Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3136312e33382e34302e302f32332d3234203d3e203137323232.roa
File:                     3136312e33382e34302e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          fepfUt3Yndgt5a2CWi6NOao9I/6rBwiWrqhag9cEpwY=
Subject key identifier:   47:E8:07:6C:AB:A1:4D:5F:FA:B0:4A:A9:B4:D7:78:2A:6F:D8:23:11
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       41D0003D6296EB6D1A89D18E701B2CA2F575726E
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3136312e33382e34302e302f32332d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        161.38.40.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d0:00:3d:62:96:eb:6d:1a:89:d1:8e:70:1b:2c:a2:f5:75:72:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=47E8076CABA14D5FFAB04AA9B4D7782A6FD82311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:05:6e:43:3b:af:aa:2d:c6:b3:ba:fe:6c:
                    24:b5:76:26:3b:27:76:ee:d2:ee:a1:8a:37:3d:d9:
                    e5:1a:61:c5:b7:fb:eb:cd:75:10:9c:d3:6e:0a:7d:
                    5b:a2:2c:0f:e1:f7:fb:d5:2d:f9:79:73:95:31:37:
                    4f:2e:ad:ec:95:ce:96:af:84:05:7d:13:02:0f:d6:
                    df:47:61:52:75:ba:a7:86:de:70:be:0c:08:1b:b8:
                    c2:28:8e:d8:4b:95:0c:f9:b5:a8:4a:81:72:6c:72:
                    58:8c:39:bf:1f:84:1f:fa:5d:fa:83:2c:6e:e5:2e:
                    1c:0a:1b:d6:d9:42:b6:20:52:ab:54:53:39:da:e5:
                    89:d3:71:24:ee:5c:67:0e:a9:23:b4:be:0b:65:50:
                    19:d4:c7:02:e2:5c:52:92:1c:51:ce:cf:98:9b:e2:
                    4f:e6:5d:5b:ec:94:f3:1e:e1:00:59:24:8f:85:c2:
                    9a:bc:0c:71:1c:da:a7:80:db:36:b1:01:e5:e3:fe:
                    81:96:8a:35:c1:40:04:d2:cb:56:61:29:21:ab:89:
                    04:84:12:87:17:1c:68:3d:22:c8:a3:c9:4e:36:79:
                    40:2f:29:e6:71:e0:cf:c6:77:2b:e4:04:c4:9a:7d:
                    40:a9:07:06:8e:28:9d:36:84:57:83:3b:9a:b8:f2:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E8:07:6C:AB:A1:4D:5F:FA:B0:4A:A9:B4:D7:78:2A:6F:D8:23:11
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3136312e33382e34302e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:47:e9:4a:5d:d0:b3:4d:f9:b0:62:f2:83:a3:d6:e4:81:
         bb:7e:1d:86:e7:2e:9f:9d:ce:69:a1:11:95:10:02:28:63:3d:
         98:14:6a:88:30:9b:92:e4:16:94:d2:8c:d4:60:6a:d6:16:51:
         a6:b9:77:84:2c:90:a1:0f:27:68:6b:06:ea:0c:3d:40:d0:26:
         cb:e0:59:cc:1c:d6:53:7b:b8:e3:43:2b:c2:e3:4f:ee:6b:04:
         83:1f:70:1e:29:e7:4a:17:2d:f7:f1:12:e5:d1:95:e6:5b:af:
         e8:87:8e:fb:33:c6:bb:36:91:37:0b:0f:98:45:9c:32:d0:f7:
         a8:92:01:03:56:97:a8:b7:5d:c9:3b:57:61:ae:27:d9:b8:13:
         05:fe:23:4c:c2:b8:58:82:bf:21:31:69:98:d2:e8:41:33:1f:
         2a:84:b0:ec:ab:03:f0:96:f6:2e:90:9b:76:a5:b5:12:68:f8:
         42:3d:63:70:0b:09:8f:2f:2b:55:21:a9:5a:05:36:fd:22:e0:
         54:96:a9:bd:3e:1b:87:e4:9c:07:03:3f:92:63:78:b0:7d:88:
         91:89:f7:ae:7c:56:a9:30:3b:cd:30:68:33:2e:35:d4:fa:08:
         93:a2:b2:30:95:22:91:95:98:18:3a:6c:b7:d4:6d:f6:47:6d:
         ed:06:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:46 2025 by rpki-client