Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa
File:                     3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa (raw, json)
Hash identifier:          5Ix4jeDlmGmlK/7njMX7dRBM6GcH4yAowt3dc6LMXJQ=
Subject key identifier:   AA:FD:C3:B8:D1:7C:D9:73:FE:F9:74:78:1A:78:34:71:18:DE:6F:EF
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       707CD981211C4224502B1F9C092DB6C38CC86E48
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa
Signing time:             Thu 16 Jan 2025 20:13:48 +0000
ROA not before:           Thu 16 Jan 2025 20:08:48 +0000
ROA not after:            Thu 15 Jan 2026 20:13:48 +0000
asID:                     52468
IP address blocks:        187.108.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:d9:81:21:1c:42:24:50:2b:1f:9c:09:2d:b6:c3:8c:c8:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jan 16 20:08:48 2025 GMT
            Not After : Jan 15 20:13:48 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:14:1f:62:b6:ca:3f:71:a0:37:b8:3c:9e:
                    fd:32:9c:fe:d3:31:60:1c:85:4e:62:9f:98:2d:fc:
                    53:27:6e:36:05:97:93:9d:8f:c4:09:0d:5d:42:63:
                    de:10:8c:62:2c:0a:15:be:77:54:b9:e1:9b:fe:ca:
                    69:bf:38:17:c8:af:28:cf:27:c5:62:45:a8:8c:4b:
                    68:e1:54:f0:01:4a:ab:16:c0:7b:c0:0f:28:76:bd:
                    30:b5:35:b0:35:ed:93:26:53:8d:5d:07:0d:31:72:
                    b4:e6:c1:af:1b:c7:c8:99:54:6c:77:76:88:08:17:
                    7f:85:e5:d1:82:ee:be:67:0d:e9:1e:87:60:48:49:
                    36:3f:f9:54:ed:5b:98:ed:66:d7:9a:e8:aa:77:31:
                    8e:e3:0e:63:6a:a4:7a:3c:90:5e:51:75:83:67:70:
                    51:6a:39:62:ea:4b:a4:b5:55:e8:7c:44:71:aa:a4:
                    ee:76:15:7d:81:c3:85:54:bc:b9:62:ef:fd:c5:2a:
                    a5:93:c7:ac:f4:06:4e:b3:2c:a2:b7:8e:d3:01:dc:
                    c9:c1:6b:1b:7a:2f:9c:1f:e8:1b:48:b4:fb:18:96:
                    8f:1d:87:5b:a6:fe:7a:9d:b7:03:09:f5:34:01:07:
                    26:3e:17:41:88:c9:a3:67:42:01:52:eb:18:dd:7a:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:C3:B8:D1:7C:D9:73:FE:F9:74:78:1A:78:34:71:18:DE:6F:EF
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232342e302f32302d3230203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:b8:01:ba:73:84:6c:d4:ed:4f:53:dd:10:10:92:ee:97:
         3f:55:af:14:ea:87:5c:99:b7:7a:b0:71:3d:76:0e:56:81:47:
         60:d5:d0:7c:08:2a:92:42:f4:ef:45:94:b9:e0:31:43:16:e2:
         94:95:ba:64:30:00:0e:af:e6:a3:8c:6f:42:e6:14:85:27:35:
         08:78:cf:96:f0:39:8e:0c:0c:13:ec:10:11:8c:43:d4:b9:b3:
         33:3e:07:a5:05:ea:06:f8:2a:b0:fd:4f:87:f8:bc:db:1c:9a:
         ee:9e:43:15:b1:02:22:10:19:22:7a:8f:78:f5:91:a8:6e:37:
         8d:b0:b9:c0:f7:df:ac:4d:c1:08:aa:d4:0d:9a:09:f2:00:fc:
         7d:0a:03:8e:6b:88:f0:ea:62:05:5f:74:21:ac:a3:3c:64:f7:
         e7:85:b7:ea:97:e4:78:9d:b5:b0:01:74:86:77:8d:c3:ab:fb:
         e5:cf:5e:84:87:db:49:5a:f8:54:1f:99:53:a5:d8:53:d6:6c:
         24:75:2a:18:ee:af:f9:3b:4f:6e:80:d3:e6:01:a2:18:6a:7b:
         13:85:e8:77:78:ab:ae:e5:a3:e8:65:15:4d:b9:35:df:81:17:
         b1:6d:bf:6f:75:18:01:16:e2:3d:30:7b:98:14:0c:b7:dd:9b:
         be:9e:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:48 2025 by rpki-client