Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131342e302f32332d3233203d3e20323732373533.roa
File:                     3138372e3130392e3131342e302f32332d3233203d3e20323732373533.roa (raw, json)
Hash identifier:          +67upsBtVZ7e3dTGt6s2/uOrxiBZUaMVODR72/XQfFA=
Subject key identifier:   AF:C5:57:C4:53:B7:0E:C8:01:62:8E:3A:22:23:D3:F5:E9:85:F7:D9
Certificate issuer:       /CN=74B2984FDE38265B0E0869FB87A5810D0C881EB5
Certificate serial:       176EFE5CEA50B7DD50129E37F195953C2A0D3152
Authority key identifier: 74:B2:98:4F:DE:38:26:5B:0E:08:69:FB:87:A5:81:0D:0C:88:1E:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B2984FDE38265B0E0869FB87A5810D0C881EB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131342e302f32332d3233203d3e20323732373533.roa
Signing time:             Fri 29 Nov 2024 12:36:19 +0000
ROA not before:           Fri 29 Nov 2024 12:31:19 +0000
ROA not after:            Fri 28 Nov 2025 12:36:19 +0000
asID:                     272753
IP address blocks:        187.109.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6e:fe:5c:ea:50:b7:dd:50:12:9e:37:f1:95:95:3c:2a:0d:31:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74B2984FDE38265B0E0869FB87A5810D0C881EB5
        Validity
            Not Before: Nov 29 12:31:19 2024 GMT
            Not After : Nov 28 12:36:19 2025 GMT
        Subject: CN=AFC557C453B70EC801628E3A2223D3F5E985F7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:11:a8:ff:5a:32:70:7f:bd:0c:00:b6:ea:
                    bb:92:6a:b9:48:ab:6c:08:3e:ac:64:6b:c7:e0:84:
                    ef:48:27:35:6d:37:9b:32:3a:ce:4f:bf:a2:e3:36:
                    a3:72:a7:46:32:2c:9f:46:90:3a:3d:d6:32:91:cf:
                    bc:0d:10:62:97:23:28:6b:73:bf:ec:9d:d5:8d:d7:
                    f8:ce:df:a2:fb:af:ff:51:da:08:c5:2d:60:d8:dd:
                    92:09:71:3e:46:e0:5d:b9:3e:2a:8f:03:9d:69:d5:
                    2e:51:f1:5e:f3:b0:d7:5d:e7:1b:46:22:b2:76:e2:
                    21:2e:b0:76:8d:8d:84:0c:d7:72:81:3f:47:80:6f:
                    6a:ca:a9:d3:c6:8d:57:80:d5:72:cf:79:1b:0a:e3:
                    86:11:cb:4f:db:d2:f4:37:c6:5b:42:b4:0e:65:23:
                    4f:0f:7d:ae:8c:86:49:78:e8:4f:3a:89:47:82:89:
                    3b:f3:21:9b:ae:cb:6c:c7:ce:e8:77:88:80:5f:44:
                    d8:22:93:3f:a2:04:73:db:0e:95:3f:e1:8e:e9:a2:
                    fd:5f:37:94:60:c0:a7:04:94:b2:86:c6:68:f1:d2:
                    d6:5f:b4:f5:a1:21:77:88:4e:92:8d:7b:b3:a1:ed:
                    4c:ad:c8:1b:44:b6:e8:56:12:a0:7f:99:56:e9:7d:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:57:C4:53:B7:0E:C8:01:62:8E:3A:22:23:D3:F5:E9:85:F7:D9
            X509v3 Authority Key Identifier:
                keyid:74:B2:98:4F:DE:38:26:5B:0E:08:69:FB:87:A5:81:0D:0C:88:1E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/74B2984FDE38265B0E0869FB87A5810D0C881EB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74B2984FDE38265B0E0869FB87A5810D0C881EB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/3138372e3130392e3131342e302f32332d3233203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:d5:28:83:16:dc:1d:2b:63:a1:f4:2c:ba:9b:59:b6:af:
         a8:c8:18:3a:4c:72:ec:20:89:b9:93:09:66:5d:e4:fb:de:54:
         eb:61:2d:68:8e:89:85:60:68:6f:9e:23:7e:60:4a:24:73:db:
         aa:6e:0d:fd:7e:8a:d0:85:4e:e6:84:30:a7:85:53:f2:c4:c8:
         fe:e1:d9:ae:3e:db:d6:06:eb:7f:25:7f:ab:d4:e6:fc:44:bf:
         bf:1a:6c:9e:96:d4:73:c0:d7:98:e2:07:da:41:70:76:ad:52:
         9f:35:bb:02:70:0d:2a:d7:b7:55:4b:84:58:d5:ed:01:b2:83:
         97:e7:7e:90:4c:5b:95:78:c8:72:df:66:f8:d2:27:91:32:83:
         34:50:b9:25:21:78:22:8f:7f:12:b8:82:e9:6b:c0:09:3d:dc:
         d1:b8:53:e1:4a:a2:24:97:b5:f4:cd:c8:ad:0d:99:7e:2f:a9:
         bc:c9:88:42:d3:c4:f9:7c:20:d0:3f:79:32:94:4b:63:5b:65:
         7d:dc:21:f3:cf:22:f4:69:66:f1:33:c2:44:de:e2:01:e7:11:
         9d:30:79:30:3d:fc:0d:f0:48:8f:36:92:68:f2:f2:29:95:05:
         3d:54:2b:b3:ef:18:74:ab:57:15:fe:61:5b:95:15:b6:00:ea:
         44:1d:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:58:21 2025 by rpki-client