Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34322e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e34322e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          iaP5EOvMsjLH5m+IovsuFazykSvUScSeKwZYcTy4sWE=
Subject key identifier:   E9:F8:0F:DF:5C:13:08:20:46:0C:9A:76:B9:59:C9:B3:0B:6E:C5:47
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       5BDA4081A83654D612318F2097C52FD4FB4AA804
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34322e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:25 +0000
ROA not before:           Thu 14 Dec 2023 14:52:25 +0000
ROA not after:            Thu 12 Dec 2024 14:57:25 +0000
asID:                     28246
IP address blocks:        187.1.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:da:40:81:a8:36:54:d6:12:31:8f:20:97:c5:2f:d4:fb:4a:a8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:25 2023 GMT
            Not After : Dec 12 14:57:25 2024 GMT
        Subject: CN=E9F80FDF5C130820460C9A76B959C9B30B6EC547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:63:0a:41:02:5b:61:8f:b1:15:7f:8f:60:
                    ec:91:74:69:50:59:de:93:7c:70:71:3a:97:58:09:
                    b7:04:f7:8d:78:c3:fa:99:39:97:5f:f6:4c:ea:42:
                    7e:b6:67:eb:a5:ff:ea:fc:3f:2a:7b:05:2c:46:60:
                    32:8b:ad:dc:70:64:55:3b:44:9a:f8:e6:be:b8:da:
                    bf:ca:1c:5b:32:bd:c9:4d:25:64:11:67:0f:9d:3c:
                    8e:89:17:c4:d0:4f:93:f2:f9:5f:1d:f7:5d:7f:71:
                    8a:08:be:6e:f9:16:61:e0:9b:d8:ee:e2:4f:83:01:
                    65:a1:3a:26:de:43:f3:7a:c5:c3:d7:13:66:d0:4a:
                    49:3a:35:1e:8e:f7:a9:79:05:e3:c7:40:56:1c:25:
                    1f:3b:07:21:5d:d7:c1:f4:51:4c:e8:eb:8e:58:e4:
                    ce:1f:0e:4a:67:80:72:fe:cd:ec:2e:d3:b8:c3:b7:
                    ab:3c:4e:d9:05:ab:7d:85:74:93:01:2f:2a:44:f6:
                    b7:22:7f:2c:fc:64:04:08:d5:ed:0b:89:71:d0:26:
                    e0:87:c7:20:76:18:35:26:ec:b3:7b:a0:a0:d5:2c:
                    0a:86:61:43:e6:8b:72:90:39:52:19:81:e2:88:5a:
                    1e:e9:ac:2f:ec:cf:6d:bc:89:55:ae:c2:4d:ed:51:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:0F:DF:5C:13:08:20:46:0C:9A:76:B9:59:C9:B3:0B:6E:C5:47
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34322e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:b3:fc:05:26:23:52:da:e8:eb:fb:0f:94:c7:d0:a9:ec:
         14:0d:9d:2e:b3:22:04:b6:1e:87:3a:b8:2c:65:c2:fa:2d:54:
         98:5e:33:91:45:9c:59:e0:2c:ff:41:a6:9a:ce:29:9a:f6:be:
         a2:15:c5:29:4f:29:20:9a:0d:c8:de:25:50:f9:33:40:b8:58:
         50:5f:6c:72:44:98:69:6f:a6:d0:42:c4:02:bc:04:43:d9:ea:
         60:da:bb:e9:ca:84:de:af:ea:85:1f:1c:95:e2:d4:d2:ad:23:
         3a:38:5f:07:3f:f9:3d:f0:c8:b1:7b:75:0b:8b:4e:27:c8:75:
         7b:82:58:15:c3:eb:e7:f6:cf:84:2b:43:36:52:c0:db:6f:76:
         4d:1e:db:31:b0:11:ae:8a:7c:86:d8:40:6d:d4:f8:44:f8:ac:
         f1:59:15:4b:5b:3d:68:c1:4b:4d:e9:6f:49:1c:a2:38:6d:e0:
         d8:cc:bd:6f:12:e6:4b:a1:2f:f0:4f:38:f4:7a:ee:ec:31:bb:
         ec:47:31:28:76:94:15:25:a5:c5:46:9f:ec:c6:3e:8d:91:f7:
         7c:9d:85:1e:61:eb:b3:94:5c:1a:51:9c:15:dc:4b:95:77:07:
         76:cf:2e:6c:61:6a:43:c8:81:89:4a:02:f7:b6:33:83:f5:6a:
         bc:13:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:51 2025 by rpki-client