Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa
File:                     3138372e33332e3139322e302f32302d3230203d3e203533303836.roa (raw, json)
Hash identifier:          3/RlUhX0pWY2pflG3Smk7CbKa0qss6QeoYDj9sazRqI=
Subject key identifier:   98:F8:CA:D7:EB:C2:2D:EA:AD:5C:57:F7:11:B1:41:29:18:D8:F7:6C
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       74D71CAD1A3EA240D7B192879692ED013F8E0175
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:22 +0000
ROA not before:           Thu 06 Mar 2025 08:40:22 +0000
ROA not after:            Thu 05 Mar 2026 08:45:22 +0000
asID:                     53086
IP address blocks:        187.33.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:1c:ad:1a:3e:a2:40:d7:b1:92:87:96:92:ed:01:3f:8e:01:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:22 2025 GMT
            Not After : Mar  5 08:45:22 2026 GMT
        Subject: CN=98F8CAD7EBC22DEAAD5C57F711B1412918D8F76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:61:bf:d6:18:5f:33:3e:ef:a9:68:e1:1e:
                    fa:0e:da:97:42:b7:20:66:4a:aa:5c:91:d4:92:94:
                    21:3d:61:35:65:fb:24:41:06:d3:e7:21:4e:f3:01:
                    3e:8e:1a:67:96:7f:b8:79:9d:f3:f5:5b:bb:9e:0a:
                    fb:16:09:23:35:50:f2:0e:fe:57:07:36:af:7c:02:
                    bd:c4:55:41:8d:a4:39:45:bf:4d:50:4d:b1:ac:57:
                    7d:df:b2:7f:0f:97:b6:1b:42:b2:3f:34:37:af:91:
                    2a:55:8c:a7:43:c1:75:1d:34:46:0a:1e:51:fc:04:
                    4e:c3:d5:ec:e4:ba:e5:ad:95:67:2d:43:f1:dc:1a:
                    ff:f7:01:60:e9:dc:b4:9d:37:5b:6e:05:e6:b9:4d:
                    3d:66:0c:a5:67:75:8f:1d:25:ba:53:53:2a:3f:c7:
                    27:36:41:2f:15:67:9d:a1:91:78:ff:75:06:f4:c8:
                    c9:44:a4:50:07:17:3e:e6:de:19:f5:c3:7a:37:3b:
                    a6:a1:06:0c:73:e9:1e:13:d4:53:15:d4:13:9c:a9:
                    81:fb:1a:85:40:82:83:cb:b7:51:46:2a:80:59:ac:
                    69:b7:df:cb:9d:85:ae:7c:35:21:6a:19:03:b8:d8:
                    3f:87:91:56:fb:e6:eb:e1:f8:c6:09:ef:84:6f:81:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:CA:D7:EB:C2:2D:EA:AD:5C:57:F7:11:B1:41:29:18:D8:F7:6C
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:71:a2:01:02:6c:d8:ed:93:ec:b5:27:ae:4c:10:f3:89:
         6f:d5:47:e3:21:40:7f:5e:04:44:0a:12:14:8f:79:7e:02:60:
         d3:b7:c5:81:8a:8e:6d:0a:86:bc:35:54:bf:b5:c8:70:9d:94:
         e1:4c:c4:b4:23:fd:99:e8:22:e2:31:ee:82:e6:32:37:8e:96:
         bd:3c:88:bf:3e:e1:b9:43:2a:0c:af:1b:40:e9:40:58:0f:8f:
         96:5d:6e:2e:47:7d:91:d0:8f:71:2d:b1:63:3d:0b:dc:8d:77:
         af:a4:f9:83:d9:70:fd:22:df:a9:ef:83:06:b5:15:e1:02:dc:
         9e:9d:78:86:b4:64:c4:ac:75:9c:5b:a9:46:e7:e5:c0:4d:67:
         ae:87:63:b1:4f:e3:f8:49:bf:ad:13:51:e8:b3:f2:22:13:48:
         53:49:9a:d3:74:af:d6:79:80:a0:82:09:da:ac:20:e1:34:c8:
         f7:71:5e:55:39:54:71:c1:87:f5:3f:fb:5f:3b:42:de:6e:cf:
         53:e5:e6:3b:e7:10:1a:93:52:11:f1:6d:59:38:24:66:95:cc:
         ad:27:a1:de:2b:42:b5:ef:5d:f3:51:01:9f:13:36:4e:e0:c6:
         3c:77:dc:06:ea:aa:a1:d3:3f:51:68:20:dd:24:e5:7d:17:7d:
         d0:a4:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:56 2025 by rpki-client