Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132312e302f32342d3234203d3e20323731363638.roa
File:                     3138372e3131312e3132312e302f32342d3234203d3e20323731363638.roa (raw, json)
Hash identifier:          ApF/i8VBuGcN4/mFELH9gl8pVLli5P2SrYAMbUgVyXk=
Subject key identifier:   18:B1:49:D5:ED:C8:7D:55:62:16:5C:46:D2:B7:B9:BD:27:6C:BD:F2
Certificate issuer:       /CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
Certificate serial:       639F67E80048FE05203A99F56047A70F1CDF5DCF
Authority key identifier: C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132312e302f32342d3234203d3e20323731363638.roa
Signing time:             Thu 11 Jul 2024 19:00:46 +0000
ROA not before:           Thu 11 Jul 2024 18:55:46 +0000
ROA not after:            Thu 10 Jul 2025 19:00:46 +0000
asID:                     271668
IP address blocks:        187.111.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:67:e8:00:48:fe:05:20:3a:99:f5:60:47:a7:0f:1c:df:5d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2
        Validity
            Not Before: Jul 11 18:55:46 2024 GMT
            Not After : Jul 10 19:00:46 2025 GMT
        Subject: CN=18B149D5EDC87D5562165C46D2B7B9BD276CBDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:3b:13:49:47:48:c7:41:43:5b:46:f2:c1:
                    63:99:9c:9f:b4:68:4e:f4:46:e7:63:33:1b:45:48:
                    0a:de:61:6c:63:a2:c6:29:06:f8:57:df:1b:80:28:
                    52:4f:f0:2e:db:6e:f3:b7:97:08:7d:04:78:4b:a8:
                    6d:22:aa:ee:8c:5f:61:d1:44:8a:ad:6b:56:30:cf:
                    27:a2:e7:bf:2e:d2:1f:f4:68:84:4d:30:48:a9:a8:
                    78:5f:de:54:6b:d3:66:42:44:07:19:6d:78:d5:e0:
                    96:ff:9e:df:a6:cb:1e:ba:2e:59:38:f7:de:3d:87:
                    6d:92:19:c7:02:7f:d1:2e:71:87:47:10:b7:8f:9f:
                    00:7c:b2:83:4e:cc:cb:a4:89:b4:46:85:98:4a:27:
                    d8:c0:f8:ea:13:c6:e5:d3:4b:43:2b:a9:db:e4:c9:
                    f2:53:61:01:99:2f:05:67:f1:9a:6a:3d:2f:3b:51:
                    73:51:15:d5:e7:4d:55:79:1d:f4:92:85:e0:0b:82:
                    c1:7e:87:90:87:cb:c9:4c:69:bd:25:29:01:e9:f0:
                    30:63:27:c8:78:8b:6d:38:9b:c7:02:e8:c3:d7:76:
                    f1:61:75:60:9a:53:00:bc:01:5c:75:95:5c:86:a6:
                    84:53:3b:2b:95:6e:d5:ac:3c:01:2d:db:e2:fa:08:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:49:D5:ED:C8:7D:55:62:16:5C:46:D2:B7:B9:BD:27:6C:BD:F2
            X509v3 Authority Key Identifier:
                keyid:C7:4A:EB:C5:DF:5B:F9:7E:5E:C0:64:C7:6E:C4:19:1E:39:EF:56:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C74AEBC5DF5BF97E5EC064C76EC4191E39EF56E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnw7MZca5xA5VKa7YapUL7Cp6xVP3Eu3LYjeGDgRos7/0/3138372e3131312e3132312e302f32342d3234203d3e20323731363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:31:fb:04:bc:7e:35:b4:da:b9:16:67:36:32:79:33:e6:de:
         37:f9:3e:31:ea:88:b0:83:c7:cb:dd:a6:17:45:9a:5d:0c:14:
         2a:b5:9d:e8:1e:67:05:34:64:bf:0d:75:d6:ed:39:df:0c:12:
         6a:07:12:43:6f:c0:55:21:c2:2f:ca:cc:97:41:3c:c4:ed:f9:
         16:ad:4e:aa:dd:b0:17:6e:83:46:5b:db:1c:6a:ad:51:cc:a9:
         6c:dd:30:8a:4e:55:22:74:a9:e5:c7:8e:61:b3:4b:98:61:cb:
         3d:38:08:71:92:05:71:df:dd:5d:97:2a:b4:27:28:8e:bf:d3:
         70:b2:6e:e5:44:bf:c7:d3:01:6c:fe:d0:88:10:21:26:00:25:
         b8:64:36:d9:77:25:a4:4c:b5:19:0d:5c:85:6e:e3:9f:fc:88:
         71:d4:55:0a:d4:90:ff:16:dd:55:9e:73:0e:78:51:0d:af:e6:
         76:bb:0b:c0:00:79:d1:f4:28:b1:45:62:fa:c3:89:75:32:21:
         35:27:01:47:d4:03:02:95:bd:cc:98:b4:30:ce:46:3e:60:7d:
         fa:47:38:6d:d5:19:d1:4d:f3:e8:cc:a8:04:86:7c:20:86:1b:
         99:3d:3f:19:00:83:c3:1b:fb:99:c8:7a:f4:70:20:56:70:37:
         ef:30:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:05:52 2025 by rpki-client