Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa
File:                     3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa (raw, json)
Hash identifier:          NP0xatlCVAlVrtJAhfVS2KslVRTlQLyt7F/exM/7F6s=
Subject key identifier:   06:F7:3E:6A:57:77:EB:FB:67:E8:1B:D9:46:D7:A3:BB:11:75:0A:E0
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       5848CADDBE0F88110DA767F2F9B95116E6E40E4B
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:42 +0000
ROA not before:           Fri 23 Aug 2024 19:56:42 +0000
ROA not after:            Fri 22 Aug 2025 20:01:42 +0000
asID:                     262827
IP address blocks:        187.84.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:48:ca:dd:be:0f:88:11:0d:a7:67:f2:f9:b9:51:16:e6:e4:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:42 2024 GMT
            Not After : Aug 22 20:01:42 2025 GMT
        Subject: CN=06F73E6A5777EBFB67E81BD946D7A3BB11750AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:01:ba:77:04:d7:f2:4b:03:b2:5c:b0:22:
                    43:6d:3f:71:b1:5d:76:ac:a7:91:df:00:88:7b:54:
                    69:f2:42:ef:36:04:24:aa:ed:a7:40:5b:ce:3f:2f:
                    b7:9e:3f:41:82:23:77:f6:22:50:6e:8d:51:d9:c7:
                    54:42:5d:2f:86:50:cc:34:20:6e:ef:b6:bb:4b:7b:
                    79:74:ea:06:70:bd:f1:e4:92:aa:c7:5b:3c:5c:f6:
                    6e:1f:3a:bc:7d:b1:9e:26:c9:62:3f:12:e6:5f:6c:
                    4f:d4:79:4c:a6:95:2a:e8:ea:13:98:28:96:19:7a:
                    47:1a:c6:ef:cd:7f:69:8f:32:67:57:f0:a9:8e:62:
                    c3:6d:26:9a:84:ad:15:4b:0c:d1:5f:be:75:4f:99:
                    af:b2:b9:dd:d9:d9:ca:e2:c0:3c:ee:97:d3:98:10:
                    6a:3a:8a:be:16:4a:3b:92:11:44:0c:4a:af:ad:b6:
                    6f:7e:bf:2b:81:62:4b:01:d2:f4:47:9e:51:5c:ac:
                    10:ef:1e:d5:c0:f9:0b:a3:ae:a1:b4:1c:a8:5b:76:
                    e0:13:3a:a6:73:95:34:bf:5e:53:2a:f8:43:9b:77:
                    78:c3:84:f5:34:ce:b4:d0:3f:13:6b:6c:ad:e9:0b:
                    fd:42:74:b7:01:fa:18:27:e8:18:f9:ee:60:14:60:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:3E:6A:57:77:EB:FB:67:E8:1B:D9:46:D7:A3:BB:11:75:0A:E0
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32302d3230203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:46:db:ce:fc:5c:a8:f7:47:8a:99:66:54:87:16:6b:cc:
         ad:5f:38:98:0c:39:ee:30:4b:d4:fd:cc:34:39:08:c3:99:25:
         cd:76:9f:18:d6:05:45:4d:b7:f6:cf:12:67:2c:54:29:be:ae:
         0b:6e:9e:73:f4:4b:10:b4:eb:6e:31:c5:eb:cb:3b:9e:af:61:
         cc:26:69:66:ed:fd:0d:45:91:9e:59:3a:05:d7:f2:62:77:d5:
         16:73:e1:fb:0d:db:34:7a:eb:c1:3b:70:ae:09:40:2b:47:d1:
         75:3e:47:74:db:87:b1:a7:0f:31:97:7c:32:69:37:c1:61:7a:
         72:ab:ba:b9:ec:4b:a5:58:0b:f3:98:f5:2d:80:51:b6:6b:82:
         dd:72:12:82:f6:a6:21:fd:f9:0e:2a:5d:fd:b2:2d:ca:6a:02:
         10:ed:3d:66:21:4f:c3:9c:df:e6:3e:7f:5d:a8:93:45:d1:b9:
         b0:d3:ec:8a:91:40:ac:eb:24:c6:9c:8d:21:b3:7d:08:84:7e:
         11:5e:fd:2a:ec:a1:15:c7:49:2e:9b:0e:e9:80:72:42:a5:43:
         60:a9:ba:10:4e:5e:d6:a9:74:2c:02:df:92:e4:73:fd:36:0d:
         52:0f:ff:09:da:75:3c:bc:55:50:17:2c:57:90:d1:dd:4e:2f:
         e3:cf:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:06 2025 by rpki-client