Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3234203d3e20323730353737.roa
File:                     3138372e39342e31322e302f32322d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          GtKBEt6YO0hziJ3Lox9nlwGU0F4ArB757jC8yKCotsc=
Subject key identifier:   75:90:9B:93:70:90:8D:29:AF:82:24:46:A9:70:97:21:7F:10:15:ED
Certificate issuer:       /CN=9C1E7856C241ECF5872A2E00792054BE423DCD53
Certificate serial:       2E3FC1D81E408AC66BD925424E4E72662DD9AEDE
Authority key identifier: 9C:1E:78:56:C2:41:EC:F5:87:2A:2E:00:79:20:54:BE:42:3D:CD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C1E7856C241ECF5872A2E00792054BE423DCD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3234203d3e20323730353737.roa
Signing time:             Mon 13 Jan 2025 14:04:39 +0000
ROA not before:           Mon 13 Jan 2025 13:59:39 +0000
ROA not after:            Mon 12 Jan 2026 14:04:39 +0000
asID:                     270577
IP address blocks:        187.94.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3f:c1:d8:1e:40:8a:c6:6b:d9:25:42:4e:4e:72:66:2d:d9:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1E7856C241ECF5872A2E00792054BE423DCD53
        Validity
            Not Before: Jan 13 13:59:39 2025 GMT
            Not After : Jan 12 14:04:39 2026 GMT
        Subject: CN=75909B9370908D29AF822446A97097217F1015ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:75:0c:15:ba:07:b2:24:d3:c6:c5:57:9b:
                    8d:c3:22:35:1e:bf:e6:ee:f4:0a:ac:aa:39:ec:1a:
                    f3:34:dd:88:6c:14:c6:40:d8:ad:6b:21:5f:d0:5d:
                    cc:ee:f7:17:43:f6:3a:61:cd:2f:24:13:62:89:ab:
                    4f:ec:8d:f4:39:dc:10:af:b3:fa:e3:62:6e:1a:14:
                    99:29:67:a0:f6:5e:f6:7a:61:a3:31:fd:fc:13:80:
                    6d:ab:05:e2:bb:21:5f:2e:3a:0a:98:36:d5:d5:54:
                    6e:77:44:8a:78:bc:1e:f5:3b:b6:9c:4d:70:58:e5:
                    2b:fa:4b:35:8d:26:ce:6f:dd:f6:80:76:85:42:c4:
                    5d:72:cf:0d:c6:95:a0:37:06:37:fd:61:02:4c:d0:
                    8f:32:fa:b2:5b:4f:52:2e:b5:00:93:09:8d:b6:bf:
                    28:b1:c4:3f:f9:8b:bc:8a:15:ca:0d:c6:a1:d5:e9:
                    4b:cb:ec:c5:e1:21:59:9c:38:5f:dc:e9:76:46:2e:
                    03:68:9f:9e:2e:3a:60:d5:6b:cc:2c:aa:c2:4b:9c:
                    bb:f8:03:22:0e:a8:fa:52:ce:ec:c8:5d:a5:1b:9e:
                    21:d9:af:0e:e8:eb:8d:d6:5b:9a:0d:6f:da:aa:82:
                    91:86:d9:bc:86:e1:12:34:d9:e9:5f:25:9c:cf:01:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:9B:93:70:90:8D:29:AF:82:24:46:A9:70:97:21:7F:10:15:ED
            X509v3 Authority Key Identifier:
                keyid:9C:1E:78:56:C2:41:EC:F5:87:2A:2E:00:79:20:54:BE:42:3D:CD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/9C1E7856C241ECF5872A2E00792054BE423DCD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C1E7856C241ECF5872A2E00792054BE423DCD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:51:bb:58:68:c8:94:4e:19:83:1b:47:d8:98:f8:97:b7:
         5c:0a:49:8e:da:de:99:b8:6e:21:a7:99:c6:d5:57:db:de:8b:
         ec:27:01:3c:be:51:8c:53:f8:91:bc:b6:8a:b8:82:27:99:6a:
         20:96:4c:c6:09:ce:89:9b:48:fa:90:4c:76:7c:5c:2e:5d:75:
         ab:de:68:57:f0:24:3b:56:71:c4:84:22:5c:39:02:9d:e6:f4:
         6d:f9:f5:96:87:80:6f:4c:50:e2:b4:3d:54:fc:af:a2:eb:a3:
         48:2d:f3:90:54:d2:c1:25:a2:ef:fe:ca:b7:8d:77:30:ce:41:
         50:30:8a:e6:7c:2e:d3:00:78:a9:45:82:64:0d:da:eb:b9:7a:
         08:01:3f:37:6e:6c:1e:d9:e1:55:aa:9a:2c:1a:4f:ac:15:b0:
         39:f2:83:db:96:49:4a:78:b2:bc:df:70:9b:07:f2:7f:5f:7a:
         cf:da:36:17:57:20:09:6a:db:4a:1c:f7:93:38:32:c2:e8:7c:
         6f:ef:74:0a:68:a9:14:af:ed:97:1a:2d:5f:6f:d2:70:a2:43:
         03:9c:eb:85:79:3e:b7:18:85:1c:f3:17:14:5e:cd:04:af:62:
         8c:95:a3:81:fa:1a:0d:55:cb:6a:d1:42:a0:ed:ef:b1:25:fc:
         36:93:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:56:04 2025 by rpki-client