Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232352e302f32342d3234203d3e203238323936.roa
File:                     3138372e3132312e3232352e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          IbS7uTm9panR9KWQV+iIdFJqKLymweR/Dxt+EV2ZYVU=
Subject key identifier:   15:95:4C:14:22:CA:7F:78:04:3E:9D:71:88:3E:B7:20:88:09:D4:A0
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       59EDEABECC4261755B09F14DEAAD3BBB664AAE6A
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232352e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:46:03 +0000
ROA not before:           Sun 01 Dec 2024 22:41:03 +0000
ROA not after:            Sun 30 Nov 2025 22:46:03 +0000
asID:                     28296
IP address blocks:        187.121.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ed:ea:be:cc:42:61:75:5b:09:f1:4d:ea:ad:3b:bb:66:4a:ae:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:41:03 2024 GMT
            Not After : Nov 30 22:46:03 2025 GMT
        Subject: CN=15954C1422CA7F78043E9D71883EB7208809D4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:23:77:92:3f:07:c9:1e:78:5f:11:c9:a6:
                    51:d5:93:cd:2a:6a:73:bd:c8:f9:52:bc:eb:b7:0b:
                    37:83:a9:bf:0a:e9:20:3d:05:71:98:fc:47:58:af:
                    08:5f:c0:c2:bf:7f:0d:82:0e:b4:6e:3c:5b:ca:01:
                    db:3c:0b:bd:47:ed:c0:d3:b7:e4:96:3f:25:e6:10:
                    27:77:1e:41:1d:f9:a3:8a:7a:e4:e1:cf:fc:3e:64:
                    b8:7d:b1:a3:e9:45:77:fd:42:71:46:87:63:cd:d0:
                    8e:0c:f2:ea:1a:6e:7c:13:61:0d:f2:d7:bc:29:3d:
                    eb:4f:70:9a:f1:aa:cd:28:32:97:c5:18:61:66:b7:
                    51:28:b2:86:13:fe:a3:89:d5:3f:80:5d:2b:86:ca:
                    d6:87:3b:a0:49:b6:e8:98:f1:2e:2b:50:60:0b:44:
                    e4:ac:7d:30:4f:4b:eb:e2:4e:bb:83:16:85:fa:21:
                    28:f9:f1:10:8d:9f:68:cb:ee:45:47:04:4f:fb:bb:
                    d7:4f:16:f6:a7:42:3b:11:f0:20:b9:b5:fa:c7:e6:
                    c8:a8:b0:dc:0e:6c:57:82:6c:99:87:b6:0a:bb:d4:
                    b6:15:c1:3c:5e:e6:b5:ac:84:72:7f:68:b3:92:84:
                    d2:4d:8c:28:20:6f:a9:25:d9:47:95:81:8a:54:fd:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:95:4C:14:22:CA:7F:78:04:3E:9D:71:88:3E:B7:20:88:09:D4:A0
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232352e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:c6:69:b1:23:fd:a6:c0:36:03:21:ee:fb:2d:cc:36:a9:
         1b:17:ce:ab:d1:19:a2:73:03:36:e3:27:d6:ba:1c:43:a5:31:
         f9:4c:eb:30:0f:eb:bf:85:cf:b4:34:53:35:73:68:c4:68:f2:
         bc:dc:72:7a:75:e8:e8:c5:da:fb:97:b5:22:04:17:56:25:b3:
         2b:10:a7:2a:22:bd:32:c4:54:26:df:d0:b7:e7:8d:b8:b4:25:
         55:21:7c:73:65:74:cc:06:73:a9:7c:8e:91:e5:2d:18:e9:33:
         3f:c8:61:30:9b:ce:ef:b4:bb:ca:50:fd:41:36:dc:af:22:24:
         46:f9:38:55:dc:cc:ee:88:ee:a0:7b:f1:2e:87:36:e3:9a:3f:
         20:da:31:9b:65:43:d5:ee:f6:c5:63:e0:7a:83:b2:e8:ad:82:
         70:eb:c2:a9:ec:d4:d6:a8:f4:df:9f:4d:42:7f:48:b5:ab:07:
         4e:b8:ca:c4:82:51:a8:42:10:c1:4f:23:f8:ba:aa:84:de:0d:
         db:08:31:d7:9d:b4:de:6f:28:b1:78:82:90:cf:71:8d:4f:26:
         3f:fb:7f:6d:c5:60:ec:9a:27:55:7a:7d:e7:ba:e5:1f:02:74:
         06:e3:c9:20:25:68:d6:72:96:04:50:25:e5:da:35:d2:e9:20:
         0e:4e:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:30 2025 by rpki-client