Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138372e34392e31362e302f32302d3230203d3e203238313339.roa
File:                     3138372e34392e31362e302f32302d3230203d3e203238313339.roa (raw, json)
Hash identifier:          MwdejQH+JJswP99PrS9qBaS9A0COvZOsnYsONBqZO+Q=
Subject key identifier:   69:98:5C:DB:B1:01:F8:1A:A4:92:E7:A0:23:5C:42:4B:54:86:3B:AD
Certificate issuer:       /CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
Certificate serial:       293A109C1576BA50F68D75FC5DA8678D2044E1EA
Authority key identifier: 7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138372e34392e31362e302f32302d3230203d3e203238313339.roa
Signing time:             Thu 04 Apr 2024 06:37:30 +0000
ROA not before:           Thu 04 Apr 2024 06:32:30 +0000
ROA not after:            Thu 03 Apr 2025 06:37:30 +0000
asID:                     28139
IP address blocks:        187.49.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3a:10:9c:15:76:ba:50:f6:8d:75:fc:5d:a8:67:8d:20:44:e1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
        Validity
            Not Before: Apr  4 06:32:30 2024 GMT
            Not After : Apr  3 06:37:30 2025 GMT
        Subject: CN=69985CDBB101F81AA492E7A0235C424B54863BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:27:41:78:e0:ab:b2:52:7f:89:d9:17:14:
                    1a:7d:40:38:03:fe:df:0f:87:83:d7:98:06:4a:02:
                    66:93:95:57:e9:28:c1:d7:ea:80:0a:41:59:01:a2:
                    6f:de:63:a7:88:f6:ab:b7:ee:32:c3:45:6e:74:43:
                    01:fc:b5:31:af:4e:14:59:09:47:20:38:e2:98:d8:
                    19:2d:40:59:43:38:23:f7:a9:f6:4c:cc:37:4d:ce:
                    5a:29:95:cc:33:5e:db:6d:5d:b4:eb:da:35:c1:08:
                    4d:00:1c:da:d7:02:5c:0b:16:36:ba:71:1b:96:10:
                    2c:d2:a4:84:91:6d:4f:38:59:1d:26:ad:f2:eb:7e:
                    10:b9:bd:9f:50:f7:af:93:0d:54:d0:45:08:59:58:
                    a8:54:47:f8:52:f3:03:1e:41:e4:fa:af:f4:12:1e:
                    c1:50:1c:98:ea:37:1c:ed:f6:b2:5a:4f:40:42:19:
                    0c:08:cd:95:46:c3:6f:21:aa:6b:cf:3a:aa:89:54:
                    2c:81:15:2a:66:a4:ff:7a:1c:8c:7b:b4:c7:dc:bb:
                    1d:f4:d3:c2:11:69:57:32:e3:c3:3c:7d:59:8a:51:
                    5f:79:f7:c7:84:75:4f:ad:68:8c:b1:e5:6a:23:41:
                    b3:88:d8:8e:4c:c9:74:95:86:10:62:ef:a9:e7:cc:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:5C:DB:B1:01:F8:1A:A4:92:E7:A0:23:5C:42:4B:54:86:3B:AD
            X509v3 Authority Key Identifier:
                keyid:7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138372e34392e31362e302f32302d3230203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:d9:53:b4:aa:7a:b4:fd:96:86:7f:75:9f:77:03:a0:d7:
         00:1f:1c:87:93:11:de:be:97:e3:60:13:69:89:82:c5:11:86:
         5a:f2:fe:95:7f:4d:bc:d7:d0:6c:23:35:3b:dc:04:ee:ee:1a:
         9d:04:75:e4:1d:bb:1f:30:5b:f2:5d:a0:3c:2e:f4:b1:32:8d:
         9c:60:1d:10:ec:8f:95:74:4d:d9:6f:ef:41:16:25:73:dc:50:
         5d:08:81:b0:fd:07:73:ff:e2:20:d5:35:8d:3f:07:c2:0b:90:
         a8:e3:dc:ec:e6:e4:d6:e4:45:c8:71:d3:b8:92:2e:d2:5d:5a:
         17:9f:5f:af:fc:3d:01:f4:f1:1f:f1:b1:04:b9:55:73:7e:9c:
         e8:76:95:16:2f:d6:ca:1d:03:2a:d7:d8:19:ae:69:36:34:d2:
         d0:eb:50:20:31:6f:a7:54:5c:78:da:7e:b8:99:16:d0:b5:e0:
         b6:7a:be:2b:d7:3d:87:8f:c0:85:84:f5:d0:d9:46:af:72:49:
         5c:2e:d9:71:bf:53:d7:32:af:f2:3f:94:74:34:a9:b6:d4:96:
         67:e1:25:97:88:bd:ee:58:7f:91:5a:9a:02:4b:3f:ef:19:97:
         a4:37:9e:0f:46:67:2f:34:fa:61:88:d9:a8:f7:0d:ef:33:53:
         d1:f0:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:06 2025 by rpki-client