Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32342d3234203d3e203238313234.roa
File:                     3138372e3130382e3233382e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          YNKYsif1L4vy4A550izIIaVGivFiVveQJKu4p3EMSjo=
Subject key identifier:   B0:EF:0F:94:62:2B:C5:E7:72:EE:C1:D6:22:0F:DA:3B:CC:7D:9E:A5
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2A9750A72C5D44323F2F559359067CFF81EF6DE9
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32342d3234203d3e203238313234.roa
Signing time:             Tue 11 Feb 2025 12:14:11 +0000
ROA not before:           Tue 11 Feb 2025 12:09:11 +0000
ROA not after:            Tue 10 Feb 2026 12:14:11 +0000
asID:                     28124
IP address blocks:        187.108.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:50:a7:2c:5d:44:32:3f:2f:55:93:59:06:7c:ff:81:ef:6d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 12:09:11 2025 GMT
            Not After : Feb 10 12:14:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:dd:13:77:6d:8e:b7:95:ab:d9:90:a6:bd:
                    fa:d8:80:f0:fd:55:85:6d:61:86:93:e1:db:ee:55:
                    e9:75:36:14:55:14:6e:ca:a8:2d:fd:68:ec:70:50:
                    ab:e2:89:09:6d:63:d8:3b:95:59:42:7b:18:a0:1b:
                    60:c1:a4:18:1a:33:14:ae:dd:37:78:01:b4:67:f4:
                    37:22:4d:b6:a3:55:10:00:c5:08:5a:6a:b1:dd:eb:
                    d4:29:55:ad:38:c5:10:ba:4b:bb:27:64:d3:68:c1:
                    39:e0:07:d0:60:75:0b:19:9a:09:98:d2:f0:e1:a5:
                    b9:d4:3c:85:93:6e:52:77:3d:4b:1f:49:26:61:d7:
                    f3:55:54:fd:2d:ee:0a:c3:5e:8c:80:06:b9:a5:f6:
                    23:22:5b:53:d5:4d:55:76:ec:83:d1:c3:dd:a8:9d:
                    8f:4f:73:e1:93:7c:df:c6:d0:f1:73:83:fe:39:02:
                    04:61:33:bf:ac:e3:4c:c0:0f:26:a5:7d:ea:d6:64:
                    cc:82:04:03:fe:4d:25:13:85:b6:23:0f:e2:0d:df:
                    e6:ad:1f:60:05:cd:3b:0b:ae:ed:10:2f:9d:53:11:
                    10:07:4a:29:06:ce:f5:12:03:a9:42:fb:3f:46:a7:
                    c1:02:ad:e6:fe:f8:78:13:95:e6:fb:e3:87:2d:1c:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EF:0F:94:62:2B:C5:E7:72:EE:C1:D6:22:0F:DA:3B:CC:7D:9E:A5
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3138372e3130382e3233382e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:5b:c6:9d:11:e6:89:7b:fa:00:8d:46:66:64:38:89:f2:
         e4:65:13:17:e8:c7:7d:d1:79:73:41:3d:ad:6b:82:be:cd:da:
         e7:cd:51:cf:c5:76:59:10:79:d5:23:6f:76:5d:47:b0:d3:41:
         38:94:cc:e4:ef:c8:b9:54:cf:ab:47:0c:a8:c4:ce:e0:0f:a5:
         1c:a0:02:15:fe:99:47:9a:e4:39:00:3f:bc:4f:f1:c0:45:4c:
         02:c8:2e:9e:91:92:cd:75:0d:7a:35:8a:45:14:26:b7:42:9f:
         77:00:f0:99:bb:71:79:20:51:9a:13:86:ff:2e:de:dd:dc:28:
         8d:99:eb:8f:5c:d6:03:32:20:d7:29:53:aa:a4:66:11:d9:6d:
         69:71:d8:5d:4c:1c:8f:7c:33:99:15:7e:32:7f:ea:31:64:d9:
         08:a8:38:9d:47:ab:19:be:d7:a5:06:87:84:c0:84:32:b6:84:
         d1:64:7b:c2:34:cc:89:65:22:fd:df:8c:ec:23:f5:a1:2a:52:
         90:5e:5a:2e:b5:e1:fe:d6:c5:ec:82:7c:70:93:49:8d:fd:1b:
         f2:8e:4d:da:98:51:69:69:6d:ac:2b:e5:e0:59:8c:b5:36:d1:
         14:90:92:72:5f:68:4a:ba:59:03:f4:cb:92:cc:fe:63:72:c4:
         6d:4d:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:42:12 2025 by rpki-client