Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e39372e302f32342d3234203d3e203533313036.roa
File:                     3138372e3130382e39372e302f32342d3234203d3e203533313036.roa (raw, json)
Hash identifier:          M7xF0J0D5K63Bj8yGBdzQ5yUV6bOUpA5X1oSIpDJdJI=
Subject key identifier:   93:83:7C:54:3F:1E:BA:39:9D:56:EF:B0:51:24:AA:2B:41:CD:85:B2
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       3EC57619F5D10DD040272467ED656C79B48536B6
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e39372e302f32342d3234203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:09 +0000
ROA not before:           Wed 05 Jan 2022 15:48:09 +0000
ROA not after:            Wed 04 Jan 2023 15:53:09 +0000
asID:                     53106
IP address blocks:        187.108.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c5:76:19:f5:d1:0d:d0:40:27:24:67:ed:65:6c:79:b4:85:36:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:09 2022 GMT
            Not After : Jan  4 15:53:09 2023 GMT
        Subject: CN=93837C543F1EBA399D56EFB05124AA2B41CD85B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:f1:42:4e:b2:a1:75:4b:1d:b1:11:59:3a:
                    71:12:b2:1e:21:84:0a:69:5d:48:4a:6b:22:66:64:
                    d6:46:d2:77:f4:06:41:43:36:d2:6f:71:7a:e7:ff:
                    da:c8:f2:69:60:1e:30:5d:32:66:67:71:49:e3:1e:
                    11:1f:3f:9b:6d:c0:26:c7:ce:66:6e:13:48:2c:01:
                    1f:b0:2e:5a:04:96:c7:03:7e:47:b5:92:55:fe:aa:
                    ab:bd:4c:63:63:69:26:2e:b5:81:0d:77:77:0a:4f:
                    35:c9:55:1c:83:0f:3c:ca:e8:42:4a:5f:c1:0c:af:
                    53:34:e7:75:10:95:e8:3c:aa:aa:c9:86:36:93:81:
                    06:dd:28:f7:b6:55:25:be:a8:ee:fc:4f:f6:f5:03:
                    41:58:73:a1:97:18:5c:6b:9a:1d:8e:15:7f:ee:ec:
                    2e:83:f5:56:fe:03:1d:40:d1:fb:ce:98:17:c3:df:
                    57:9d:b7:e8:b4:3f:71:95:af:ce:1b:21:1d:f7:56:
                    7f:4c:2e:ab:4f:b7:b7:13:db:5a:f9:07:f2:fd:51:
                    86:51:da:bf:8c:74:26:df:b3:2d:07:cc:7a:51:2b:
                    2f:9a:bf:6d:be:87:eb:20:64:d9:b3:3c:78:8f:a9:
                    95:e3:c7:36:8f:bf:0f:f5:25:44:a1:8f:88:88:85:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:83:7C:54:3F:1E:BA:39:9D:56:EF:B0:51:24:AA:2B:41:CD:85:B2
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e39372e302f32342d3234203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9e:e6:33:42:64:10:ba:95:86:ed:1a:3d:46:5b:94:0b:23:
         f2:b4:19:0c:27:e1:c8:b5:c0:ef:3a:e1:41:53:7c:e9:4e:04:
         8e:92:1c:6a:86:3c:c9:6a:eb:23:40:f1:0f:af:17:e3:46:b1:
         1b:69:11:66:38:83:03:c0:b2:18:26:e0:0f:8c:f2:45:57:9d:
         d6:69:13:f4:9f:00:82:62:3f:8d:ed:14:00:39:b8:7c:50:6d:
         04:bd:67:4b:a1:cc:a7:e3:c4:5d:c8:9e:51:cb:9a:de:c7:f0:
         1e:86:c2:71:74:8d:aa:00:3e:48:8d:61:18:cf:f6:c9:a6:a9:
         a3:2e:57:bc:00:65:11:53:12:d7:e6:d9:ba:66:20:75:cc:59:
         ea:7d:bf:13:5f:d8:17:cf:ed:b9:34:fd:b2:f2:77:db:dd:42:
         2a:66:4a:80:7b:c8:7b:53:78:fe:84:e2:30:f5:87:d6:74:a7:
         24:5b:51:da:b9:c5:ae:cd:e9:63:77:6d:70:09:1b:12:7b:1f:
         a6:75:f8:f1:eb:ad:2a:71:4c:7f:a0:42:20:5c:31:d0:7e:d3:
         b4:3d:e9:41:e0:ec:c5:74:e7:9b:a3:c9:89:46:c0:c2:b0:2d:
         11:ab:ef:e6:f0:12:9e:c8:18:4e:f4:5d:fa:60:de:c4:9c:db:
         15:bf:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:01 2025 by rpki-client