Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e39362e302f31392d3234203d3e203137323232.roa
File:                     3138372e31362e39362e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          4HK+SRBFJ2UP3JWDePTgUZrS05mj9co5TJ/w8pruyXc=
Subject key identifier:   0B:3A:45:DB:A0:95:FB:D5:3E:F3:75:99:DB:BE:00:79:1D:AF:DB:96
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       56DADB53AB6E87362BAF5B9BABDCABA7679AC14C
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e39362e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:23 +0000
ROA not before:           Thu 06 Mar 2025 15:29:23 +0000
ROA not after:            Thu 05 Mar 2026 15:34:23 +0000
asID:                     17222
IP address blocks:        187.16.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:da:db:53:ab:6e:87:36:2b:af:5b:9b:ab:dc:ab:a7:67:9a:c1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:23 2025 GMT
            Not After : Mar  5 15:34:23 2026 GMT
        Subject: CN=0B3A45DBA095FBD53EF37599DBBE00791DAFDB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:e1:5a:ce:4e:f9:8d:2f:61:2a:b4:5b:2e:
                    96:7d:92:cd:8a:ea:13:46:a8:9d:04:9f:fa:64:b0:
                    dc:97:78:c3:36:20:d5:b3:cd:cb:8f:b5:af:b7:66:
                    c6:be:20:2e:4b:ff:76:67:3d:f2:bb:94:72:d8:62:
                    f8:13:13:42:a4:75:fc:fa:5f:75:0d:5d:fa:0c:18:
                    c7:de:95:a3:30:53:8b:79:1a:60:1a:78:01:e4:75:
                    4f:cf:4d:24:6c:e0:69:5d:a7:61:90:ec:10:1d:0c:
                    6e:2b:1f:c1:fd:af:00:c3:5f:14:b4:ca:08:ab:a2:
                    95:0c:06:5f:c3:ac:19:d0:a7:fe:44:96:7b:90:e7:
                    13:df:51:83:bf:10:37:92:b4:ba:ff:d0:92:18:5f:
                    c3:4e:03:f5:44:48:cd:09:6a:e7:3a:c6:80:a0:b7:
                    53:7d:bf:1d:db:2f:1d:f3:b8:64:fb:de:8c:38:c0:
                    52:fa:75:6a:25:c7:43:fc:4d:93:b1:b6:89:f6:f7:
                    75:2e:c3:7b:44:2a:f2:d8:04:c1:01:bb:81:c6:66:
                    26:6e:2d:58:6e:22:dc:f4:e8:1f:4a:50:1f:66:56:
                    cb:2b:ab:6e:de:ae:61:60:ad:dc:4c:f9:35:10:93:
                    f9:d7:89:fb:85:35:3a:ed:18:fb:b2:5e:13:78:f5:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3A:45:DB:A0:95:FB:D5:3E:F3:75:99:DB:BE:00:79:1D:AF:DB:96
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138372e31362e39362e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:b1:c6:fc:0b:38:28:fa:c2:12:e8:e6:b2:9a:f2:7e:ec:b5:
         85:19:69:31:8a:96:8c:c0:ca:e6:3b:ad:90:b4:99:fa:d1:9f:
         ea:45:8f:d0:41:ab:01:d8:a4:3a:be:87:7e:59:09:4d:03:80:
         b6:8c:a0:71:97:1e:23:92:6e:70:f3:4a:cb:8c:ba:61:3e:af:
         22:5c:c8:40:5b:99:20:b7:62:25:9a:2e:15:a6:ed:e1:b4:fb:
         ff:bc:ff:1e:84:1d:72:2c:75:49:2b:ad:2f:16:f6:d2:3e:2f:
         c5:ff:95:50:cd:d7:ea:23:7c:23:f2:c1:0e:9c:db:21:d3:9b:
         57:2b:22:ee:c3:1f:14:63:a0:b2:20:27:e2:01:07:5c:9e:bc:
         29:f8:d0:b9:4a:87:40:ec:2c:d5:f7:3c:df:50:dc:66:92:70:
         7d:d0:8a:93:cf:d0:0c:3d:db:2d:97:6d:2f:87:4b:d5:48:51:
         59:d5:42:91:12:ba:cf:14:c1:5a:4b:ab:85:7c:00:47:f4:9a:
         3e:03:c3:31:aa:5a:95:ae:7b:ab:44:cf:f3:69:20:aa:17:fc:
         c7:64:8e:97:49:c3:b0:7d:56:9f:0f:cf:03:47:50:17:c8:96:
         60:ca:14:d8:59:03:b0:25:70:b3:af:c5:c9:12:f5:f1:ef:04:
         31:8d:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:40 2025 by rpki-client