Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3230302e302f32322d3332203d3e203533313233.roa
File:                     3138372e3131312e3230302e302f32322d3332203d3e203533313233.roa (raw, json)
Hash identifier:          uQxVhVDRwhoF1wJ1F69z7KUNanKqPrhy5iBVrYwLVAM=
Subject key identifier:   1E:89:DC:B0:DB:E6:CF:51:90:EA:80:A3:73:28:A5:57:B0:F4:5C:46
Certificate issuer:       /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Certificate serial:       285B2E1DFE2E1685E537BDA56B6C2A21108231E5
Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3230302e302f32322d3332203d3e203533313233.roa
Signing time:             Mon 27 Jan 2025 17:13:13 +0000
ROA not before:           Mon 27 Jan 2025 17:08:13 +0000
ROA not after:            Mon 26 Jan 2026 17:13:13 +0000
asID:                     53123
IP address blocks:        187.111.200.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5b:2e:1d:fe:2e:16:85:e5:37:bd:a5:6b:6c:2a:21:10:82:31:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Validity
            Not Before: Jan 27 17:08:13 2025 GMT
            Not After : Jan 26 17:13:13 2026 GMT
        Subject: CN=1E89DCB0DBE6CF5190EA80A37328A557B0F45C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:ce:7e:ba:dc:98:c8:23:48:08:c3:57:2f:
                    9c:0c:4e:0e:7c:16:55:ab:4a:7d:04:a6:61:0d:69:
                    90:71:a3:9c:c0:1f:a2:de:cd:7f:5f:96:15:0f:04:
                    ab:ad:d3:f2:ef:b6:80:c4:e4:bd:c0:c1:05:d8:ed:
                    1e:82:73:3d:0d:ff:c8:45:f2:61:bd:dd:b0:d8:17:
                    ab:bd:0c:33:2a:de:53:11:df:51:59:78:6e:29:30:
                    96:e3:1d:a9:5d:10:4f:11:67:3e:ca:dc:ea:bb:e5:
                    39:16:c6:88:52:2a:2e:99:94:6f:d8:b8:a5:e1:2b:
                    07:59:77:40:66:1c:8b:cd:46:33:c6:fe:c3:3a:9b:
                    f7:31:44:93:f1:62:a5:14:0c:48:f2:0f:bb:05:98:
                    0f:a1:61:7b:3f:03:a3:9d:7b:45:94:f2:fc:06:ac:
                    0a:66:b7:15:76:1e:3a:4f:c9:ab:2a:cb:36:f8:ae:
                    d1:f4:84:38:15:08:40:66:b0:e6:7f:e4:1e:12:c2:
                    55:6b:fe:1c:fa:63:35:57:a3:41:dd:83:d0:90:bb:
                    c0:f8:a4:c0:cd:30:5f:69:e1:6f:78:50:4a:cf:b6:
                    38:71:ef:69:cd:a4:66:4c:a5:79:a8:af:25:44:98:
                    1d:af:f9:25:88:f4:29:5f:33:90:b6:db:9f:7a:a3:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:89:DC:B0:DB:E6:CF:51:90:EA:80:A3:73:28:A5:57:B0:F4:5C:46
            X509v3 Authority Key Identifier:
                keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3230302e302f32322d3332203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:aa:cf:18:70:c5:0a:34:d7:31:e6:39:28:da:97:71:c6:
         b9:94:e2:e3:63:9b:5f:00:f5:84:cb:70:78:6f:7f:62:77:49:
         c4:c6:cd:7d:cc:12:36:57:5e:9e:81:97:f0:f6:81:bf:14:41:
         15:95:44:3f:96:6e:93:27:1f:cb:62:91:46:21:a4:9c:81:53:
         e7:db:63:2d:a2:e8:78:1e:ef:b0:3d:4d:61:0c:46:64:69:f8:
         56:63:49:77:e5:3d:8a:84:29:7a:d6:b8:d3:7d:6d:bd:9e:9c:
         0f:ae:03:85:a5:e8:b7:24:55:4a:70:95:a7:f2:5d:a2:71:e8:
         1a:fd:3b:5e:9a:8d:a0:b1:ed:19:fa:79:1a:1b:82:b4:2b:eb:
         6e:97:35:98:8a:b2:37:c5:ac:4d:2e:59:bc:ee:45:eb:7b:86:
         51:13:32:18:89:fa:8d:c0:38:56:a6:1c:16:80:95:a5:e6:6f:
         15:df:c8:28:c8:e7:e5:4f:b9:a9:87:e9:de:72:c1:57:83:86:
         90:11:a1:2b:c0:f3:b9:32:c0:91:93:cc:70:22:63:67:0d:e8:
         82:9f:1a:be:30:7a:8b:26:c5:b1:a1:0e:d8:50:1b:90:01:77:
         2d:88:dc:78:29:7e:ec:7e:2c:cd:49:8d:c2:04:99:3e:8c:73:
         74:a9:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:46:28 2025 by rpki-client