Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa (raw, json)
Hash identifier:          qK9c5yLKrVIfaCv+vD6ukLKxphVN/FYI/eYJBXyJJgQ=
Subject key identifier:   43:0A:45:C1:81:99:11:D0:5A:F5:99:FA:E2:AE:93:4A:71:86:5D:AE
Certificate issuer:       /CN=74B2984FDE38265B0E0869FB87A5810D0C881EB5
Certificate serial:       4359A3F118ABF1F3E6BCE7A3287336A42A6789DC
Authority key identifier: 74:B2:98:4F:DE:38:26:5B:0E:08:69:FB:87:A5:81:0D:0C:88:1E:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B2984FDE38265B0E0869FB87A5810D0C881EB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa
Signing time:             Fri 29 Nov 2024 12:36:15 +0000
ROA not before:           Fri 29 Nov 2024 12:31:15 +0000
ROA not after:            Fri 28 Nov 2025 12:36:15 +0000
asID:                     272753
IP address blocks:        187.109.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:59:a3:f1:18:ab:f1:f3:e6:bc:e7:a3:28:73:36:a4:2a:67:89:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74B2984FDE38265B0E0869FB87A5810D0C881EB5
        Validity
            Not Before: Nov 29 12:31:15 2024 GMT
            Not After : Nov 28 12:36:15 2025 GMT
        Subject: CN=430A45C1819911D05AF599FAE2AE934A71865DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:39:15:14:d0:3e:8b:64:74:3a:3e:b6:bd:
                    d7:1f:8c:de:9c:34:f8:af:2e:25:33:5e:10:6d:99:
                    e3:96:29:2e:9d:f6:79:8b:dd:26:02:50:e3:5f:de:
                    8f:51:07:b7:fc:0c:7a:dc:a3:08:66:f2:be:1d:02:
                    39:f0:85:2e:6a:19:79:9a:73:88:72:70:6c:ad:b1:
                    68:bf:57:e1:bf:11:7c:48:4d:7d:6a:90:33:97:33:
                    7b:84:5c:5c:7e:13:5c:f0:9a:e9:3e:67:c8:90:3a:
                    9f:b9:b7:11:2a:6a:a4:1d:dc:50:7a:a4:81:57:8c:
                    4d:6c:aa:16:18:c0:69:cf:89:2c:92:be:2c:6c:c4:
                    e3:bd:2d:3a:20:f2:9f:0a:1e:91:67:40:45:74:f3:
                    2b:18:55:9c:32:2d:35:20:6d:a7:8d:65:07:be:0b:
                    44:7c:a7:f6:87:e6:35:58:7c:9d:65:18:97:1c:3d:
                    54:07:ff:a5:bd:e0:91:f4:c4:bc:65:1d:83:b2:09:
                    fd:d7:ef:8a:13:08:ac:39:31:67:ae:28:68:b4:c5:
                    9f:b5:79:6a:f1:cd:ad:34:49:57:52:b5:46:ba:3e:
                    50:a8:93:52:e3:7d:5b:05:c7:66:3a:b3:51:06:ba:
                    4a:70:37:8c:e6:da:7c:bd:ec:ee:c0:f7:6f:b6:9e:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:45:C1:81:99:11:D0:5A:F5:99:FA:E2:AE:93:4A:71:86:5D:AE
            X509v3 Authority Key Identifier:
                keyid:74:B2:98:4F:DE:38:26:5B:0E:08:69:FB:87:A5:81:0D:0C:88:1E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/74B2984FDE38265B0E0869FB87A5810D0C881EB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B2984FDE38265B0E0869FB87A5810D0C881EB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:f0:50:a6:e1:10:a6:5a:79:45:e2:57:5f:53:41:69:10:
         07:e8:98:8b:4c:bf:b7:de:72:e9:cb:33:28:7e:43:d4:aa:2d:
         fd:8c:a9:3d:34:5c:36:4f:45:49:97:63:ad:0a:72:03:ee:eb:
         73:17:20:c0:03:0c:3e:b1:f8:97:5a:b8:83:f7:00:f2:3c:26:
         6d:46:61:7a:5f:0d:0d:ae:b8:7d:da:0d:0f:f5:9c:16:fd:d3:
         f6:69:53:e9:d2:e9:d5:19:23:0d:37:0e:d3:2b:98:89:84:f7:
         97:bd:bb:b2:e6:4d:ca:1b:43:92:d8:9f:f2:9f:22:54:e2:b5:
         ae:de:b4:55:e0:07:a6:3d:79:69:22:eb:1a:32:7f:7e:e6:83:
         5a:9c:1c:cb:d4:e8:34:3f:10:2e:d4:eb:96:3b:bb:80:ee:20:
         3d:62:1a:fa:40:92:75:0a:e2:70:89:1b:db:6c:ce:9d:db:25:
         9d:c7:f4:d6:c5:18:2a:79:51:64:4c:0c:76:7d:fd:12:a2:f8:
         77:0c:bc:48:17:fd:cc:ea:b1:04:96:60:af:e9:f4:b3:68:32:
         79:6c:ae:b1:f2:df:1b:16:57:72:0c:fa:ff:73:bf:a9:9a:c6:
         1d:4b:d6:95:0f:98:2d:8b:e8:58:ff:68:fd:29:a2:63:25:52:
         d7:17:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:48 2025 by rpki-client