Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35372e302f32342d3234203d3e20323632393632.roa
File:                     3138372e38352e35372e302f32342d3234203d3e20323632393632.roa (raw, json)
Hash identifier:          q2XI6LTkzKUoEDK2srCG4aU5OpChuapnnCJyQFR+k5E=
Subject key identifier:   D1:49:8A:92:0E:19:C2:28:2F:50:FC:61:02:D7:AD:E3:69:D1:EC:6E
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       0E775E5AF5FF8B56AA6A48DEECD0EFF959F3ABE4
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35372e302f32342d3234203d3e20323632393632.roa
Signing time:             Fri 13 Oct 2023 17:09:48 +0000
ROA not before:           Fri 13 Oct 2023 17:04:48 +0000
ROA not after:            Fri 11 Oct 2024 17:09:48 +0000
asID:                     262962
IP address blocks:        187.85.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:5e:5a:f5:ff:8b:56:aa:6a:48:de:ec:d0:ef:f9:59:f3:ab:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:04:48 2023 GMT
            Not After : Oct 11 17:09:48 2024 GMT
        Subject: CN=D1498A920E19C2282F50FC6102D7ADE369D1EC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:b1:ea:2f:46:8f:6a:9d:55:97:7d:b5:94:
                    fa:18:a6:bc:ce:86:8e:a7:b1:8e:90:fd:19:6b:65:
                    1f:61:55:e4:01:6d:cb:aa:a0:86:55:34:ef:39:97:
                    a5:78:b6:45:64:a8:3f:1d:00:68:4d:46:b7:6b:94:
                    58:61:42:de:c7:80:36:b8:96:89:7c:5e:15:05:27:
                    ab:57:16:31:d6:22:55:59:82:d7:0c:9d:a6:47:b8:
                    de:f4:e5:6d:1b:b6:3e:10:cd:e0:6a:89:a3:e3:e4:
                    da:27:62:04:5e:d4:69:dd:2f:c4:18:f9:bf:a1:2c:
                    24:76:f4:41:b4:66:1f:e5:b2:b0:78:bb:f7:76:72:
                    90:70:99:c5:b4:5e:c9:15:71:97:a5:45:86:c7:c3:
                    58:7d:17:31:9d:73:a0:83:aa:2b:ff:62:65:34:32:
                    45:b9:13:0b:2b:97:b1:86:ab:45:36:ef:89:4a:7a:
                    c4:5f:33:e8:96:6f:6b:55:e7:37:53:9f:84:31:09:
                    c2:77:a1:45:d8:38:be:67:93:62:44:2d:21:bd:aa:
                    73:91:06:95:80:70:cf:ff:6c:1c:b2:91:74:91:9e:
                    59:28:59:c5:94:3b:02:52:e4:ea:60:23:d0:3e:da:
                    18:30:99:77:8e:5e:6e:c7:06:88:72:36:b6:38:55:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:8A:92:0E:19:C2:28:2F:50:FC:61:02:D7:AD:E3:69:D1:EC:6E
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3138372e38352e35372e302f32342d3234203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:46:1d:23:be:62:26:4e:8c:18:03:cc:4b:64:c8:1d:1f:
         f9:93:bb:cc:61:52:42:e5:1b:f7:20:96:3b:cb:e5:82:2d:4a:
         17:06:e7:16:67:ab:29:56:53:62:76:cf:a9:cf:53:98:c6:f9:
         94:8b:6f:89:76:2c:d4:2a:07:da:12:0f:11:e0:fb:1d:36:43:
         5a:8b:cd:e4:14:48:65:f3:de:d9:5d:72:22:c1:ab:ae:1a:33:
         cd:09:59:f7:be:56:7a:74:d7:9c:ea:32:d9:0e:3e:b6:e4:a1:
         64:be:e1:fb:08:06:46:9d:cf:c2:d5:79:30:f8:ac:56:8d:10:
         82:3c:30:ce:2a:33:2d:2d:88:26:45:0d:88:2a:a6:b9:05:25:
         d4:93:8f:78:04:0f:37:22:9e:1b:64:65:dd:33:44:f4:14:0e:
         7d:1a:91:27:8a:fd:10:b2:9f:f0:44:cc:77:d0:47:7b:55:18:
         ac:eb:75:44:09:3f:ec:bb:5d:30:af:36:9f:54:09:92:9f:72:
         48:c7:00:87:16:0a:71:8d:cc:c4:0a:96:db:fc:c7:1a:63:e2:
         bd:8a:9e:c3:d9:94:23:0a:33:dc:8a:23:e9:6d:b8:e7:9b:c9:
         70:4a:38:d2:79:87:ac:79:9a:34:f7:95:98:45:c5:db:ba:90:
         c5:90:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:26 2025 by rpki-client