Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36342e302f32322d3234203d3e20323639373139.roa
File:                     3138372e36322e36342e302f32322d3234203d3e20323639373139.roa (raw, json)
Hash identifier:          j7engftfBrqtEP+i3ytGS65tdwRXfhWosTKNQrYWTOk=
Subject key identifier:   36:27:A6:39:ED:41:03:67:5E:95:E1:36:B8:F4:53:94:CE:2F:D1:3C
Certificate issuer:       /CN=B05A93BC0AEDA8A668147FAE8E171E5612B8545D
Certificate serial:       7F358E12D8945EF53028D576DBCAFF3C67CDB874
Authority key identifier: B0:5A:93:BC:0A:ED:A8:A6:68:14:7F:AE:8E:17:1E:56:12:B8:54:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B05A93BC0AEDA8A668147FAE8E171E5612B8545D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36342e302f32322d3234203d3e20323639373139.roa
Signing time:             Fri 31 Jan 2025 12:27:20 +0000
ROA not before:           Fri 31 Jan 2025 12:22:20 +0000
ROA not after:            Fri 30 Jan 2026 12:27:20 +0000
asID:                     269719
IP address blocks:        187.62.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:35:8e:12:d8:94:5e:f5:30:28:d5:76:db:ca:ff:3c:67:cd:b8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B05A93BC0AEDA8A668147FAE8E171E5612B8545D
        Validity
            Not Before: Jan 31 12:22:20 2025 GMT
            Not After : Jan 30 12:27:20 2026 GMT
        Subject: CN=3627A639ED4103675E95E136B8F45394CE2FD13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:a7:e7:4a:a2:50:17:79:8e:f3:53:31:90:
                    c6:87:15:ed:0f:30:f7:a5:c8:39:2d:65:a2:b9:14:
                    9d:cc:dc:6f:57:21:ef:10:bb:24:d3:ff:5a:fa:0f:
                    3f:10:cf:62:74:8c:5d:8e:27:f3:64:9f:1f:c2:5f:
                    e4:3d:4d:36:5f:a6:db:7b:32:2c:3b:45:e7:22:a6:
                    a8:43:cf:19:9d:30:e4:58:06:dc:98:33:2b:10:97:
                    e6:46:1c:01:9a:8d:35:f8:f6:e2:32:6f:d2:82:ad:
                    ee:d0:31:f0:e3:02:55:85:c0:d3:86:cd:7f:82:f4:
                    ab:00:de:6d:6d:6a:ae:e3:b3:89:19:a4:b9:53:14:
                    88:29:19:f8:12:18:0f:10:09:80:44:96:ee:a9:5c:
                    08:6e:c7:17:ac:fd:6e:97:01:b2:94:a0:b0:88:66:
                    8c:54:ed:ba:27:50:8a:52:5b:ab:5a:4b:ec:65:0d:
                    29:74:50:21:05:b3:6d:ed:e0:32:87:4a:02:f6:ad:
                    a3:4f:8a:92:01:5f:f1:ba:7c:97:e4:30:08:f1:2c:
                    1a:66:99:2a:5c:36:a3:7c:a8:65:ce:06:24:90:ea:
                    72:1d:a7:9c:a5:75:6b:38:aa:b6:f1:98:3b:1d:ed:
                    64:d0:c9:a4:3e:a6:ad:e4:d9:d5:ed:49:6e:e2:42:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:A6:39:ED:41:03:67:5E:95:E1:36:B8:F4:53:94:CE:2F:D1:3C
            X509v3 Authority Key Identifier:
                keyid:B0:5A:93:BC:0A:ED:A8:A6:68:14:7F:AE:8E:17:1E:56:12:B8:54:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/B05A93BC0AEDA8A668147FAE8E171E5612B8545D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B05A93BC0AEDA8A668147FAE8E171E5612B8545D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36342e302f32322d3234203d3e20323639373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:3d:c9:d4:53:4b:24:bb:bf:0d:c1:0d:8b:27:7e:b7:4a:e2:
         b2:22:8d:ac:3c:37:8b:b4:cb:90:94:e9:77:a5:06:15:77:64:
         83:cd:8a:68:bf:e0:90:bc:31:4f:e1:cc:96:f3:be:d1:1a:78:
         16:ac:7d:f5:63:3d:6f:98:97:5a:8b:2e:74:92:c9:5f:28:22:
         3f:0d:eb:9a:00:e0:da:48:34:74:3f:9f:37:43:3f:24:54:8e:
         3f:d0:8e:dc:32:77:b7:af:1a:e7:6c:9e:b7:c5:b2:d2:28:31:
         ef:21:2d:c2:d2:3d:04:7a:53:f9:22:ce:10:31:36:6d:3d:41:
         47:88:8a:0f:85:96:36:ba:60:f2:c7:cb:4e:54:6f:a6:13:a5:
         e5:e3:cb:47:b9:6c:a8:1b:03:0b:dc:63:5a:f1:ca:a4:fd:05:
         e2:0c:6c:03:97:bb:6e:81:77:93:3f:81:f2:72:fe:33:7c:5e:
         6b:82:7d:96:9a:c0:5f:e3:0d:d1:a2:8d:e3:93:c1:45:8a:18:
         ae:2d:76:48:34:79:c8:4d:57:5a:7b:f5:72:75:5a:44:31:99:
         e3:42:76:66:08:2d:9c:80:ef:ea:58:00:7b:30:24:de:82:ff:
         cc:7c:47:5e:0b:8f:65:0f:56:a1:f7:98:9d:81:70:3b:72:c5:
         e7:38:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:43:39 2025 by rpki-client