Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232382e302f32342d3234203d3e203238323936.roa
File:                     3138372e3132312e3232382e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          yRdJzqd3ABg/AJw4Gji9XWGwGwsC8ZXkDFTqN6N2G/M=
Subject key identifier:   04:09:90:31:1A:6E:53:46:A1:68:89:2A:82:63:8B:83:13:BB:99:83
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       2F439FE4DEB1A68F651DA2FCD82D04CD545AE365
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232382e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:45:12 +0000
ROA not before:           Sun 01 Dec 2024 22:40:12 +0000
ROA not after:            Sun 30 Nov 2025 22:45:12 +0000
asID:                     28296
IP address blocks:        187.121.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:43:9f:e4:de:b1:a6:8f:65:1d:a2:fc:d8:2d:04:cd:54:5a:e3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:40:12 2024 GMT
            Not After : Nov 30 22:45:12 2025 GMT
        Subject: CN=040990311A6E5346A168892A82638B8313BB9983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:fd:77:6e:47:8c:60:ba:df:93:05:da:80:
                    55:d5:23:7e:76:92:30:f6:16:20:e0:ea:f7:e9:1a:
                    3a:29:47:47:28:3f:8a:5c:8f:ce:d3:96:dd:d2:9e:
                    4d:e2:51:56:26:59:0b:95:9c:79:67:e4:ed:3b:dc:
                    9f:06:f3:93:64:a6:bc:61:1e:c1:86:df:68:81:67:
                    32:86:da:2c:ff:18:24:01:82:61:e2:d2:86:98:f8:
                    ad:14:f7:16:19:f7:aa:d7:6a:4c:d9:c6:3a:52:38:
                    68:fd:9e:f0:2e:66:ab:0b:f0:e4:9d:b9:07:7c:2e:
                    8f:70:75:be:e4:f3:d5:09:3e:14:90:44:99:31:d6:
                    1d:68:3e:95:30:46:3b:f2:93:af:ac:14:a7:22:60:
                    fc:58:fc:4d:c2:9a:60:e4:d2:32:e2:f9:76:db:07:
                    0a:62:e5:d9:75:15:4c:73:3b:1d:de:82:dc:38:fb:
                    5d:2a:fe:30:94:37:04:7f:1a:cb:42:6e:1b:72:80:
                    ac:91:63:96:40:59:6d:0f:43:9f:f3:70:4b:ce:4b:
                    05:6d:2c:1c:cf:df:11:06:39:09:93:0e:14:62:68:
                    d2:5f:bb:20:ee:55:b2:96:11:2c:c0:01:64:93:34:
                    e5:da:88:25:cb:15:af:ee:f6:83:20:bd:8b:7a:85:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:90:31:1A:6E:53:46:A1:68:89:2A:82:63:8B:83:13:BB:99:83
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232382e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:4a:9d:12:71:a3:9f:68:d4:ce:00:d2:d5:01:57:5c:d1:ea:
         f0:2b:73:7f:9e:15:0f:7a:cf:56:de:00:2a:34:af:95:cd:20:
         c5:21:07:b5:37:30:bb:8a:0d:39:bd:24:82:3e:c5:88:8d:18:
         94:69:ef:ac:23:b5:a8:32:5a:16:c2:48:d0:74:7d:66:09:d8:
         fa:ac:e9:6c:8b:77:77:74:d2:48:27:1d:5c:bf:81:99:3e:75:
         72:94:4a:46:e4:8c:03:e8:03:9c:bb:ea:c9:13:98:c5:cb:72:
         36:7e:6f:73:1a:84:bd:08:bc:dc:3a:c9:7d:84:2c:c5:05:b4:
         54:a8:10:fb:ce:6f:d1:b0:85:de:67:fb:32:2b:bc:12:02:06:
         14:9c:37:4e:af:14:e7:7e:91:2c:26:26:67:a5:30:45:54:14:
         6e:c3:85:2e:5b:b1:c5:04:93:c2:8d:7c:2e:47:68:91:ac:b6:
         04:46:e9:0d:77:44:68:11:bd:8d:98:e5:0b:bf:bd:1d:76:ea:
         b5:cd:7b:27:5c:30:d0:d0:fb:0e:1d:91:36:61:a4:f9:98:56:
         3b:90:de:c5:c9:f2:66:48:44:c8:74:45:67:3e:68:41:fa:89:
         70:fa:3b:68:7b:61:65:d7:0a:db:61:c7:fb:57:15:82:4a:ca:
         21:d1:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:00 2025 by rpki-client