Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33352e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e33352e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          JsWaaa9fTOyEzXNQoCxDCSRg5i8FEb8c34dIEUiX8iY=
Subject key identifier:   CD:81:22:EB:9A:F7:5A:7E:A9:15:D0:9E:D6:33:7E:75:18:6D:C1:32
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       51EBCA15BC1F5601978AE87B927736D2C72EC84C
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33352e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:24 +0000
ROA not before:           Thu 14 Dec 2023 14:52:24 +0000
ROA not after:            Thu 12 Dec 2024 14:57:24 +0000
asID:                     28246
IP address blocks:        187.1.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:eb:ca:15:bc:1f:56:01:97:8a:e8:7b:92:77:36:d2:c7:2e:c8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:24 2023 GMT
            Not After : Dec 12 14:57:24 2024 GMT
        Subject: CN=CD8122EB9AF75A7EA915D09ED6337E75186DC132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:a6:d9:e8:51:b6:31:be:c6:42:97:53:21:
                    3b:9a:28:41:36:d8:b2:7e:14:77:a0:63:e0:c9:7e:
                    be:6b:aa:f6:c0:2b:6f:17:de:b9:76:60:a9:b0:bc:
                    48:2f:82:a2:a3:c7:4a:a9:25:67:ef:b0:c3:33:67:
                    3d:47:fb:d3:a7:17:e1:76:3d:bd:9f:f2:14:6d:1b:
                    cf:a4:99:4b:e2:20:ca:8d:96:48:d4:80:90:a7:2c:
                    08:8d:cf:fe:67:a8:44:15:00:8c:6e:aa:61:8d:c1:
                    06:f0:09:9f:f5:0e:8a:a0:77:7b:99:59:9f:1f:2f:
                    60:c8:74:be:8c:0b:11:e8:28:9f:9c:8e:cd:da:eb:
                    90:d6:72:78:19:64:de:b2:6d:61:94:d2:ef:2a:0e:
                    7d:07:88:95:05:cb:92:51:46:46:02:0c:cf:fd:b8:
                    e1:8f:e9:6d:54:5a:fe:5a:6b:11:65:9b:39:25:be:
                    86:db:87:57:4f:8c:c1:72:c2:b0:4d:43:20:80:b0:
                    cc:ca:bc:f7:12:f6:90:61:dd:38:cd:f3:8f:28:bb:
                    83:20:4d:5d:2b:74:ce:2c:12:e0:20:da:f3:aa:4e:
                    14:e4:3e:8c:0c:8d:f9:9b:2b:3a:d1:71:de:d9:25:
                    16:74:d5:7a:e5:77:61:10:2f:27:30:31:ea:de:c5:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:81:22:EB:9A:F7:5A:7E:A9:15:D0:9E:D6:33:7E:75:18:6D:C1:32
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33352e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:b4:0f:d3:8d:1f:e9:19:e2:c8:11:ce:8b:68:fd:b6:1b:
         22:13:ac:88:24:8d:61:25:73:00:86:ec:42:5d:61:45:cd:9f:
         e9:14:d2:39:78:0b:33:8c:21:46:84:a7:71:e1:60:d8:d9:bd:
         cd:07:75:84:92:23:f8:c9:97:ab:09:4b:a4:e7:6f:5d:86:4c:
         4e:33:b0:2a:17:0e:f4:7f:67:6e:ab:65:cc:81:ac:2d:e2:fe:
         d4:d7:48:62:94:a1:35:b2:bd:a2:0c:69:1c:9e:68:e8:f3:08:
         ca:7f:28:a4:9b:22:b6:fd:6c:26:ec:5d:63:66:73:a7:c9:9c:
         0a:71:65:77:a0:5f:9c:de:10:6b:50:48:96:02:06:d0:e3:8d:
         c6:04:c5:1b:28:89:23:49:27:43:e3:8c:4a:de:0f:8f:10:2d:
         c1:41:0f:bf:9e:cd:87:53:b6:51:9a:3e:36:6c:66:7c:60:ee:
         4b:1b:75:09:c4:c8:9c:ec:a0:48:ad:5a:ff:7d:59:1e:8c:88:
         be:e1:64:00:a8:05:13:60:a4:ee:d5:56:87:b0:77:b5:99:c9:
         02:27:f2:4b:79:47:f2:78:6a:18:82:2a:e1:96:18:98:99:8f:
         50:b2:28:12:39:74:92:ca:47:0b:7f:85:77:7a:3f:44:75:3f:
         7a:a4:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:21:55 2025 by rpki-client