Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E7Tf1YPSoH1jDurTPX58rtzPYoU4kiK8WcN4WTeSP9Jv/0/3138372e38342e3131322e302f32322d3234203d3e20323731303439.roa
File:                     3138372e38342e3131322e302f32322d3234203d3e20323731303439.roa (raw, json)
Hash identifier:          A2glaGDITBQEOXXAZAla/xznGXRpTlE5ngXL4d01j+0=
Subject key identifier:   9C:78:8A:8F:4D:62:C9:40:A6:57:DE:E3:75:98:84:58:B3:4E:C2:66
Certificate issuer:       /CN=09B4008B7134F4D6BB38935EDFD295893A02F78C
Certificate serial:       27ED3FE06A3F90AF671B341723C36B6C4B72B897
Authority key identifier: 09:B4:00:8B:71:34:F4:D6:BB:38:93:5E:DF:D2:95:89:3A:02:F7:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09B4008B7134F4D6BB38935EDFD295893A02F78C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E7Tf1YPSoH1jDurTPX58rtzPYoU4kiK8WcN4WTeSP9Jv/0/3138372e38342e3131322e302f32322d3234203d3e20323731303439.roa
Signing time:             Tue 14 Mar 2023 12:20:00 +0000
ROA not before:           Tue 14 Mar 2023 12:15:00 +0000
ROA not after:            Tue 12 Mar 2024 12:20:00 +0000
asID:                     271049
IP address blocks:        187.84.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ed:3f:e0:6a:3f:90:af:67:1b:34:17:23:c3:6b:6c:4b:72:b8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B4008B7134F4D6BB38935EDFD295893A02F78C
        Validity
            Not Before: Mar 14 12:15:00 2023 GMT
            Not After : Mar 12 12:20:00 2024 GMT
        Subject: CN=3082010A0282010100B94EF5C944315DEAF23E70B90AED306D41E2A9A8ABE17D8F6E814DF2B788855B7A3E4082A1FA26A0C30446C1ADFFB477C6607000C976EEE2360D8438177FC8DFB293D111FDFE68DFB189199869AEA832FF23BEACBED5E5ED986E602EFF036010C3EDBC4BDA072C7A1AD1BBFE88483E953A08850AF011F53E8556677BB68E015CE0557C462C0AD8CACED0413C865A2FE9DED773B5E3F958D1B24853DDDF6F8DD54D4E83A3B3B03C468BD509630B7135E4C0E4D9DA8B16A6273D98A170F6EE2C3A56A37423B7849413055D51C11F09E6C8FD40ACB2EAE1BAFB546AEC3727315507C470EC929399D062FE1BF8404A5638CAD0DA018F67B545236A39DC588AB087030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:f5:c9:44:31:5d:ea:f2:3e:70:b9:0a:ed:
                    30:6d:41:e2:a9:a8:ab:e1:7d:8f:6e:81:4d:f2:b7:
                    88:85:5b:7a:3e:40:82:a1:fa:26:a0:c3:04:46:c1:
                    ad:ff:b4:77:c6:60:70:00:c9:76:ee:e2:36:0d:84:
                    38:17:7f:c8:df:b2:93:d1:11:fd:fe:68:df:b1:89:
                    19:98:69:ae:a8:32:ff:23:be:ac:be:d5:e5:ed:98:
                    6e:60:2e:ff:03:60:10:c3:ed:bc:4b:da:07:2c:7a:
                    1a:d1:bb:fe:88:48:3e:95:3a:08:85:0a:f0:11:f5:
                    3e:85:56:67:7b:b6:8e:01:5c:e0:55:7c:46:2c:0a:
                    d8:ca:ce:d0:41:3c:86:5a:2f:e9:de:d7:73:b5:e3:
                    f9:58:d1:b2:48:53:dd:df:6f:8d:d5:4d:4e:83:a3:
                    b3:b0:3c:46:8b:d5:09:63:0b:71:35:e4:c0:e4:d9:
                    da:8b:16:a6:27:3d:98:a1:70:f6:ee:2c:3a:56:a3:
                    74:23:b7:84:94:13:05:5d:51:c1:1f:09:e6:c8:fd:
                    40:ac:b2:ea:e1:ba:fb:54:6a:ec:37:27:31:55:07:
                    c4:70:ec:92:93:99:d0:62:fe:1b:f8:40:4a:56:38:
                    ca:d0:da:01:8f:67:b5:45:23:6a:39:dc:58:8a:b0:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:78:8A:8F:4D:62:C9:40:A6:57:DE:E3:75:98:84:58:B3:4E:C2:66
            X509v3 Authority Key Identifier:
                keyid:09:B4:00:8B:71:34:F4:D6:BB:38:93:5E:DF:D2:95:89:3A:02:F7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E7Tf1YPSoH1jDurTPX58rtzPYoU4kiK8WcN4WTeSP9Jv/0/09B4008B7134F4D6BB38935EDFD295893A02F78C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09B4008B7134F4D6BB38935EDFD295893A02F78C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E7Tf1YPSoH1jDurTPX58rtzPYoU4kiK8WcN4WTeSP9Jv/0/3138372e38342e3131322e302f32322d3234203d3e20323731303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:07:41:9f:8f:a5:41:25:f6:ec:e1:9b:f4:35:b6:10:5b:
         83:1c:38:65:28:1b:77:62:d9:1f:de:27:66:0a:1a:32:bb:ce:
         37:ba:d8:8e:03:5f:03:8e:68:e3:fb:55:b2:e6:52:96:c5:4e:
         62:d5:67:fe:fb:5d:db:61:57:eb:90:2a:58:38:db:a4:10:e9:
         ff:42:e5:ed:e9:89:92:72:c5:b1:2a:4a:8d:65:69:c8:c9:91:
         d3:94:11:9a:4d:71:4c:bb:5e:f3:79:00:af:61:0f:83:79:39:
         d5:28:00:8e:e5:cd:4f:ca:6d:f7:2d:f0:cd:54:24:6d:06:34:
         a0:3c:df:b4:07:35:bf:55:90:85:40:69:27:6a:a5:4b:17:90:
         7d:da:b2:57:04:47:38:38:7c:b4:73:d9:7e:ed:dd:fc:1b:36:
         30:67:c2:3e:a2:8a:18:66:f7:a9:60:0b:10:2c:d5:6b:86:7e:
         9a:47:ae:70:b2:ff:24:65:f3:1d:fe:d0:b2:25:e9:93:d0:e0:
         54:f4:59:c4:b8:5c:71:da:ab:dd:58:b9:8c:70:a8:d1:23:4f:
         93:2f:9d:84:fe:62:bb:3a:81:2e:7a:21:14:3c:43:d0:8c:29:
         18:41:2b:68:9c:55:6f:5e:26:9a:63:79:70:8e:12:ea:20:f1:
         d7:91:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:17 2025 by rpki-client