Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233352e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233352e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          K5L3B9Sao/5BdxqCoTikwPmYtbeHHbrt1RsTrnMwnd4=
Subject key identifier:   F2:78:9D:6C:62:8C:4C:07:89:BA:4A:C7:20:E4:5B:E9:9D:4C:F1:B5
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       12AE14E1F476B888CAACE16D2565DCE297F91DA7
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233352e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:13:26 +0000
ROA not before:           Tue 11 Feb 2025 12:08:26 +0000
ROA not after:            Tue 10 Feb 2026 12:13:26 +0000
asID:                     28124
IP address blocks:        187.108.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ae:14:e1:f4:76:b8:88:ca:ac:e1:6d:25:65:dc:e2:97:f9:1d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:08:26 2025 GMT
            Not After : Feb 10 12:13:26 2026 GMT
        Subject: CN=3082010A0282010100D4009B6FC62DE25CBA1518BD2FFE8598C8CBCC4CE386AC0237586D87BEAAA76572A88F706830E8596CC7FAE7EB6851DB2D2C9CBAC4FB71A2E8BC23715AB5D7869AF19D568C5A65C5E09BF617809F03F6F949BC0BF943C031177D0E36443CFC2E36416937BFE0BF038EEF054462A44FBDB917CD8BEE39E111A44C0616B0081178C836FD833CCAABC83D1067893D8813A39B8B023953F8C7B06067F90A2899A01E090291EC415BD7930573C88D95F410F0C538F71D7AB9C28536106BFC88665221F5838DBA0B10CC43D77C1675CF323306BF6B98F054B1682F2B6881A4A417190443C1552C8C706171A2371DF5E48F765C7A69C73228D3C08D5DEB875FA0206C810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:9b:6f:c6:2d:e2:5c:ba:15:18:bd:2f:fe:
                    85:98:c8:cb:cc:4c:e3:86:ac:02:37:58:6d:87:be:
                    aa:a7:65:72:a8:8f:70:68:30:e8:59:6c:c7:fa:e7:
                    eb:68:51:db:2d:2c:9c:ba:c4:fb:71:a2:e8:bc:23:
                    71:5a:b5:d7:86:9a:f1:9d:56:8c:5a:65:c5:e0:9b:
                    f6:17:80:9f:03:f6:f9:49:bc:0b:f9:43:c0:31:17:
                    7d:0e:36:44:3c:fc:2e:36:41:69:37:bf:e0:bf:03:
                    8e:ef:05:44:62:a4:4f:bd:b9:17:cd:8b:ee:39:e1:
                    11:a4:4c:06:16:b0:08:11:78:c8:36:fd:83:3c:ca:
                    ab:c8:3d:10:67:89:3d:88:13:a3:9b:8b:02:39:53:
                    f8:c7:b0:60:67:f9:0a:28:99:a0:1e:09:02:91:ec:
                    41:5b:d7:93:05:73:c8:8d:95:f4:10:f0:c5:38:f7:
                    1d:7a:b9:c2:85:36:10:6b:fc:88:66:52:21:f5:83:
                    8d:ba:0b:10:cc:43:d7:7c:16:75:cf:32:33:06:bf:
                    6b:98:f0:54:b1:68:2f:2b:68:81:a4:a4:17:19:04:
                    43:c1:55:2c:8c:70:61:71:a2:37:1d:f5:e4:8f:76:
                    5c:7a:69:c7:32:28:d3:c0:8d:5d:eb:87:5f:a0:20:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:9D:6C:62:8C:4C:07:89:BA:4A:C7:20:E4:5B:E9:9D:4C:F1:B5
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233352e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:77:5f:41:f8:85:6c:56:6a:df:d5:a9:93:43:b8:06:28:dc:
         c8:c4:6c:a4:ff:05:22:6b:28:07:67:e9:98:56:06:16:2d:45:
         25:c6:5c:19:d6:a0:b9:fc:05:46:bf:23:83:52:07:0c:71:fb:
         51:be:74:b0:78:76:49:d5:58:73:3b:0e:d4:ea:96:b4:15:3d:
         d0:bc:fb:45:0b:9a:c6:2c:7a:2f:32:2b:5e:3a:32:92:26:f8:
         d2:68:45:41:f1:04:a5:80:21:6b:7a:80:f8:d9:f6:62:d1:4b:
         cf:3d:3e:d8:2e:22:ae:f4:0c:11:28:b0:c2:66:c4:7c:44:6a:
         f0:42:fe:9f:36:57:43:3c:a6:c2:42:f7:4a:03:c5:b2:55:e2:
         52:23:e0:3b:b3:c8:36:81:c9:3c:84:c9:7f:21:45:6f:dc:a2:
         df:23:cd:55:06:58:98:1c:ed:01:b3:60:ff:1f:6c:1d:e8:06:
         d4:11:d6:99:8a:6f:94:75:63:84:b7:b1:76:b5:94:99:6c:48:
         f8:48:aa:5f:33:9e:09:56:6a:53:fc:06:53:3a:17:5f:f3:c1:
         d3:26:a4:8b:be:c8:9d:cb:07:67:a9:c2:8d:e8:3c:bc:f0:83:
         a9:e3:52:01:ce:e2:93:a5:a1:98:59:94:8d:f3:03:53:6f:07:
         44:9a:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:12:33 2025 by rpki-client