Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232362e302f32342d3234203d3e203238323936.roa
File:                     3138372e3132312e3232362e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          EbXj4MHjiAnj3HTpujrfRFGky6bhiigSTatRPufLpJA=
Subject key identifier:   E2:7C:01:13:50:EC:EE:11:7F:B0:7E:A9:06:9D:8E:AE:91:7F:82:0D
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       48ECB69975D9588D29A1D60FC7552E4D4F5805F7
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232362e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:42:56 +0000
ROA not before:           Sun 01 Dec 2024 22:37:56 +0000
ROA not after:            Sun 30 Nov 2025 22:42:56 +0000
asID:                     28296
IP address blocks:        187.121.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ec:b6:99:75:d9:58:8d:29:a1:d6:0f:c7:55:2e:4d:4f:58:05:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:37:56 2024 GMT
            Not After : Nov 30 22:42:56 2025 GMT
        Subject: CN=E27C011350ECEE117FB07EA9069D8EAE917F820D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:98:91:29:12:49:92:ff:a9:1b:76:33:ee:
                    a6:a2:e1:d0:83:da:39:f6:54:88:11:35:3e:72:1c:
                    3b:31:af:f5:b2:3d:42:cb:9b:3a:a8:f2:a0:c9:b7:
                    ce:db:84:64:93:44:5d:14:c3:bb:1f:8d:30:5c:83:
                    89:ff:06:a2:54:3f:d7:9d:6d:72:88:df:02:f4:45:
                    de:25:bd:f4:e0:8b:55:47:d0:67:a2:fc:b2:10:b6:
                    3b:d4:7c:e0:05:09:44:10:78:4d:3b:f1:8f:86:5a:
                    59:70:92:4e:86:f7:20:21:01:23:88:27:88:75:71:
                    3a:af:9d:63:51:02:78:c6:55:4b:38:6d:9b:5e:e9:
                    cc:ba:13:5e:91:10:80:4e:76:80:1c:ff:cb:17:3d:
                    e1:3b:43:6c:35:ae:9d:0a:31:e0:4d:be:39:4e:ff:
                    85:b6:ee:9f:18:6b:3a:58:62:01:11:9b:d1:25:83:
                    8f:5e:00:f8:83:9a:7e:18:ef:a7:74:a3:49:b5:c9:
                    f8:d5:06:bb:25:22:18:b1:83:e6:b4:ac:dd:d2:f9:
                    cf:5f:fe:31:c2:5c:01:a5:e8:e0:eb:d1:32:48:20:
                    e2:3c:69:43:e8:58:f7:bc:e8:c7:d2:0f:15:f3:e8:
                    09:f5:3a:53:89:0f:c1:0a:75:11:49:8c:c3:dc:54:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:01:13:50:EC:EE:11:7F:B0:7E:A9:06:9D:8E:AE:91:7F:82:0D
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232362e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:9a:cf:67:ca:be:16:b9:4d:6a:a2:b1:29:7c:eb:68:dd:04:
         12:74:f8:22:48:4a:33:b0:ce:fc:1a:ff:7a:d1:d3:29:0f:ed:
         c0:18:c3:3b:f1:a6:ce:fe:99:a5:dc:84:cf:8c:4d:e6:61:ab:
         da:ba:f5:eb:3d:b5:7e:6b:10:61:7b:4a:50:ef:23:5a:bc:26:
         e6:1b:94:21:69:f9:76:64:1e:13:92:1c:e3:55:d3:0f:c6:63:
         3c:e4:fc:aa:8f:1d:0b:fb:f6:48:d9:3b:c5:89:21:b5:20:c7:
         81:b0:d3:5a:49:55:6b:eb:e1:d5:6d:5d:3f:29:d3:d4:b3:e9:
         b8:de:23:d5:b2:36:60:79:37:a7:40:52:fc:fa:59:a7:c4:ef:
         5b:73:ea:8e:21:a6:1c:06:e5:31:10:ae:f9:66:c9:fe:df:98:
         5b:e4:40:45:a2:9f:e2:c2:6c:37:96:3c:51:34:98:23:8b:34:
         2e:96:98:00:e2:84:9b:a8:42:95:3b:04:12:f7:a0:46:0e:cb:
         20:c5:75:b0:f2:35:3c:39:b8:c9:82:0d:a4:b8:21:cf:75:f6:
         dc:dc:ea:1a:96:9d:32:de:89:39:10:2e:08:84:5d:bb:ab:71:
         fd:ac:27:1c:65:ee:ed:9a:c9:c9:af:50:44:34:95:74:75:61:
         16:5d:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:43 2025 by rpki-client