Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3232362e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          roW/DuJ4VhXY4lCbHP2eSaFn77QEYhE765UQRzUuv9M=
Subject key identifier:   92:7E:18:C6:A9:58:B5:20:51:BE:45:59:E3:81:C8:C0:73:6C:D4:FC
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       47736BF98615BE5540FE57A6A5035883890CBFB3
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:11:05 +0000
ROA not before:           Tue 11 Feb 2025 12:06:05 +0000
ROA not after:            Tue 10 Feb 2026 12:11:05 +0000
asID:                     28124
IP address blocks:        187.108.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:73:6b:f9:86:15:be:55:40:fe:57:a6:a5:03:58:83:89:0c:bf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:06:05 2025 GMT
            Not After : Feb 10 12:11:05 2026 GMT
        Subject: CN=3082010A0282010100CF8CB27DAB0C33B19F2E2153C3AA996840C8B8EFE26E31F94B1EC58E3B816E9F29E875DE7BC4CBE9E69E11FDB890362313BE96D063C8A139BEB0822A411598E7D274172AC5994C72A4F25742AEE4D2D6EEDE0BE02897FF42E41150F6DCCE500D890C1AEB228B63062D2711F80B9CB51A262BB5B368EF429C7512A03B475B5F5B05877686377DBFF035CCFAA5627C22B9AA1671DD4D9818DADAC0198C15BC92F0195ED1D67266DDA8FEA3A1E825CCB2CCDE7DCF6E5090B5E67C84BCCA46AE13C63D7BDAEDE1644E495DDF997814AAD05216368F8DD12DA0359EBF1A48EC4F2D5E3797DAF2282C9FF23E377BF0E030C4D3D89B2ABCFFEA501BBF5014718B4162F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:b2:7d:ab:0c:33:b1:9f:2e:21:53:c3:aa:
                    99:68:40:c8:b8:ef:e2:6e:31:f9:4b:1e:c5:8e:3b:
                    81:6e:9f:29:e8:75:de:7b:c4:cb:e9:e6:9e:11:fd:
                    b8:90:36:23:13:be:96:d0:63:c8:a1:39:be:b0:82:
                    2a:41:15:98:e7:d2:74:17:2a:c5:99:4c:72:a4:f2:
                    57:42:ae:e4:d2:d6:ee:de:0b:e0:28:97:ff:42:e4:
                    11:50:f6:dc:ce:50:0d:89:0c:1a:eb:22:8b:63:06:
                    2d:27:11:f8:0b:9c:b5:1a:26:2b:b5:b3:68:ef:42:
                    9c:75:12:a0:3b:47:5b:5f:5b:05:87:76:86:37:7d:
                    bf:f0:35:cc:fa:a5:62:7c:22:b9:aa:16:71:dd:4d:
                    98:18:da:da:c0:19:8c:15:bc:92:f0:19:5e:d1:d6:
                    72:66:dd:a8:fe:a3:a1:e8:25:cc:b2:cc:de:7d:cf:
                    6e:50:90:b5:e6:7c:84:bc:ca:46:ae:13:c6:3d:7b:
                    da:ed:e1:64:4e:49:5d:df:99:78:14:aa:d0:52:16:
                    36:8f:8d:d1:2d:a0:35:9e:bf:1a:48:ec:4f:2d:5e:
                    37:97:da:f2:28:2c:9f:f2:3e:37:7b:f0:e0:30:c4:
                    d3:d8:9b:2a:bc:ff:ea:50:1b:bf:50:14:71:8b:41:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7E:18:C6:A9:58:B5:20:51:BE:45:59:E3:81:C8:C0:73:6C:D4:FC
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3232362e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:93:a2:53:a5:11:01:05:f7:ac:67:7b:f9:49:44:96:35:85:
         2b:0f:10:74:47:f3:24:6f:3f:44:c1:8e:3b:34:6a:13:58:af:
         23:c7:f7:b6:e6:1c:72:92:eb:c6:75:df:d1:a8:cc:83:55:b2:
         bc:44:63:ad:07:09:c8:99:44:22:7e:d8:8a:29:e1:af:c7:55:
         15:de:7d:00:3d:d7:e9:7d:7e:46:60:95:ef:09:e6:11:3b:89:
         04:86:51:bb:92:21:70:c9:de:5f:41:55:6c:6c:77:a3:e7:3c:
         99:a0:76:94:f1:7b:fc:5c:98:9f:06:90:eb:4a:6b:43:5c:08:
         e3:be:fd:7d:39:1c:8d:ea:eb:41:48:0d:3f:4e:d7:2d:a2:f4:
         a6:60:e1:71:fb:df:31:a1:bc:09:73:e7:7e:17:06:c1:45:3d:
         90:8f:eb:80:31:04:cf:7b:50:71:24:c3:bf:4e:1a:95:64:d7:
         21:90:af:e3:cb:87:44:ed:f1:ce:09:47:af:89:57:29:dc:27:
         4e:29:93:2d:e5:74:41:ca:8a:7f:93:bd:d2:7c:8a:97:4a:85:
         a4:f0:d3:b9:06:bc:75:f9:8f:e2:5a:1f:df:d8:89:48:b1:31:
         09:49:42:e9:b9:9b:fb:14:f1:f5:96:04:16:32:a4:83:d3:cd:
         fa:ea:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:41:50 2025 by rpki-client