Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3234203d3e203238323338.roa
File:                     3138362e3231362e3232342e302f32302d3234203d3e203238323338.roa (raw, json)
Hash identifier:          1faXF3HEfYSTiGPUfi9ovDoKs45XYzgDuRDlSlLLA3E=
Subject key identifier:   E7:FD:82:F2:87:46:FB:BD:D1:02:63:63:1E:F5:5E:6D:4F:11:9D:02
Certificate issuer:       /CN=7E9AB55D083C843FBB860BD053794BD0E819E359
Certificate serial:       44C52BDB78AFDDEA727153FBAED10A8A23629A9B
Authority key identifier: 7E:9A:B5:5D:08:3C:84:3F:BB:86:0B:D0:53:79:4B:D0:E8:19:E3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E9AB55D083C843FBB860BD053794BD0E819E359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3234203d3e203238323338.roa
Signing time:             Tue 17 Dec 2024 17:25:02 +0000
ROA not before:           Tue 17 Dec 2024 17:20:02 +0000
ROA not after:            Tue 16 Dec 2025 17:25:02 +0000
asID:                     28238
IP address blocks:        186.216.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c5:2b:db:78:af:dd:ea:72:71:53:fb:ae:d1:0a:8a:23:62:9a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9AB55D083C843FBB860BD053794BD0E819E359
        Validity
            Not Before: Dec 17 17:20:02 2024 GMT
            Not After : Dec 16 17:25:02 2025 GMT
        Subject: CN=E7FD82F28746FBBDD10263631EF55E6D4F119D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:c2:90:be:b8:fe:62:cf:aa:66:bf:b8:9c:
                    ef:a8:5a:e3:ef:fd:67:27:37:71:eb:fb:52:70:b5:
                    9d:3b:79:52:99:70:ce:ae:40:49:68:e6:09:e4:82:
                    0b:79:11:eb:cd:13:2e:68:a1:37:c5:d9:d5:42:1b:
                    d0:ff:7f:12:38:6d:ce:48:4f:56:77:5e:ee:3e:9a:
                    6e:3d:63:14:35:ae:9e:f3:e1:c5:35:3f:2a:79:7f:
                    6d:39:1a:eb:74:7e:e1:2f:09:ad:9c:09:87:6f:98:
                    04:83:88:db:dc:13:28:97:e7:b5:db:7b:45:a5:65:
                    17:18:1e:cd:49:cf:af:76:b5:99:66:b7:13:f8:9e:
                    fc:6e:1c:7e:7a:f9:01:9e:0a:72:f6:d1:ab:14:50:
                    b3:30:c3:2a:43:ff:d3:01:6f:62:f1:82:33:24:93:
                    9a:f5:55:e5:8d:48:96:f1:cb:89:da:0f:31:8a:b4:
                    e8:76:61:80:44:f7:57:56:78:10:74:52:ff:b9:00:
                    d1:1e:3b:74:fe:69:85:69:55:24:5c:4d:30:09:0d:
                    7a:6a:f3:55:7a:95:28:c4:84:a0:b9:78:ad:6f:49:
                    96:17:15:b1:ad:8f:3f:db:65:dc:5d:4e:3a:1b:a8:
                    05:b2:e0:f4:10:76:ab:cd:6e:7a:87:99:10:07:ec:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:82:F2:87:46:FB:BD:D1:02:63:63:1E:F5:5E:6D:4F:11:9D:02
            X509v3 Authority Key Identifier:
                keyid:7E:9A:B5:5D:08:3C:84:3F:BB:86:0B:D0:53:79:4B:D0:E8:19:E3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/7E9AB55D083C843FBB860BD053794BD0E819E359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E9AB55D083C843FBB860BD053794BD0E819E359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:f0:5a:c3:de:f9:5f:2b:f1:5f:6e:87:af:d3:fa:c3:e1:
         81:81:d8:6b:d3:a0:b5:b5:25:d4:2f:8e:d2:b8:82:db:2c:85:
         64:51:b5:0e:15:13:96:1f:81:14:05:e6:d4:44:07:74:6d:0b:
         62:8f:9c:a4:bd:84:23:8a:87:7b:21:ae:a3:5c:79:a3:41:28:
         25:96:9e:c5:2f:39:76:0b:9f:09:19:a2:e6:4a:20:78:45:4c:
         57:9f:3b:7e:f6:a8:93:e7:6e:78:5b:f8:6b:fc:8a:45:71:20:
         08:1f:ba:21:e8:3c:43:bc:72:8f:33:1c:fb:d1:88:d5:9e:51:
         d1:21:f8:22:d4:29:55:21:00:48:ad:2c:b6:f6:e1:d7:e4:03:
         45:25:75:65:bf:40:85:5e:40:58:3f:af:5e:af:dd:77:9c:53:
         c7:7a:0b:cd:4f:75:d4:a4:09:65:f8:1a:63:79:44:93:14:fd:
         b7:57:dc:de:07:24:4e:66:bc:03:a0:5f:09:4a:0b:28:8c:99:
         07:20:91:ab:1c:ee:1c:60:ed:37:22:98:15:b4:ce:f7:c0:a6:
         14:72:af:ba:9e:72:31:06:00:dc:de:3d:8a:91:29:2b:fe:50:
         06:2c:99:67:37:72:79:d0:f6:8a:da:4b:60:dd:6b:1c:a5:98:
         f9:b3:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:15:23 2025 by rpki-client