Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138342e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3138342e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          A2+i9ejwns8c8v4YYyupdMl0x8GV+Rl2C/xxMVIJ1tg=
Subject key identifier:   F0:85:2C:41:91:11:60:02:1F:B1:F0:52:E8:BD:4B:82:36:25:F4:AC
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       76797C9D5D4296DD1CC19A2D2628AF12326B52A2
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138342e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:13 +0000
ROA not before:           Fri 23 Aug 2024 19:56:13 +0000
ROA not after:            Fri 22 Aug 2025 20:01:13 +0000
asID:                     262827
IP address blocks:        187.84.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:79:7c:9d:5d:42:96:dd:1c:c1:9a:2d:26:28:af:12:32:6b:52:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:13 2024 GMT
            Not After : Aug 22 20:01:13 2025 GMT
        Subject: CN=F0852C41911160021FB1F052E8BD4B823625F4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:3d:6c:ee:ff:1c:ab:43:1e:71:93:f5:30:
                    fc:2d:90:e0:a3:99:11:47:bd:1c:3b:c9:e4:bd:d7:
                    5e:6c:01:7f:ca:46:6d:c2:4c:f8:f3:5a:ff:bc:12:
                    25:14:42:dc:63:26:8e:1b:13:d6:bd:eb:2a:05:51:
                    e6:cc:44:c4:b8:08:18:d7:aa:84:1c:31:ac:0d:ce:
                    71:99:72:ff:7d:0a:be:21:12:c3:85:4b:5f:5b:07:
                    9a:1f:1c:9a:be:ad:a5:7f:c0:28:0a:5d:2a:13:04:
                    54:70:26:21:45:3a:44:9a:16:53:64:c1:39:85:1e:
                    33:0c:2e:ad:34:35:a5:20:30:02:81:66:f6:74:d8:
                    5f:74:02:b9:9d:3e:e4:7a:10:87:59:f8:e2:bc:3d:
                    d6:89:41:55:bb:23:68:06:c7:e2:45:8f:bd:66:d0:
                    47:2a:20:9e:46:c5:dc:ea:5a:cc:69:c5:c7:91:c4:
                    ce:98:63:87:3b:a6:80:2c:90:76:02:81:9f:6c:84:
                    64:f0:b3:e9:6e:8d:bd:b2:ff:b9:c3:8e:b8:44:e3:
                    ed:a7:f4:a0:5f:f7:78:a5:eb:3e:9e:99:a1:9a:53:
                    d4:2d:fd:fa:f1:da:09:c4:e6:31:bc:b6:da:31:f0:
                    88:e9:b4:b8:da:75:e2:f5:c1:78:f1:c8:7d:3f:76:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:85:2C:41:91:11:60:02:1F:B1:F0:52:E8:BD:4B:82:36:25:F4:AC
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138342e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:79:bc:6b:08:9e:bc:ac:30:41:a2:87:04:bd:8c:6b:a0:
         a5:b4:4a:a3:9f:b1:de:4f:fc:d5:c8:5f:5f:99:ae:a6:fb:d8:
         05:f2:c8:89:a8:04:ad:3c:1c:9d:bc:a0:0a:1b:67:c5:13:51:
         8f:cb:eb:79:18:b1:1a:89:80:8e:c6:ea:96:dd:b3:75:5b:28:
         94:c2:a7:95:39:9c:4e:83:34:a4:58:bb:d9:b3:57:ab:c3:d4:
         fe:87:a6:7f:6e:0f:75:61:2d:c7:3c:a3:2f:95:e2:ad:97:ae:
         19:fa:cc:71:0f:60:c2:de:cf:75:94:2a:52:d5:43:79:10:d8:
         f5:e6:a7:0b:73:52:dd:38:e1:01:c6:c2:50:14:de:a6:e5:47:
         f4:cd:b3:3a:cd:5a:18:7b:b5:96:e1:b3:5c:cb:d4:27:2d:07:
         e3:eb:a1:9f:c7:88:71:72:21:85:09:b1:8a:e3:4e:7c:ff:5f:
         d2:9f:da:64:5e:35:08:d3:1a:0a:0e:fa:06:a4:a4:63:fa:57:
         7c:c0:64:96:8e:77:c9:f6:68:3c:87:31:3e:29:02:35:de:a2:
         f5:11:a0:42:f7:03:53:06:4d:a5:8a:96:e6:da:95:7c:06:99:
         39:77:36:cb:8d:35:37:e8:d9:47:28:96:7a:84:9f:12:1c:c0:
         ad:a0:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:11 2025 by rpki-client