Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233312e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233312e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          csJQSDuwT0SrD1Aol3RhR1UmxnLnExA6LcZBQJ77WZI=
Subject key identifier:   2F:95:18:80:C4:38:81:5F:66:DF:95:EC:43:3F:BA:45:7C:CA:8F:9E
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6EBD8046C23B672AE9BEB4C1C762D3202438C8E5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233312e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:12:24 +0000
ROA not before:           Tue 11 Feb 2025 12:07:24 +0000
ROA not after:            Tue 10 Feb 2026 12:12:24 +0000
asID:                     28124
IP address blocks:        187.108.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:80:46:c2:3b:67:2a:e9:be:b4:c1:c7:62:d3:20:24:38:c8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:07:24 2025 GMT
            Not After : Feb 10 12:12:24 2026 GMT
        Subject: CN=3082010A0282010100C7B963C29B523DDA27F403EAB5F1F84D02E0317A97F3896DB07719B0A73293B8CE6D56FA6744F7884C27BE789FD64C4660DFB423493A8F03ED78A4F879D529369A2916952A819865F6737B6233509F5358147E8FBA0379A72B50316A325B244123CA6650564A2618FB0BFC729C566B9B714FE9456B9A54A55C25596BE98736778E6F18F167BC99F4549608C1A073579E1F9BDFD8E46BE0D4E308607A85C10B19E252B28D61ABEA18ABE7A74C26CDC9054CBFD98586983F83C727456865CA4A6637CDA855FC2EEF1B927EFC862517E3A84C4523A2355B7DC48764F494E5EC93E0622ACE58BA448FA5A884424AFC90D3DE61B19D8EB3AEFCB65F93DF0C4325CD0F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:63:c2:9b:52:3d:da:27:f4:03:ea:b5:f1:
                    f8:4d:02:e0:31:7a:97:f3:89:6d:b0:77:19:b0:a7:
                    32:93:b8:ce:6d:56:fa:67:44:f7:88:4c:27:be:78:
                    9f:d6:4c:46:60:df:b4:23:49:3a:8f:03:ed:78:a4:
                    f8:79:d5:29:36:9a:29:16:95:2a:81:98:65:f6:73:
                    7b:62:33:50:9f:53:58:14:7e:8f:ba:03:79:a7:2b:
                    50:31:6a:32:5b:24:41:23:ca:66:50:56:4a:26:18:
                    fb:0b:fc:72:9c:56:6b:9b:71:4f:e9:45:6b:9a:54:
                    a5:5c:25:59:6b:e9:87:36:77:8e:6f:18:f1:67:bc:
                    99:f4:54:96:08:c1:a0:73:57:9e:1f:9b:df:d8:e4:
                    6b:e0:d4:e3:08:60:7a:85:c1:0b:19:e2:52:b2:8d:
                    61:ab:ea:18:ab:e7:a7:4c:26:cd:c9:05:4c:bf:d9:
                    85:86:98:3f:83:c7:27:45:68:65:ca:4a:66:37:cd:
                    a8:55:fc:2e:ef:1b:92:7e:fc:86:25:17:e3:a8:4c:
                    45:23:a2:35:5b:7d:c4:87:64:f4:94:e5:ec:93:e0:
                    62:2a:ce:58:ba:44:8f:a5:a8:84:42:4a:fc:90:d3:
                    de:61:b1:9d:8e:b3:ae:fc:b6:5f:93:df:0c:43:25:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:18:80:C4:38:81:5F:66:DF:95:EC:43:3F:BA:45:7C:CA:8F:9E
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233312e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:b1:15:1f:e1:10:6f:f1:22:86:90:ba:d7:ae:0a:cf:1a:
         65:db:62:16:61:37:b5:b4:d8:02:27:42:b0:bf:e6:7d:a6:06:
         78:8a:4c:34:2e:cc:83:61:d7:9c:60:94:7b:17:ee:c8:f6:2b:
         81:e4:ad:0c:4b:52:da:b1:2c:f6:30:11:6e:8f:2c:66:c2:c4:
         07:51:bc:1e:1f:09:19:af:58:fd:b9:91:71:49:db:f9:00:e3:
         1e:24:2f:47:9f:72:54:8a:8f:7b:8e:6a:70:06:82:b7:91:58:
         75:12:ae:50:e7:63:5d:c8:05:0d:e4:73:67:c5:a9:cd:88:75:
         21:6b:d0:c3:d8:ca:16:34:8e:6d:b3:75:25:b0:b8:4e:36:ab:
         a3:e7:40:66:45:0a:46:f9:ae:7e:38:02:88:31:19:95:5c:8d:
         1c:ef:de:26:03:0e:9b:40:ac:c6:90:0e:b6:21:5f:f3:6d:bc:
         76:c2:e1:2a:d0:f1:34:77:9f:b2:85:c0:d9:9e:47:8e:43:7e:
         f2:7a:de:33:ff:ce:ad:12:0a:f6:13:12:62:9b:73:9a:79:f7:
         c0:ba:99:0e:6f:9d:8e:55:74:4a:c8:28:72:11:a6:e9:cc:93:
         6b:62:17:04:74:11:29:df:27:cf:3a:5c:ab:17:d6:fc:d7:3e:
         62:2a:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:12 2025 by rpki-client