Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35362e302f32342d3234203d3e20323632393632.roa
File:                     3138372e38352e35362e302f32342d3234203d3e20323632393632.roa (raw, json)
Hash identifier:          eFqHOUsxVgm7Iz8bCS2NJo7pTHU7BPwFfoNG493Qm1E=
Subject key identifier:   9A:CF:DB:B1:5C:89:AE:49:F7:AF:A6:B8:4E:78:15:D7:E5:2D:C0:EB
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       19AF84224F16945F01A829F240536825CDF8A478
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35362e302f32342d3234203d3e20323632393632.roa
Signing time:             Fri 13 Oct 2023 17:10:04 +0000
ROA not before:           Fri 13 Oct 2023 17:05:04 +0000
ROA not after:            Fri 11 Oct 2024 17:10:04 +0000
asID:                     262962
IP address blocks:        187.85.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:af:84:22:4f:16:94:5f:01:a8:29:f2:40:53:68:25:cd:f8:a4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:05:04 2023 GMT
            Not After : Oct 11 17:10:04 2024 GMT
        Subject: CN=9ACFDBB15C89AE49F7AFA6B84E7815D7E52DC0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:5e:5e:b5:80:39:3d:82:be:ee:d3:89:37:
                    81:34:f0:72:00:a6:96:f2:97:11:cd:54:4f:ea:1f:
                    ec:d7:1b:ae:66:03:b3:09:9b:74:16:1a:1a:28:fe:
                    cd:ed:10:65:3f:0b:d6:d0:5b:43:5f:bd:a5:8f:4c:
                    a6:37:22:78:10:bd:66:1b:59:41:ea:2d:77:db:0b:
                    9e:1c:73:99:b4:f7:38:1b:ea:23:89:a9:af:43:89:
                    b3:ca:79:83:6b:13:c8:9a:30:64:36:03:db:d8:51:
                    c0:a9:71:94:72:9b:8d:f7:6a:9d:02:81:e3:66:6a:
                    29:5d:01:20:cc:42:0f:98:de:5e:bb:a6:24:10:19:
                    30:69:6e:d7:60:39:67:90:49:18:69:a7:87:8f:3a:
                    ef:d1:ae:dd:0a:94:32:b3:bd:fd:d9:5c:88:d0:59:
                    36:bb:c8:b8:eb:d2:84:c3:61:7a:61:e3:a7:fe:23:
                    b3:cf:48:a0:d4:06:09:2c:13:1c:fe:b2:ff:25:6a:
                    ff:9b:4a:84:e3:a1:04:d2:05:2c:22:51:db:92:2f:
                    76:26:96:af:fa:ce:99:6a:da:7f:b3:de:e6:87:ad:
                    ad:36:a0:d5:93:ac:8d:bd:d2:9b:ec:3f:8b:ea:b1:
                    51:a6:d7:4e:39:b0:be:76:7a:8f:8e:c9:2f:97:14:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:DB:B1:5C:89:AE:49:F7:AF:A6:B8:4E:78:15:D7:E5:2D:C0:EB
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35362e302f32342d3234203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:20:d4:57:61:64:2c:6e:bd:a0:d1:63:6a:22:f6:48:55:
         32:89:97:57:2e:19:2e:21:a8:23:1c:ce:0c:91:57:06:51:14:
         79:ab:18:d7:d4:35:55:a9:c2:30:63:7c:c4:43:62:de:20:33:
         66:9c:e0:b8:dd:0b:b4:87:6b:09:7d:16:c5:c4:96:35:83:cc:
         61:f3:dc:c0:a7:b3:07:4d:37:dc:27:bb:17:c0:f7:4f:0b:e4:
         bb:88:a0:4d:3a:b3:19:88:77:aa:d2:a4:20:72:cd:3b:6a:f5:
         15:48:90:34:22:8e:3a:05:bb:d7:e0:c2:2b:bf:c1:8f:05:68:
         c7:ac:be:b9:6a:a6:82:0f:ee:67:f5:3e:3b:6c:97:bb:c7:9c:
         99:86:21:28:33:d6:94:7c:cc:3e:15:cd:f1:4f:82:57:36:d4:
         05:4d:bf:47:50:97:38:c0:69:42:39:d9:81:b2:1b:b9:81:0d:
         21:07:e4:4e:26:e5:ae:aa:fa:fd:e9:2f:59:b2:a4:f4:7b:29:
         96:fd:d2:14:f2:63:51:48:83:70:a4:12:03:6c:9e:c4:5a:f2:
         4d:f6:bf:ab:b1:d7:ce:d4:e0:1a:d2:37:4b:2e:46:6b:80:0c:
         6d:91:38:09:fe:67:d8:90:fa:cc:53:4a:1c:51:9a:97:b9:db:
         0d:c9:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:33:34 2025 by rpki-client