Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3131302e302f32342d3234203d3e203533313036.roa
File:                     3138372e3130382e3131302e302f32342d3234203d3e203533313036.roa (raw, json)
Hash identifier:          YfRIa5O0Gb15ZOMFaMsXkHPqHAvVS71LV5z+0bx7Ngs=
Subject key identifier:   C0:F6:A6:31:EC:4F:7D:FA:5F:26:88:AA:92:2D:88:A0:12:E6:92:29
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       5510F140873CEBF36E7596C9B8C3B7E4EE17C3F3
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3131302e302f32342d3234203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:09 +0000
ROA not before:           Wed 05 Jan 2022 15:48:09 +0000
ROA not after:            Wed 04 Jan 2023 15:53:09 +0000
asID:                     53106
IP address blocks:        187.108.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:10:f1:40:87:3c:eb:f3:6e:75:96:c9:b8:c3:b7:e4:ee:17:c3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:09 2022 GMT
            Not After : Jan  4 15:53:09 2023 GMT
        Subject: CN=C0F6A631EC4F7DFA5F2688AA922D88A012E69229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:d7:65:ab:95:76:e1:dc:32:bc:da:b6:7e:
                    f5:d1:d6:c0:03:a6:7d:45:20:3a:f0:d3:65:3b:08:
                    80:35:b7:66:21:b9:19:5c:49:c1:cf:52:14:33:70:
                    64:25:82:c4:1e:14:95:50:76:0b:53:71:2d:a2:1f:
                    d1:ad:b0:1d:f4:44:ab:50:14:f9:e8:e2:a5:42:4a:
                    a4:82:7a:e6:d3:ec:b8:e2:11:91:4e:87:03:b9:6c:
                    ef:3a:c7:5f:d9:61:e7:1b:08:90:42:2d:77:e8:f8:
                    7f:05:7e:3b:7c:af:dd:4b:95:b3:a9:fe:74:c5:62:
                    76:5f:da:1f:ab:46:be:31:24:c6:ed:c4:77:f7:05:
                    73:f3:db:58:f9:7c:8b:d8:ee:17:8b:e1:33:15:b8:
                    b3:96:a7:02:29:28:55:69:1e:21:52:91:69:e2:d5:
                    04:3e:f1:5d:34:97:b6:7b:92:d1:dd:73:1e:ce:5e:
                    75:7f:7a:28:c7:7c:4b:e1:e2:b6:d3:31:d2:b7:63:
                    69:93:88:25:06:17:d3:83:d5:aa:2c:27:3f:26:63:
                    e3:5c:e7:3b:00:70:b3:5b:2f:15:47:dd:0f:73:b2:
                    e7:47:92:b5:fe:a8:72:f5:90:ac:09:b0:64:c2:c0:
                    e4:33:f5:9f:08:04:93:d4:a9:8c:bc:57:be:01:af:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F6:A6:31:EC:4F:7D:FA:5F:26:88:AA:92:2D:88:A0:12:E6:92:29
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3131302e302f32342d3234203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:9c:2a:f1:82:93:81:c5:37:ae:22:dc:93:87:ef:f6:b4:
         4a:06:f2:f5:6d:b0:2c:8c:8e:5f:39:78:e6:cd:0e:b4:95:b1:
         b2:0b:69:d7:9f:f7:b2:7c:9c:01:19:11:63:79:80:ba:b1:01:
         c0:88:21:98:ea:a4:2b:65:45:58:13:75:1b:cf:f2:e2:21:3e:
         da:cc:e6:9b:fe:02:bb:98:72:74:74:35:eb:fa:12:08:24:a8:
         56:1f:83:14:b0:fe:e7:51:8b:6d:5f:28:1b:df:e1:3b:8f:c8:
         07:c0:d9:bc:cd:2d:7f:60:d1:a4:d8:19:06:3d:a4:7e:ed:12:
         18:a7:14:b1:d7:99:8d:8f:36:bf:d0:c3:46:79:3d:a3:cd:c4:
         d6:00:0b:d5:72:f6:1d:b6:ff:29:5d:85:25:63:f0:52:58:7d:
         4a:d6:cb:83:5d:71:8e:ca:9d:4f:73:75:12:d3:69:89:08:b5:
         12:ce:ff:36:dc:94:67:93:2d:83:f6:79:c2:53:c7:66:54:d2:
         4a:41:eb:6d:66:40:bb:e9:dc:bc:41:2f:a6:55:0e:e1:30:23:
         3d:dc:e7:f9:fe:bc:59:7b:54:7e:a0:9d:a7:b9:69:92:55:5d:
         e5:db:44:a9:d8:69:8a:25:11:cb:9b:a0:b0:c4:5d:46:32:97:
         eb:8a:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:52 2025 by rpki-client