Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e3130322e3136302e302f31392d3234203d3e203137323232.roa
File:                     3138372e3130322e3136302e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          nxd8x1ZE/lpvdfggGsV+qzJnngrdEeSvkRnIThJozOs=
Subject key identifier:   F8:22:F1:01:07:03:E9:28:50:19:E0:3E:96:68:9B:EA:BA:89:4C:D6
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       3FC0FBEC9B1381C73ED4E56814F29920EAA3D259
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e3130322e3136302e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        187.102.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c0:fb:ec:9b:13:81:c7:3e:d4:e5:68:14:f2:99:20:ea:a3:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=F822F1010703E9285019E03E96689BEABA894CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:c7:40:74:5e:65:a6:7a:5a:95:ae:b8:36:
                    13:c7:44:e3:98:d9:34:cf:62:b3:1d:3e:a3:25:55:
                    f0:0c:de:b5:58:29:0a:b2:dc:64:fd:79:20:2f:67:
                    fa:de:d8:2f:d2:ef:1d:a5:a7:83:a8:15:cd:5c:79:
                    87:d4:68:17:ce:82:3c:fa:b3:3f:44:6b:88:a8:a9:
                    c7:1e:73:83:17:f9:46:11:52:d2:7f:b2:40:1b:b1:
                    27:a0:df:0e:4c:0f:4a:42:4f:14:22:32:76:dc:8c:
                    e4:1d:b5:79:5e:06:9a:32:21:c9:e3:59:e2:b1:dc:
                    a6:54:c2:29:ce:65:74:41:96:b8:28:c5:ac:f4:53:
                    e8:8a:da:df:bc:8d:e8:5d:ae:38:f1:bb:42:b3:46:
                    b4:65:73:31:b6:34:2c:81:94:82:f0:78:54:42:d8:
                    90:23:37:ea:58:6b:8a:c2:12:3f:5a:ac:ca:18:5c:
                    5f:e1:db:76:2b:52:44:76:b2:9a:29:e8:03:06:d7:
                    f6:07:f6:39:4e:76:6b:05:2d:30:f1:2f:23:9a:e5:
                    aa:c4:7c:d4:bc:eb:ee:57:de:2b:9f:7c:0d:6e:cf:
                    74:5e:ae:27:ce:14:a1:58:9a:a3:a1:ed:7d:b7:0e:
                    88:7b:78:bd:78:a8:01:ea:32:69:a4:f9:81:85:4e:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:22:F1:01:07:03:E9:28:50:19:E0:3E:96:68:9B:EA:BA:89:4C:D6
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e3130322e3136302e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:ab:7e:93:f8:40:0c:cf:f6:58:70:f8:2d:53:88:c7:98:
         59:cb:81:6f:43:7b:5a:35:52:a2:53:b9:a3:06:1e:21:ab:29:
         c7:cc:02:f8:e6:f2:16:df:70:a7:5e:3f:b6:9a:dc:ef:f4:27:
         71:59:c2:01:7c:30:98:dd:f3:90:71:44:8e:78:c0:da:36:10:
         8a:5d:23:bf:0e:c4:32:18:02:d7:0a:48:f5:ee:94:f3:2e:93:
         9f:c5:a2:a2:d9:bb:e5:a2:c3:9c:f9:d6:37:8b:f1:fa:2d:42:
         c5:e6:0c:54:55:07:f3:e5:54:a0:f3:f5:35:f6:24:95:c6:cf:
         e6:bb:f3:1f:fa:66:74:ba:e5:e9:59:04:9e:a0:9f:1e:6a:da:
         47:fa:44:fa:88:96:bf:78:9a:d1:e9:08:02:00:9a:0a:02:78:
         06:93:88:25:ba:6c:79:45:89:a1:40:0d:90:c8:1e:0b:6f:e4:
         7a:e3:a7:76:9b:d5:0d:9e:51:60:77:a5:ba:cd:dd:fa:78:36:
         d1:11:e7:76:b3:51:f7:2d:7f:ac:07:f8:ab:af:8c:b1:70:d7:
         6e:3f:d3:f6:21:39:83:1b:73:87:6d:8d:0c:b0:62:b5:6d:4e:
         a5:a1:06:7e:f3:e7:29:99:6f:23:05:73:8d:60:ec:84:72:4a:
         3c:e5:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:59 2025 by rpki-client