Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233332e302f32342d3234203d3e203238323936.roa
File:                     3138372e3132312e3233332e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          QKna9VudFtyXNyo+oS8KXFqKl2kkxPN1YdLhqeL/nuQ=
Subject key identifier:   71:90:93:0E:B2:73:07:E0:61:D6:56:AE:4F:44:14:AB:D3:7E:13:25
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       5FEF345DDC5EFCA7810990A0FF4299FB18FBFF01
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233332e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:55:25 +0000
ROA not before:           Sun 01 Dec 2024 22:50:25 +0000
ROA not after:            Sun 30 Nov 2025 22:55:25 +0000
asID:                     28296
IP address blocks:        187.121.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ef:34:5d:dc:5e:fc:a7:81:09:90:a0:ff:42:99:fb:18:fb:ff:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:50:25 2024 GMT
            Not After : Nov 30 22:55:25 2025 GMT
        Subject: CN=7190930EB27307E061D656AE4F4414ABD37E1325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:e4:fa:d9:27:6b:c8:2f:18:69:3d:ec:f0:
                    32:95:f5:00:6d:05:2c:80:68:7f:52:3e:eb:41:3d:
                    55:1e:49:73:b0:7f:43:55:0e:9c:1d:f4:a2:91:95:
                    55:61:7e:10:3d:bb:fa:28:de:5e:9c:f5:11:01:b2:
                    ee:b6:49:c1:bf:00:5f:db:2e:7a:c1:37:de:15:4b:
                    ea:7a:af:b7:f0:a0:ad:ba:94:37:82:8c:d1:32:45:
                    93:6a:c0:7c:49:54:84:7c:6e:b2:09:79:9b:ee:88:
                    1e:95:0c:39:7b:c9:2d:9a:ef:53:8f:0d:7b:1c:45:
                    57:c8:71:ce:4d:be:b1:e9:ee:f0:95:f8:34:5d:e0:
                    93:bf:1d:d2:3a:e2:cf:2c:89:e0:87:b9:ff:bd:11:
                    7c:ff:ee:8c:56:c0:ac:dd:52:fd:de:94:a5:4b:94:
                    3e:e4:fa:fe:e4:0e:ff:86:9f:ce:bc:53:33:99:97:
                    00:47:59:dd:14:ba:d5:d0:53:8d:81:72:d2:9e:e3:
                    11:6a:e5:1f:94:0f:75:32:d6:18:2f:5f:65:78:85:
                    0a:af:fb:42:57:85:93:a3:c2:27:e8:bf:25:06:de:
                    ca:ca:71:17:99:5d:a1:ac:71:96:d4:0e:0a:40:60:
                    51:18:05:55:16:5b:f6:dc:92:66:a8:62:1b:9d:5f:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:93:0E:B2:73:07:E0:61:D6:56:AE:4F:44:14:AB:D3:7E:13:25
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233332e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:72:32:a9:cd:13:e5:2b:03:09:3c:97:6d:ef:fa:ed:70:70:
         99:8d:bb:c5:8a:2b:23:62:93:82:73:7f:03:d2:82:a0:50:3a:
         2b:4f:ee:56:cf:55:c3:ae:08:fa:ed:27:c1:80:eb:40:8e:1c:
         9f:88:88:7a:da:a7:ae:70:ff:24:41:1b:f1:d1:35:e6:b4:8e:
         54:cc:ad:5b:6a:ea:e0:a2:c3:61:c6:21:f9:58:cd:91:25:74:
         27:3e:8a:93:06:ff:a5:0d:22:80:03:e2:25:9f:35:58:9b:51:
         e7:f4:24:d4:28:cf:2a:02:be:d0:3c:f2:4e:53:a6:d6:08:53:
         0c:f4:50:1d:03:f0:e6:ca:d6:7b:6d:27:bf:8b:fb:30:5a:8e:
         c5:af:c4:d7:ff:81:fc:97:c5:c4:7c:35:fa:76:4b:dd:bf:bc:
         4b:9d:16:fb:11:70:ec:b0:bf:81:df:be:9a:88:3b:cd:0a:da:
         67:02:de:e0:d6:2c:d9:d5:5b:c7:75:a3:2c:93:eb:d7:76:50:
         93:73:54:9f:60:ce:07:5a:eb:58:05:52:a6:6d:47:df:97:0b:
         29:a6:56:7c:b6:b6:b0:ad:dc:97:70:c7:ff:03:3f:56:3a:d0:
         4e:df:fe:58:3e:ee:c7:06:8f:78:b3:f4:5c:76:b4:7b:d6:8f:
         75:a3:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:39 2025 by rpki-client