Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34312e302f32342d3234203d3e20323632363938.roa
File:                     3138372e3130322e34312e302f32342d3234203d3e20323632363938.roa (raw, json)
Hash identifier:          liGWtEijAxSJ5CZ28ejxCKxiVJibK6NgZacNTdVy6Ko=
Subject key identifier:   2D:C4:B9:7A:6E:3A:A1:A3:DF:5D:2E:B2:DA:0A:C6:B4:49:19:38:CD
Certificate issuer:       /CN=12D902AA004E1396EDA97BD4212288390A55D9A9
Certificate serial:       2872D5CAF7CC8B6C2113C7D5DAF00564F41EE176
Authority key identifier: 12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34312e302f32342d3234203d3e20323632363938.roa
Signing time:             Mon 20 Nov 2023 17:50:20 +0000
ROA not before:           Mon 20 Nov 2023 17:45:20 +0000
ROA not after:            Mon 18 Nov 2024 17:50:20 +0000
asID:                     262698
IP address blocks:        187.102.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:72:d5:ca:f7:cc:8b:6c:21:13:c7:d5:da:f0:05:64:f4:1e:e1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D902AA004E1396EDA97BD4212288390A55D9A9
        Validity
            Not Before: Nov 20 17:45:20 2023 GMT
            Not After : Nov 18 17:50:20 2024 GMT
        Subject: CN=2DC4B97A6E3AA1A3DF5D2EB2DA0AC6B4491938CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:61:13:97:ff:c1:bf:e1:dc:65:e8:a0:fa:
                    09:30:c7:b6:a6:e9:65:3e:20:bb:0b:f9:ca:8b:bf:
                    35:20:b0:7e:73:b8:b8:af:1a:bf:68:c7:d9:28:5d:
                    17:68:31:63:29:67:79:18:22:a8:b3:23:d7:d0:48:
                    cc:39:b5:f9:b2:ed:6b:11:8f:06:dc:66:88:a7:67:
                    07:8d:1a:67:f7:3a:19:d8:f0:0b:4b:d5:ba:d4:a0:
                    a0:b4:14:d1:9b:ed:69:1d:bf:e2:e5:f2:63:df:ef:
                    cb:a3:b2:20:6d:7b:75:fb:27:7f:e1:08:7f:02:77:
                    5d:eb:9d:fe:1a:ee:44:e5:e8:7f:d8:c1:6d:65:9c:
                    a1:36:9d:5f:a7:15:d0:30:42:8f:07:4b:4c:56:4a:
                    ef:b3:23:ae:4d:fc:71:14:83:7e:7b:63:56:4d:80:
                    d8:59:05:fa:73:eb:d4:8d:f4:6c:24:c1:62:58:9f:
                    e1:d7:fa:e4:e9:b3:95:57:4f:7d:4b:b8:22:33:52:
                    1d:a4:77:b5:ec:3b:d4:1f:36:f0:dd:e5:25:fc:d4:
                    9b:3d:a9:97:8b:45:35:1f:c7:16:30:69:30:9d:8c:
                    af:81:3e:1c:da:d0:4e:2a:ab:56:dc:6a:cd:33:e0:
                    69:b8:09:b0:02:3e:80:98:97:9d:81:da:4c:be:92:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C4:B9:7A:6E:3A:A1:A3:DF:5D:2E:B2:DA:0A:C6:B4:49:19:38:CD
            X509v3 Authority Key Identifier:
                keyid:12:D9:02:AA:00:4E:13:96:ED:A9:7B:D4:21:22:88:39:0A:55:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/12D902AA004E1396EDA97BD4212288390A55D9A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D902AA004E1396EDA97BD4212288390A55D9A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/0/3138372e3130322e34312e302f32342d3234203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:ad:24:f9:32:a7:38:67:a7:e1:2e:7a:3f:7c:63:a7:64:
         f2:5d:8b:b5:b8:5a:6c:f1:09:72:16:b6:5a:1b:8a:d8:4a:30:
         51:dd:18:df:20:14:50:10:f9:7f:f1:f8:db:35:20:8b:63:c8:
         e2:62:35:14:79:b7:41:64:9b:c2:32:6f:0f:f3:86:20:0f:df:
         93:dd:89:7b:08:cf:07:38:ad:78:6f:05:6a:81:72:b7:d9:11:
         f1:f1:2c:d7:7d:d0:14:4b:5a:cb:20:bf:bb:bf:b3:53:90:50:
         c7:ae:3e:15:ae:d5:9d:6e:9a:19:3b:a0:99:03:7f:9d:52:a2:
         74:0c:81:08:54:4e:b7:1a:7c:29:f9:6d:94:65:40:c4:26:24:
         fd:2e:e7:96:28:0a:72:b8:0d:65:7b:7f:9c:cc:bb:42:4a:ab:
         e4:4c:12:92:15:8c:34:26:e7:ae:68:a9:39:bd:1e:c9:1e:7c:
         d5:fb:a5:5d:d9:84:cf:7c:82:b4:62:c8:65:98:9b:9e:ae:6f:
         57:79:ec:85:e8:4d:e1:c4:83:b4:2b:1a:87:5d:26:9a:75:6f:
         09:32:d6:46:d6:c9:8b:f9:ea:be:0e:2e:1d:f4:92:94:0a:76:
         b4:c9:90:c6:7d:1b:98:af:49:6a:09:08:90:ae:a8:fe:8b:13:
         00:0e:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:41:14 2025 by rpki-client