Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e382e302f32322d3332203d3e203232333831.roa
File:                     3138372e3132302e382e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          bHGt5ST4tQs7AXw+A+sFo0UT/YqOcWjxnoIkPzQsrDQ=
Subject key identifier:   60:C1:4F:FE:5F:33:F5:88:5F:AA:20:74:D7:C1:70:7B:5C:DC:01:6B
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       09F5EE150D2562AD19DE6CCFDE99554B62C0D7E9
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e382e302f32322d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:08:20 +0000
ROA not before:           Fri 07 Mar 2025 19:03:20 +0000
ROA not after:            Fri 06 Mar 2026 19:08:20 +0000
asID:                     22381
IP address blocks:        187.120.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f5:ee:15:0d:25:62:ad:19:de:6c:cf:de:99:55:4b:62:c0:d7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:03:20 2025 GMT
            Not After : Mar  6 19:08:20 2026 GMT
        Subject: CN=60C14FFE5F33F5885FAA2074D7C1707B5CDC016B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:31:56:4a:41:14:95:b6:c2:e6:e7:22:5a:
                    76:4e:a6:ed:e0:de:ce:19:ad:ff:7b:6f:22:94:43:
                    43:c8:1f:7e:2b:81:77:cf:9e:42:26:35:02:cb:46:
                    ac:2c:96:dc:55:c4:68:d9:b9:ca:1b:ea:c6:ce:47:
                    e3:1a:0b:e5:67:fd:b6:fd:1c:48:61:de:a9:42:43:
                    1f:5a:fe:5f:ab:fa:36:8b:36:02:b5:bb:c4:22:a5:
                    7c:da:43:05:81:60:b1:34:44:3f:38:9c:36:22:16:
                    7f:55:8d:aa:79:6f:d3:72:f0:a9:03:c9:26:08:6a:
                    5d:6e:bc:8f:58:da:d6:cb:39:bc:11:79:33:e3:0f:
                    eb:8b:5c:b4:e4:5f:be:af:95:0c:f0:82:e3:ef:7e:
                    30:a8:8e:ec:d1:9c:1c:8f:66:f0:d8:01:21:68:50:
                    7e:22:c9:45:85:01:b7:07:c7:da:8e:a6:bb:c8:82:
                    47:23:10:5b:ea:e3:72:74:f6:b3:92:bd:65:3e:9d:
                    1d:d2:e7:92:87:5a:bd:7a:e3:b1:00:42:65:2a:da:
                    48:8a:b3:ce:e4:78:60:42:2f:18:80:73:66:e1:49:
                    39:53:ee:13:f0:66:24:8a:b6:2b:0f:79:88:75:19:
                    2d:09:04:53:1f:e1:3d:1c:83:e6:15:0b:39:65:c2:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:4F:FE:5F:33:F5:88:5F:AA:20:74:D7:C1:70:7B:5C:DC:01:6B
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e382e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:ca:fe:21:5e:16:72:b6:46:79:01:7c:4f:19:77:cb:28:
         ca:c4:8a:ce:b3:3a:91:b9:ae:ea:0b:84:a7:cb:9b:d0:5f:71:
         6d:46:73:ac:78:6d:1e:87:d3:37:ac:3c:b2:52:e7:d0:e2:6f:
         2c:55:77:3d:0a:53:b2:e2:54:b3:81:5b:91:fd:0c:ff:7d:e8:
         b5:ab:a1:8d:17:a4:0e:05:77:2b:12:e8:c1:8b:b1:b9:f3:78:
         e8:54:44:56:7b:9a:d8:b4:e9:15:1c:2b:48:cb:0c:08:de:b8:
         b8:d0:95:c8:71:e2:06:df:7d:23:74:ad:6e:93:8f:a2:14:63:
         ae:74:c0:ac:03:1b:ab:4a:e2:15:23:25:1c:49:52:ef:22:8f:
         55:23:f9:9e:c7:bf:cd:3f:2d:45:d0:16:c5:e9:ed:ff:48:cc:
         e7:8f:54:78:d8:2b:74:df:98:9d:0d:3c:14:82:ff:65:87:67:
         0a:5f:a6:c4:5e:35:21:06:7d:43:33:4c:e6:81:69:3b:3b:79:
         d4:97:a5:14:32:38:9d:18:c0:d6:16:06:20:43:ad:92:fb:f2:
         72:b1:36:10:2b:48:81:f7:e4:0e:3c:e1:b1:ed:5a:f3:24:54:
         e3:43:01:a9:2c:e6:67:ac:48:3e:39:70:3c:79:b2:c0:fc:d2:
         5e:da:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:43:38 2025 by rpki-client