Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233322e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          jyav1ZxaufsoyohhSCosdaFwURHsvXaPEKODd2LEq8w=
Subject key identifier:   CD:BA:32:50:12:57:0F:E2:1B:4B:3F:1D:23:E3:E2:88:DF:B9:AE:26
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       0745015CFDD71EA29C0B07FEACF01531C0A0C471
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:12:55 +0000
ROA not before:           Tue 11 Feb 2025 12:07:55 +0000
ROA not after:            Tue 10 Feb 2026 12:12:55 +0000
asID:                     28124
IP address blocks:        187.108.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:45:01:5c:fd:d7:1e:a2:9c:0b:07:fe:ac:f0:15:31:c0:a0:c4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:07:55 2025 GMT
            Not After : Feb 10 12:12:55 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:a8:30:ca:1d:92:4b:89:db:35:bf:49:a1:
                    72:09:ae:42:91:2d:aa:8c:c7:50:06:ea:1f:f2:8c:
                    25:29:fe:bc:34:11:43:13:c7:91:34:b0:56:75:3d:
                    cd:b1:c4:25:c9:0e:10:78:f9:bb:aa:04:3e:23:62:
                    c8:3b:27:44:4b:8b:1a:ad:53:99:c6:47:30:39:a0:
                    9e:aa:b1:22:25:00:b5:61:13:04:6b:b8:08:1a:2e:
                    6c:01:71:fb:72:f4:c2:91:24:bd:89:7e:0a:81:26:
                    5d:75:a2:0c:02:6c:57:6f:f5:5e:1a:f3:2e:cd:90:
                    8c:50:55:f3:b4:c6:f4:e3:95:5c:23:4e:35:47:0f:
                    e5:37:0e:b8:c5:9d:9b:7c:11:61:fd:f9:e4:86:36:
                    56:dd:8d:b9:36:f3:5e:17:c8:30:15:5e:8a:8a:7f:
                    4e:db:4c:7e:f2:c0:c8:70:61:0b:92:71:8f:a7:bc:
                    b2:ab:7b:40:30:a0:17:98:26:dd:e5:28:a8:5e:a7:
                    d3:0c:a4:00:48:74:cf:20:ab:d7:cd:ef:14:04:e0:
                    f5:3c:ad:1a:bf:8c:45:e4:7c:a2:f6:83:0d:64:a8:
                    72:a7:78:fb:d0:48:96:39:0c:28:1c:9b:88:5d:e8:
                    b2:ae:c4:1b:ae:89:8a:a6:57:5b:72:d7:c7:9d:b9:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:32:50:12:57:0F:E2:1B:4B:3F:1D:23:E3:E2:88:DF:B9:AE:26
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233322e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:47:c9:ea:55:38:55:64:90:af:45:13:ed:e7:58:1d:a1:53:
         1b:d3:27:3a:3d:e5:9e:01:c1:b2:fc:14:b5:70:64:9c:01:ad:
         57:e9:e1:0b:46:1b:e2:82:a7:ba:fe:54:ed:31:a1:83:b0:39:
         85:bd:e8:55:b4:cf:fe:c7:49:81:1a:5e:72:ed:79:76:f7:05:
         4a:91:24:58:6c:29:e0:3c:6f:f7:a1:d5:64:b9:e9:9b:51:12:
         e9:c8:20:f2:92:0a:0f:32:d5:19:95:5a:11:85:a0:fa:36:b1:
         c5:81:40:80:a4:8f:4d:66:61:74:9e:af:d4:02:af:35:db:05:
         e4:b0:1f:b3:25:bc:ef:d6:04:db:ce:24:a3:2d:eb:1d:d7:c1:
         08:ff:32:b8:9d:e2:51:2b:37:60:23:d9:ac:f8:07:fe:a4:20:
         a2:fa:d3:bd:53:9e:52:d8:4a:7b:b8:8d:f5:f7:76:54:17:7f:
         3a:4b:1b:32:f4:cc:b7:42:24:01:9f:a2:b0:60:5c:f2:b8:2f:
         52:d8:cf:25:67:df:6b:bd:cd:a6:83:8d:69:f8:ab:82:3a:38:
         5e:70:7f:8f:c1:d0:e0:24:ad:44:a9:17:2f:54:f8:92:7e:2f:
         69:35:77:3e:d2:8d:d8:73:24:9e:c9:00:c6:ff:7a:d8:85:1e:
         33:22:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:42:27 2025 by rpki-client