Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34362e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e34362e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          puzrudv9ftrYRDP1/FSpBkSkTCITxWlwIO8STNrz62Y=
Subject key identifier:   DA:7C:87:14:40:86:08:E3:77:5D:12:75:88:87:8C:31:55:3F:B4:A2
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       7B84B3240F4EDE6D764A82625B868D0B5C710057
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34362e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:24 +0000
ROA not before:           Thu 14 Dec 2023 14:52:24 +0000
ROA not after:            Thu 12 Dec 2024 14:57:24 +0000
asID:                     28246
IP address blocks:        187.1.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:84:b3:24:0f:4e:de:6d:76:4a:82:62:5b:86:8d:0b:5c:71:00:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:24 2023 GMT
            Not After : Dec 12 14:57:24 2024 GMT
        Subject: CN=DA7C8714408608E3775D127588878C31553FB4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:35:6d:89:a2:63:af:aa:e0:3c:51:9c:bf:
                    9a:c7:28:49:06:b4:3f:65:c5:88:7a:58:5f:c9:c8:
                    2e:97:ec:21:35:57:fc:fe:5f:88:3b:59:f4:97:ed:
                    1c:d9:22:d0:46:fe:4b:66:69:7f:f1:37:71:f4:79:
                    80:e0:15:dc:02:cb:41:68:f3:40:94:0e:a8:d0:9f:
                    e6:42:ec:b6:1b:6c:c3:8e:f2:15:8a:27:68:fe:8c:
                    7d:15:3e:dc:43:db:a6:b4:42:16:7a:7e:69:e6:22:
                    af:60:6f:2c:e6:0f:d7:a4:01:42:de:69:52:47:b6:
                    99:59:d8:5a:1c:7a:0e:50:97:ae:aa:39:48:4c:e6:
                    ab:70:9e:fa:7e:33:a0:4f:9c:cc:81:44:29:e2:0d:
                    cc:cf:5f:e9:94:b6:b2:2b:a7:95:a4:4b:9d:be:29:
                    9d:83:49:cf:a6:0f:4f:3d:e1:26:7a:e7:bd:a3:d4:
                    f4:d1:2c:11:4b:61:83:46:1c:3d:18:f8:67:94:53:
                    dd:de:d3:d4:d0:7e:07:d2:b2:ca:fe:61:8f:45:45:
                    29:bf:4f:d4:65:b6:8b:2b:04:88:dd:1e:ac:a5:38:
                    b8:4c:bd:c7:42:03:af:0a:92:6b:ba:08:ee:2b:94:
                    d6:f7:bc:12:32:92:32:d2:c4:66:d3:2d:8d:d1:9f:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:87:14:40:86:08:E3:77:5D:12:75:88:87:8C:31:55:3F:B4:A2
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34362e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:3f:cb:57:16:d3:e3:38:9c:aa:ad:1c:f3:c7:2d:19:0d:46:
         91:cb:09:88:0d:3f:ba:c5:cc:dd:6d:4b:12:13:8e:5c:46:9a:
         17:be:ea:a6:58:04:de:9b:7b:fc:c1:4d:10:b5:14:5f:41:64:
         7e:86:11:48:8a:45:a3:2d:f8:a3:5b:96:e0:20:8f:94:38:1d:
         f2:df:61:d2:b2:60:f5:60:e6:a0:a1:69:5a:6f:49:7a:3f:ba:
         71:3e:aa:20:06:b9:7d:d6:60:da:a7:a3:53:5f:54:33:83:23:
         68:c9:d3:60:fe:d5:c4:bc:81:b7:e4:e4:0c:2b:d9:c2:c6:27:
         1d:5d:70:ab:8a:57:3b:17:bd:dd:5f:c5:8f:42:b7:a9:0f:d1:
         99:0a:b5:82:58:3c:8f:8b:a0:ac:96:e1:9a:96:c8:45:75:8a:
         7b:d9:7f:15:a5:e9:a8:d8:65:6c:cd:ea:5b:fa:4e:d7:ed:4f:
         a8:71:6c:f0:22:0e:32:c1:df:6a:b9:98:52:48:ff:01:ad:50:
         c6:65:0c:65:b1:57:00:58:fb:b0:85:2c:85:c3:e4:73:38:98:
         c9:b7:e7:04:ad:65:a0:71:89:ca:e7:4e:e6:63:3a:94:d6:78:
         49:3a:4b:e0:e4:14:f8:e8:d1:d0:56:12:60:c4:48:b0:9a:08:
         b6:e5:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:40 2025 by rpki-client