:f7:e7:af:d8:
         12:62:de:d2:9c:50:8e:b1:43:60:bf:24:e1:8f:31:fc:da:ea:
         40:c0:00:55:43:b0:f4:3f:fb:39:c4:12:7f:30:20:7b:cd:a3:
         ff:10:35:7b:43:b2:94:14:79:17:1a:61:29:fa:4a:a4:54:9d:
         1e:66:d8:8d:43:4f:a3:53:60:89:af:37:f3:91:89:36:d0:f5:
         cc:6c:5b:b6:8f:8b:bb:0a:26:55:ee:22:1b:32:64:eb:59:a5:
         35:ad:f9:1a:c8:f7:9f:df:7f:14:86:62:6a:57:fd:5c:8b:cc:
         af:d1:f3:37:04:cd:12:73:a0:51:d0:08:86:a8:e0:d2:d2:99:
         2b:09:5e:43:6b:c8:b4:c0:d0:60:05:90:64:9e:1a:be:ad:68:
         1c:56:b4:99:dd:c9:22:81:a4:c0:18:32:68:22:fc:ee:09:34:
         5d:86:4f:5f:cc:2c:f5:5f:fc:14:22:8b:cc:18:02:91:56:d2:
         69:70:ff:5f:dd:e1:a1:2e:9a:1e:bf:84:96:59:ea:10:7b:1b:
         f5:c5:a8:b2:f9:3a:37:5a:e7:a5:7d:8d:cd:1e:93:8a:53:36:
         f1:c3:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:43:00 2025 by rpki-client