Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
File:                     3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          79Q5ADXFnxfRDbawfZ5GHH3au4WPLEdJPruCc2wvERA=
Subject key identifier:   A0:42:76:47:85:8A:F3:7D:05:E1:DE:D1:D5:53:B3:6A:FA:3D:C7:EE
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       4108792ACECD06991506456A2CE2D0A57E94FBBA
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:44 +0000
ROA not before:           Tue 23 Jul 2024 11:33:44 +0000
ROA not after:            Tue 22 Jul 2025 11:38:44 +0000
asID:                     28669
IP address blocks:        187.111.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:08:79:2a:ce:cd:06:99:15:06:45:6a:2c:e2:d0:a5:7e:94:fb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:44 2024 GMT
            Not After : Jul 22 11:38:44 2025 GMT
        Subject: CN=A0427647858AF37D05E1DED1D553B36AFA3DC7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:a3:19:d6:96:23:de:8f:8c:5b:68:6f:f9:
                    26:8f:75:c8:e5:b3:03:29:65:f3:a8:de:1d:3f:48:
                    5b:55:04:e3:8b:a6:16:92:13:c0:26:a0:78:46:b3:
                    72:a8:f6:66:fd:91:2c:b0:4a:57:97:8d:b3:91:7d:
                    34:4f:3b:ba:b5:ff:a6:71:60:68:2a:82:aa:59:1f:
                    40:e9:45:ab:af:44:0b:4c:40:8d:09:db:9b:f5:90:
                    29:ec:6f:2f:c6:a8:c6:7d:54:d2:d9:dc:2a:52:5c:
                    a7:69:87:7a:81:bd:16:24:5c:dc:ae:18:12:d1:49:
                    a7:e7:09:ef:e0:36:22:80:21:08:ae:19:6e:30:15:
                    d0:9b:78:cf:96:17:a6:59:95:9a:6f:10:c7:14:2c:
                    97:be:79:7f:51:cf:64:7f:4a:02:3e:24:3e:fa:23:
                    94:9d:72:3e:3b:3a:10:83:45:a3:f9:97:83:4f:8c:
                    79:51:b0:b1:27:7f:d0:fa:8c:de:71:49:9d:88:83:
                    9f:c3:d3:e6:5b:30:fa:f3:12:b9:16:a4:62:3e:b4:
                    e3:75:70:f0:84:5d:42:1d:67:46:2e:54:19:73:18:
                    69:db:99:41:8a:e5:09:30:c9:2a:19:7d:67:8f:e9:
                    1e:b2:2b:01:f6:8b:e0:4d:61:57:66:2b:7d:7a:ab:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:42:76:47:85:8A:F3:7D:05:E1:DE:D1:D5:53:B3:6A:FA:3D:C7:EE
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:c8:ea:22:4f:2e:5e:02:c4:64:76:2b:85:25:66:35:b3:98:
         33:96:e4:79:3d:06:4e:11:9f:ed:ec:75:78:b5:bb:b9:70:42:
         56:0a:db:64:04:ff:a5:f1:b7:3c:9e:45:7f:18:2f:fb:0a:cb:
         cc:d5:27:c6:ff:af:a3:4c:41:96:a5:76:84:a0:6e:11:68:e9:
         3a:d6:f3:3e:8e:5d:0c:a6:51:1c:4a:67:09:b6:34:c8:57:9f:
         8a:5c:e9:df:de:65:ee:75:ae:ae:89:03:ad:47:ce:3f:7e:4d:
         43:9a:23:9a:8e:c9:f2:51:ca:45:7e:93:b8:a5:f4:42:07:9c:
         53:0a:08:ea:c9:ce:bb:40:8a:b4:39:6e:1b:c8:78:71:52:4d:
         41:a3:0e:14:de:1f:fd:90:de:33:e6:93:2d:f9:12:da:06:c0:
         67:3a:48:15:b1:be:02:ed:fc:c1:0b:90:39:4a:2e:b0:ed:49:
         7e:a6:af:26:99:35:89:dd:12:91:ae:8e:5e:d3:01:a9:4e:08:
         bb:0e:ef:0d:90:24:30:42:88:f3:9e:7b:73:bb:45:32:78:44:
         90:a1:7b:f4:b1:42:48:2d:21:86:4b:f0:c2:94:b3:ea:6f:a7:
         4b:10:de:16:3b:28:f5:45:68:58:77:4a:cd:a3:61:67:f8:e0:
         56:d7:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:30:40 2025 by rpki-client