Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa
File:                     3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          4sFFKic/G9aAMH5oHh69wtP/uVDi22PhCkpqNB9yrBo=
Subject key identifier:   E2:6D:13:B7:81:A7:67:26:9B:0B:A4:6D:0E:48:99:2C:F8:14:5C:CE
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       79F61C9585442CC702056CE0EF5CBB80EA360A8C
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:34:28 +0000
ROA not before:           Wed 10 Jan 2024 17:29:28 +0000
ROA not after:            Wed 08 Jan 2025 17:34:28 +0000
asID:                     265303
IP address blocks:        187.120.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f6:1c:95:85:44:2c:c7:02:05:6c:e0:ef:5c:bb:80:ea:36:0a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:29:28 2024 GMT
            Not After : Jan  8 17:34:28 2025 GMT
        Subject: CN=E26D13B781A767269B0BA46D0E48992CF8145CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:92:d2:c1:ac:7f:4b:cc:8d:b1:dc:06:e4:
                    4f:b4:e9:03:2d:4a:c3:00:ac:de:c0:17:59:8f:a6:
                    6f:c8:8b:f9:e8:f5:48:3d:08:3c:4e:98:de:8b:1c:
                    ab:c5:6e:de:0e:f4:f0:0e:86:84:ce:8f:95:a8:28:
                    d9:4e:9d:eb:80:1b:81:1f:a7:4c:28:11:d4:76:20:
                    2f:70:4a:7d:16:39:a0:e3:99:86:51:ba:99:80:50:
                    d6:08:39:ab:7b:6d:6f:0f:dd:a1:c3:a1:71:ba:be:
                    13:cb:d3:d7:04:4c:0c:bf:fa:49:7f:e0:19:8f:ce:
                    94:53:5b:e8:4e:6d:3c:22:26:42:29:22:28:e2:3f:
                    3d:13:e9:ac:22:d2:ec:d2:a2:e0:d9:02:3c:27:39:
                    7e:ed:0a:99:88:02:d3:5b:db:fe:16:21:f5:3a:ec:
                    2d:eb:13:af:70:82:92:3b:82:8b:fd:a7:03:30:b5:
                    0b:20:29:4d:1e:74:da:20:38:63:f6:d8:c5:30:26:
                    5b:50:11:a0:d7:aa:9b:19:0a:0b:9e:b4:36:48:f2:
                    fa:42:54:57:66:3e:3d:34:ac:f2:0b:84:d2:24:e3:
                    48:8f:94:58:a9:95:61:dc:af:bc:bf:ef:29:43:15:
                    99:d4:93:7d:bf:f3:a1:74:a6:1c:d8:60:7c:8f:db:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6D:13:B7:81:A7:67:26:9B:0B:A4:6D:0E:48:99:2C:F8:14:5C:CE
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3138372e3132302e31322e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:e0:5a:d2:2c:ea:e1:21:7a:23:f1:d8:4c:72:0a:67:23:
         61:6d:c2:96:3b:ef:93:f9:e6:0d:5d:bf:77:87:27:66:e3:1f:
         eb:2b:45:e6:a3:60:16:1c:b9:81:19:f4:ab:8d:4b:2f:aa:61:
         fa:70:da:7e:3d:c5:dc:7e:ac:e4:f7:72:e0:a5:38:f3:75:ea:
         31:52:6c:45:a0:41:ed:0c:fc:29:1d:3e:65:23:7a:c8:1d:a1:
         04:24:ae:98:7b:53:fb:12:9d:49:4d:c4:9f:dc:ae:4c:ec:c0:
         0f:62:ad:52:21:b4:1f:67:e8:68:4b:b9:45:c0:09:0e:cc:02:
         39:82:db:53:c4:95:93:ee:3e:0f:e1:2b:64:5d:24:7d:c9:71:
         a3:37:0b:3d:05:14:f2:79:97:f7:64:2f:96:e0:7a:90:85:c5:
         ed:1f:c3:fa:b8:6d:e0:39:19:58:fc:be:4b:af:1b:fc:b4:71:
         43:62:2a:f6:fa:d5:7a:28:15:ad:cd:f9:27:ee:67:18:f9:3b:
         c0:da:f0:a5:1a:65:47:1c:ca:43:99:ea:55:e8:1f:6e:73:19:
         2a:ad:07:af:95:38:6e:cc:a4:5f:6d:ef:75:17:16:ed:7e:c2:
         48:70:cf:3d:73:6e:44:a3:77:ec:3a:4e:ff:88:5f:71:0f:66:
         fa:b7:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:16 2025 by rpki-client