Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3133302e302f32342d3332203d3e203232333831.roa
File:                     3230312e38372e3133302e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          kLsk/leRT9nC4t0o5y5LbT6OpOBBVCqvo10PaSMudZ8=
Subject key identifier:   34:8F:D3:71:D5:18:4C:8F:D0:5F:08:37:89:AE:C7:DB:75:64:B8:1E
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       15BEBBBCCE88713BCDA04AD00B8E9D0251F7E25E
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3133302e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:06:50 +0000
ROA not before:           Fri 07 Mar 2025 19:01:50 +0000
ROA not after:            Fri 06 Mar 2026 19:06:50 +0000
asID:                     22381
IP address blocks:        201.87.130.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:bb:bc:ce:88:71:3b:cd:a0:4a:d0:0b:8e:9d:02:51:f7:e2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:01:50 2025 GMT
            Not After : Mar  6 19:06:50 2026 GMT
        Subject: CN=348FD371D5184C8FD05F083789AEC7DB7564B81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:41:09:4f:46:83:1f:f0:e9:5a:4c:f8:7d:
                    19:00:e8:03:6a:46:ae:d9:9d:32:1d:b9:2b:d6:88:
                    67:88:94:8f:73:58:ce:34:c0:72:4a:23:c3:c7:3b:
                    f8:2e:b0:e2:26:6b:e5:c5:c4:7a:c8:e6:46:32:92:
                    b3:79:7a:c6:87:40:4d:ea:bb:b0:f4:39:44:58:5d:
                    fc:ad:38:99:cc:8a:0a:81:90:d4:1d:99:e2:d4:d8:
                    29:97:03:41:ed:57:12:f2:ab:f4:2b:17:1a:75:17:
                    23:e5:d7:b6:d9:35:68:64:0e:cb:2b:78:a5:bc:3f:
                    76:1e:4f:6d:ea:be:77:dc:d2:af:99:cf:b8:a2:c4:
                    c2:3a:2a:ba:35:1f:62:6c:8c:df:08:2a:22:b8:a5:
                    4d:f4:a8:60:e5:72:40:f3:97:67:20:f3:20:02:7d:
                    3a:76:e5:65:f2:a4:cd:de:70:7e:93:cf:76:43:1c:
                    9a:ad:48:d4:c3:f0:de:59:9e:e6:e0:15:49:fc:5e:
                    d0:96:26:16:33:ad:55:93:8b:41:79:8e:c3:0d:c6:
                    d6:95:1f:ce:1f:ad:b0:ba:39:cb:df:97:77:7a:d8:
                    db:86:73:74:40:7e:a3:2c:be:1a:16:d8:90:a1:86:
                    63:20:cd:8e:a1:16:a1:6f:48:a5:0f:7c:7b:4e:6a:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:D3:71:D5:18:4C:8F:D0:5F:08:37:89:AE:C7:DB:75:64:B8:1E
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230312e38372e3133302e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:dc:ed:2b:8b:a6:80:b7:73:b2:bb:ec:60:78:bb:ef:60:
         2f:ee:d7:dc:3d:51:71:f0:b9:ed:21:e0:42:df:1d:f5:87:c6:
         59:8b:bf:dc:c5:05:e6:f8:ca:a4:3e:68:97:7d:40:86:00:e1:
         79:47:a3:1f:43:a1:e9:8d:8f:e3:5e:0d:a9:1c:e0:8a:ee:fb:
         cc:b4:52:05:9c:7a:de:b2:07:ec:bb:1a:c6:1a:e5:b5:d4:72:
         3f:d7:a6:e7:a7:43:3f:30:ab:9c:ce:10:a4:c9:bb:f5:fc:7c:
         ae:5e:1d:39:81:81:db:2a:d9:7a:1c:3e:1c:33:89:b3:78:ad:
         42:6c:4c:37:5d:7e:21:89:a7:ff:1a:26:65:eb:1d:ff:0d:c1:
         c9:08:17:49:39:7c:8f:2c:6e:5c:47:18:87:61:1d:20:74:58:
         5d:3c:ea:00:64:98:69:61:32:76:f8:43:eb:fb:54:44:f9:8b:
         8c:f7:dd:1b:d6:d1:71:c1:8e:c6:a9:88:f5:b2:63:c4:1e:54:
         46:ae:cc:a8:97:7b:9d:f6:71:83:1a:62:3d:d8:fa:02:6f:3c:
         c3:f5:e6:48:ce:7e:03:c2:2e:b8:82:37:a4:b3:a6:98:34:71:
         89:c1:e5:98:33:72:86:f1:50:a5:e5:75:d4:69:1d:fb:3e:bd:
         b6:3a:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:28 2025 by rpki-client