Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          Fdm8eitGR6vvWbXAHz2qRdGiywUidq+zYX6yyShouDA=
Subject key identifier:   5A:20:1D:58:CB:0E:40:87:18:36:CC:8B:05:5F:F8:96:87:9D:1E:23
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       780B382C497B9F1DD27248A6B13D5A9EEC4B14F8
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:47:41 +0000
ROA not before:           Mon 23 Jan 2023 21:42:41 +0000
ROA not after:            Mon 22 Jan 2024 21:47:41 +0000
asID:                     271724
IP address blocks:        187.110.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0b:38:2c:49:7b:9f:1d:d2:72:48:a6:b1:3d:5a:9e:ec:4b:14:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:42:41 2023 GMT
            Not After : Jan 22 21:47:41 2024 GMT
        Subject: CN=5A201D58CB0E40871836CC8B055FF896879D1E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:bc:49:c9:d3:83:7a:70:6f:13:e1:19:1a:
                    d3:95:b8:eb:8a:63:33:f1:42:01:69:e2:a1:fe:dc:
                    09:a3:0d:29:99:06:89:1d:c6:c8:ee:57:2f:8d:ff:
                    5b:0e:5f:f0:ae:fd:a2:cc:ab:5f:c8:81:20:ae:65:
                    e8:b8:41:8e:b9:2b:7b:53:50:33:8b:29:2c:6e:ed:
                    a3:59:2c:6a:5e:0a:73:b1:7e:ee:8c:5d:1d:c4:bc:
                    16:10:d6:c5:27:37:4b:ab:3d:5c:48:37:0e:7c:8d:
                    56:11:cf:33:e4:ba:99:2e:b8:c8:a9:ea:b3:49:2e:
                    bb:e1:90:2e:d8:d2:7d:d6:98:55:17:ea:1e:c0:5f:
                    2e:1f:48:4b:60:b1:3f:e5:e6:1e:02:89:44:e5:41:
                    93:2b:0f:a8:52:51:47:c7:33:7b:4e:f0:5f:3f:7e:
                    4d:6f:34:16:45:f9:03:14:07:f3:25:b8:40:24:d9:
                    2c:29:c7:49:c5:dc:b9:aa:76:70:01:23:7e:5a:50:
                    27:af:a0:ae:2b:e7:d9:c3:bb:82:dc:2e:4b:b0:49:
                    9d:7b:fb:96:27:50:44:87:b6:41:97:6f:4f:dc:bd:
                    a4:f2:e0:11:ec:f8:92:6f:38:1a:d4:47:93:d1:e3:
                    00:ef:cc:42:42:6f:43:c0:23:eb:8d:67:bf:39:5b:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:1D:58:CB:0E:40:87:18:36:CC:8B:05:5F:F8:96:87:9D:1E:23
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:78:1d:62:12:e2:32:e5:da:e9:7a:b2:67:e9:11:a3:10:0d:
         93:cf:b6:88:ff:4d:4b:03:c1:c5:51:7f:b8:1e:41:bf:44:ad:
         f5:42:ec:4c:65:23:5d:36:78:51:13:ee:62:f0:17:d2:3d:c0:
         46:c0:89:84:f9:6f:17:97:07:88:40:b2:a5:d1:56:56:17:c5:
         b7:e9:7f:b5:3c:ed:17:5b:a0:2d:4d:6f:bd:e4:48:b0:6b:19:
         6a:1c:17:27:8e:0e:8b:c3:dd:5a:23:27:f9:1b:68:88:64:d1:
         56:a7:35:8b:b6:a2:2b:fb:cc:be:bb:56:aa:03:00:99:5c:99:
         94:59:ed:0a:85:a4:e1:4c:a3:97:7a:04:4f:08:6a:51:24:e1:
         cb:0f:b1:79:9a:ac:f1:f1:d4:b5:af:1e:34:2d:05:d8:ca:c6:
         6a:8a:f4:a7:be:f0:9f:37:69:f0:1b:be:c7:78:d8:53:11:38:
         5f:38:7c:06:8b:13:f6:d8:65:e8:39:27:7f:9a:35:f7:cc:5f:
         b3:d9:3f:24:72:d1:1e:4d:26:44:cc:8c:5f:2d:ca:b2:3e:b4:
         2c:10:be:0b:97:36:75:7d:4b:f6:98:12:e7:4d:4c:a9:39:03:
         e1:ed:56:b0:df:cc:be:ae:73:41:6c:97:2c:e6:df:8c:3e:e1:
         e1:b3:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:30 2025 by rpki-client