Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38372e3131322e302f32302d3230203d3e203533303539.roa
File:                     3138372e38372e3131322e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          FFGiBZzC0PDOsbdcxV/oNZgbf+yETlskZrZrkAotmzo=
Subject key identifier:   99:09:0E:A9:EA:20:81:FA:31:E7:06:9A:1F:99:65:0C:EF:3B:46:DC
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       42EF95810904894C467529F4D3D530250BAAF716
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38372e3131322e302f32302d3230203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 21:38:31 +0000
ROA not before:           Mon 23 Jan 2023 21:33:31 +0000
ROA not after:            Mon 22 Jan 2024 21:38:31 +0000
asID:                     53059
IP address blocks:        187.87.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ef:95:81:09:04:89:4c:46:75:29:f4:d3:d5:30:25:0b:aa:f7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 21:33:31 2023 GMT
            Not After : Jan 22 21:38:31 2024 GMT
        Subject: CN=99090EA9EA2081FA31E7069A1F99650CEF3B46DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:5e:90:f9:82:8b:c1:3e:a4:30:4d:b7:61:
                    9b:cb:17:84:f2:95:c2:b2:32:df:ee:0a:2a:dd:6c:
                    8d:e0:01:8d:b7:da:4b:3f:d8:61:71:bf:4b:17:c9:
                    70:ab:b9:46:d4:c6:9c:34:60:9e:0c:62:d9:7c:31:
                    93:97:01:dd:ff:5f:7b:16:dc:5b:f6:d3:2f:50:9c:
                    8d:65:ae:29:fb:95:c2:4b:3e:a7:5c:0c:f4:ca:4e:
                    fe:9f:c3:f2:55:15:8d:99:8a:b5:50:c1:c1:d9:6c:
                    c1:a0:20:ef:5f:22:31:d5:22:b9:b2:75:1c:6b:47:
                    cb:9a:d8:94:86:7a:2c:8d:3d:40:4b:da:c1:03:52:
                    b5:d0:d9:ee:03:05:be:86:fc:15:74:6b:59:16:ea:
                    5a:95:1b:c6:e0:d0:4e:e5:4f:44:27:90:b1:9e:9d:
                    fe:05:96:25:59:f3:b8:b8:d2:53:be:8f:b1:6c:46:
                    f1:58:1a:1f:c7:1b:df:8f:19:e0:08:f1:7c:2a:2f:
                    af:ba:39:ba:df:f5:8c:d9:f8:98:fe:41:b5:4a:4a:
                    bf:a9:13:5f:45:86:39:8c:8f:9e:52:72:d7:b9:9d:
                    ce:50:e3:5b:3a:c5:bb:49:c2:f0:7a:53:fd:ec:f7:
                    54:d4:27:b4:b3:3a:80:90:53:a2:c5:af:62:28:dc:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:0E:A9:EA:20:81:FA:31:E7:06:9A:1F:99:65:0C:EF:3B:46:DC
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38372e3131322e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:c0:26:5d:39:83:74:6f:39:dc:1b:0a:0c:05:d0:80:a1:
         84:a6:b2:dd:f5:f3:70:bf:f9:e5:83:04:96:3b:c2:00:e9:32:
         56:91:58:df:d9:a2:56:59:25:37:b0:34:f8:6c:0c:3c:f2:ff:
         58:54:4b:ba:d3:27:6b:e8:35:cc:bb:b1:5a:67:30:3f:59:4e:
         4a:e7:83:da:35:52:ca:02:18:05:5b:d8:89:3d:74:07:3f:11:
         bf:90:ad:df:68:76:25:47:cb:e6:4a:71:bd:8c:47:4a:83:4e:
         35:0b:27:7c:7f:e9:8c:c9:6b:a6:af:b8:63:de:40:c0:9c:0c:
         d8:f4:2f:e7:cd:83:4a:17:f6:b3:b7:09:ad:08:ce:31:55:61:
         ca:49:51:c1:4f:fe:dd:a2:2f:ae:4d:2e:d9:42:a8:8d:47:9c:
         ff:15:33:c5:01:6b:31:1a:aa:87:6a:cd:5e:c8:29:11:72:a1:
         3d:c6:cb:05:72:42:b7:ee:d6:f6:81:51:8e:0d:0e:34:af:e5:
         b7:ae:d6:01:0b:fb:74:43:a8:dc:25:8a:bb:84:73:2e:ef:b8:
         42:88:13:81:06:e8:89:55:52:5d:07:9b:a3:0f:72:2f:cc:bb:
         5a:ba:fd:6d:77:c6:c1:ee:c0:e2:99:18:02:75:52:4f:22:47:
         30:79:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:42 2025 by rpki-client