Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa
File:                     3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa (raw, json)
Hash identifier:          gh41LFwF+u1CGH3t1awGlWGB+7VMCKGn2VE7Oiy7Uk4=
Subject key identifier:   EE:89:80:59:DE:3F:AC:3E:7B:A9:E1:4E:C4:C8:AE:48:62:B5:EA:42
Certificate issuer:       /CN=12D902AA004E1396EDA97BD4212288390A55D9A9
Certificate serial:       5C6F81D2AE63BF21F3CF1DE6435B3563D6677124
Authority key identifier: 12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa
Signing time:             Mon 20 Nov 2023 17:50:34 +0000
ROA not before:           Mon 20 Nov 2023 17:45:34 +0000
ROA not after:            Mon 18 Nov 2024 17:50:34 +0000
asID:                     262698
IP address blocks:        187.102.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6f:81:d2:ae:63:bf:21:f3:cf:1d:e6:43:5b:35:63:d6:67:71:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D902AA004E1396EDA97BD4212288390A55D9A9
        Validity
            Not Before: Nov 20 17:45:34 2023 GMT
            Not After : Nov 18 17:50:34 2024 GMT
        Subject: CN=EE898059DE3FAC3E7BA9E14EC4C8AE4862B5EA42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:2e:bd:6f:cc:5d:40:f6:c7:ab:ac:00:6b:
                    1b:36:62:40:12:f2:eb:f5:8d:cb:0d:34:c0:29:8f:
                    6f:a2:18:b1:1b:ff:1f:35:5f:22:80:9f:96:6f:f6:
                    b3:b6:6c:9b:54:79:29:1a:1f:14:d3:a2:ad:0c:ed:
                    9d:2d:38:10:14:44:9c:fc:98:f1:9a:71:aa:06:84:
                    61:94:01:8b:02:81:78:cb:52:6c:c7:c5:cc:22:c5:
                    d3:84:6a:16:ca:84:e4:ba:37:70:4c:ae:bc:4a:c7:
                    1c:ac:73:c0:b0:ae:9b:1e:1e:7c:e5:c9:88:e3:3a:
                    12:27:b0:86:84:8b:db:42:58:ff:04:00:ef:0f:98:
                    ab:b5:c7:2b:73:c9:1f:fd:11:39:e9:59:a5:aa:54:
                    a6:24:7d:d7:73:06:d9:ed:1b:8a:f9:1b:01:65:ee:
                    76:c2:e1:56:09:ae:6c:2a:58:02:35:e5:66:aa:67:
                    3e:1b:80:f0:59:bc:d5:2e:2b:db:be:71:a5:c3:44:
                    45:12:6d:5f:29:ae:0e:bc:15:8c:09:d8:b4:2a:04:
                    6a:83:16:61:0d:11:09:ac:84:d0:98:a5:77:92:56:
                    b0:cb:86:a0:3f:27:5b:73:97:17:3b:93:0f:c6:a2:
                    30:37:ca:b9:d2:d1:9e:1d:81:5e:5b:eb:75:21:37:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:80:59:DE:3F:AC:3E:7B:A9:E1:4E:C4:C8:AE:48:62:B5:EA:42
            X509v3 Authority Key Identifier:
                keyid:12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/12D902AA004E1396EDA97BD4212288390A55D9A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:3a:59:d8:ac:eb:38:cf:9a:51:3a:85:d0:29:ed:f8:44:
         5e:33:3f:f6:37:14:92:99:bb:4b:3d:30:a0:1c:d6:24:3d:76:
         0a:8d:c1:1b:2f:76:bb:40:d0:9d:91:63:b2:41:2e:39:d9:64:
         86:c8:4b:e3:9c:64:54:ff:03:f2:37:43:b0:c7:20:26:26:0e:
         4b:cb:77:3c:72:0d:f3:5b:34:e2:1e:d0:1d:10:00:8f:6c:e0:
         db:02:e6:cd:1a:26:bb:c8:23:21:e3:96:09:62:54:e0:25:47:
         52:be:41:7d:7e:a6:8d:00:8e:37:f3:94:54:c6:50:c3:8d:5d:
         3c:51:4e:01:70:c8:3e:63:7c:f7:69:7d:f7:dd:8d:46:80:36:
         89:f7:4b:b2:4b:ec:bd:57:76:80:6d:8d:4e:ce:e0:0f:a4:3f:
         ae:71:68:e2:87:12:8b:4e:ea:f8:da:9a:7a:65:69:c0:82:7d:
         a0:e5:45:f8:86:f7:33:a8:19:1d:f1:d7:df:9a:6a:ac:39:6e:
         e4:78:35:d7:dc:4c:3d:72:a8:e1:51:09:bd:43:a0:fa:9c:49:
         f4:f1:f3:7c:b2:9e:de:16:e1:66:0e:f1:f0:a9:fd:b1:4d:1d:
         3c:a9:ec:15:54:b1:09:98:5b:1b:b7:a0:4e:20:93:b4:03:3c:
         77:56:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:47:09 2025 by rpki-client