Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
File:                     3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa (raw, json)
Hash identifier:          MwnSw4DHaSbr6xunTmhypPmjlddLQ1QKiqPQwK03Eb0=
Subject key identifier:   89:4D:8F:13:DE:90:9F:39:F7:C9:B2:6B:D1:80:37:F3:24:B1:D2:34
Certificate issuer:       /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Certificate serial:       4CF4A12B418668F26F8B4EF4FB1FC42CC8AE97CE
Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa
Signing time:             Mon 27 Jan 2025 17:13:09 +0000
ROA not before:           Mon 27 Jan 2025 17:08:09 +0000
ROA not after:            Mon 26 Jan 2026 17:13:09 +0000
asID:                     53123
IP address blocks:        187.111.192.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f4:a1:2b:41:86:68:f2:6f:8b:4e:f4:fb:1f:c4:2c:c8:ae:97:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Validity
            Not Before: Jan 27 17:08:09 2025 GMT
            Not After : Jan 26 17:13:09 2026 GMT
        Subject: CN=894D8F13DE909F39F7C9B26BD18037F324B1D234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:d3:69:5b:71:26:aa:98:7b:7f:d1:10:73:
                    d8:4f:5b:7e:3e:72:25:8d:c1:3f:2c:49:8e:0f:0b:
                    9d:44:66:81:b4:fc:92:82:bf:ec:23:4c:23:e2:ea:
                    d0:52:97:49:86:5d:81:40:25:c8:eb:95:28:f9:c2:
                    1f:3f:33:a7:7c:83:19:88:37:e4:99:dd:7d:3d:ee:
                    f5:2a:1f:21:3d:9d:2d:cf:28:bf:6f:2a:99:51:b8:
                    47:8c:0c:61:39:7a:72:ba:f5:51:f8:cc:12:61:c9:
                    e9:7a:fc:5c:e2:73:30:f0:28:b8:16:eb:80:bd:65:
                    16:11:d2:d2:aa:05:40:c9:39:48:7d:e2:f8:c0:fe:
                    6d:e1:1c:87:e7:22:26:dd:88:2f:53:84:be:e7:3c:
                    06:5f:c7:36:c4:3e:d8:af:b4:60:87:e3:84:28:26:
                    4b:62:70:ce:02:80:fb:a6:20:ed:11:1c:58:e1:d1:
                    f5:d5:db:f7:b0:c1:7c:de:fa:f7:34:2c:5f:a9:62:
                    12:a4:3e:0e:79:ca:d2:3f:60:7c:dd:7b:ff:7e:d8:
                    7a:a6:41:f2:17:78:58:a1:fc:6d:c8:93:64:40:b2:
                    b4:ce:e9:9f:1d:4a:d2:d1:1a:bf:34:50:63:44:29:
                    d9:39:09:5b:29:3a:12:77:bf:ac:34:cb:37:01:b9:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:8F:13:DE:90:9F:39:F7:C9:B2:6B:D1:80:37:F3:24:B1:D2:34
            X509v3 Authority Key Identifier:
                keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32312d3332203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:50:dd:f0:93:c7:3f:25:14:d0:4b:13:41:e0:a4:40:15:16:
         e1:64:83:d8:73:e2:69:c0:72:69:40:6b:09:c7:77:f6:20:41:
         6c:fe:19:ab:5e:e0:8f:35:5e:a8:7c:82:48:d2:b2:4c:db:33:
         5f:de:f3:b8:ba:54:17:2a:73:ad:09:f3:c9:f8:aa:47:3e:e0:
         0b:f8:fd:90:99:53:0e:8b:32:07:e8:60:a5:d6:9d:06:ac:47:
         e1:6d:f8:1e:c8:c9:82:32:ee:09:c8:a0:4b:c1:da:4e:40:48:
         a7:04:b4:2c:e8:47:ab:0c:ad:e9:c5:c0:fc:56:9c:ce:8d:16:
         96:4e:80:37:b2:8e:79:7c:d8:5f:d7:96:d6:a5:9b:54:35:fb:
         b9:53:ba:ee:ba:df:94:ae:76:35:b3:f4:cf:ec:a4:9e:a3:2e:
         e8:17:41:63:ba:a2:fc:0b:f1:84:0c:2f:c1:12:a5:30:30:86:
         57:89:ae:cc:37:54:67:48:02:76:b4:a6:90:b3:fc:47:e0:cb:
         b8:c4:59:a2:7d:89:ea:ec:13:25:5e:1b:d6:40:c0:29:d0:bc:
         7f:b7:ec:5c:46:dd:bb:74:32:d0:94:5a:b2:1d:6f:dd:2f:d2:
         53:37:4a:c0:77:4e:be:30:a5:f0:a9:4f:83:bd:1b:c2:30:d2:
         2d:1c:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:26 2025 by rpki-client