Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3230342e302f32322d3332203d3e203533313233.roa
File:                     3138372e3131312e3230342e302f32322d3332203d3e203533313233.roa (raw, json)
Hash identifier:          5UQcvMbq4I8uxc7hy2koHt9KLB1N6rWITMrhReTt7qc=
Subject key identifier:   5D:24:60:1D:80:12:9F:0E:53:4C:18:FB:09:93:9D:87:50:B7:39:9A
Certificate issuer:       /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Certificate serial:       0C9221E995B2DFB99FD214F345F8E0FF397701E0
Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3230342e302f32322d3332203d3e203533313233.roa
Signing time:             Mon 27 Jan 2025 17:13:17 +0000
ROA not before:           Mon 27 Jan 2025 17:08:17 +0000
ROA not after:            Mon 26 Jan 2026 17:13:17 +0000
asID:                     53123
IP address blocks:        187.111.204.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:92:21:e9:95:b2:df:b9:9f:d2:14:f3:45:f8:e0:ff:39:77:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Validity
            Not Before: Jan 27 17:08:17 2025 GMT
            Not After : Jan 26 17:13:17 2026 GMT
        Subject: CN=5D24601D80129F0E534C18FB09939D8750B7399A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:4b:19:90:6f:5b:4c:df:52:e9:cd:8d:9e:
                    bb:51:22:5d:28:d1:de:af:6c:ec:86:20:3c:da:2b:
                    45:7b:53:a6:9c:47:dc:f9:00:bc:8e:d7:8b:be:14:
                    f4:e1:7d:f4:c2:d8:e1:d9:cb:22:94:a0:bf:f2:9f:
                    2d:c9:e2:d4:fb:b0:ff:16:73:d4:0b:b5:50:09:d3:
                    d5:f0:b1:74:22:f2:ba:28:60:fc:01:f0:32:e2:e1:
                    cb:55:0d:0c:4a:bd:00:57:d3:aa:2e:8a:5b:95:68:
                    43:9d:5e:46:2b:ef:cb:e1:a2:fa:74:c4:a7:59:98:
                    af:a3:22:23:51:62:8f:af:c6:d2:b9:5a:3f:87:34:
                    0f:58:2a:ba:01:ce:f4:69:db:2b:37:2f:53:6e:01:
                    c1:05:50:2a:e5:26:53:6e:76:41:a5:a0:d1:ac:d3:
                    d7:1a:fb:fd:9c:4c:31:04:26:44:14:54:85:cb:fb:
                    20:b9:50:6c:a8:ff:41:95:50:a7:e4:39:df:38:7b:
                    5e:67:6b:5a:31:47:f0:b8:6f:8c:dd:b2:c7:81:b4:
                    a3:55:6e:b5:57:91:48:7b:6c:97:aa:61:57:5f:67:
                    06:2f:ab:77:7f:2a:29:71:d1:7b:3f:a0:ce:44:4a:
                    2b:c5:92:ec:6a:83:68:83:11:e8:87:7d:44:43:23:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:24:60:1D:80:12:9F:0E:53:4C:18:FB:09:93:9D:87:50:B7:39:9A
            X509v3 Authority Key Identifier:
                keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3230342e302f32322d3332203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:42:de:92:34:82:ca:b2:df:63:89:1f:cf:eb:2f:f4:65:bc:
         d5:3b:6b:26:2b:0f:db:a6:2d:25:81:37:1b:26:a2:62:8a:bd:
         63:f1:13:b5:9e:3d:b5:e3:81:cd:62:7e:b0:c1:8b:c2:e2:8d:
         4f:90:b8:f1:fc:38:9c:c5:2b:1a:ef:a3:11:5d:cb:62:b4:f9:
         00:00:91:fe:dd:a8:ff:f3:17:16:68:ca:ca:35:31:9c:99:c0:
         d7:75:36:ef:2d:e9:b7:a5:d7:0d:12:17:07:39:d9:40:59:55:
         55:75:54:d4:bb:22:29:f7:72:ba:42:75:d3:3f:3e:7c:ad:a0:
         c9:a4:3b:c0:61:88:b4:38:03:35:aa:50:5d:34:59:c9:c0:2e:
         87:2a:44:0e:92:73:1e:89:9c:38:7b:7d:7f:0e:e9:78:35:ff:
         fa:4e:c8:c3:17:63:02:dc:9d:78:91:02:7a:f0:18:67:80:12:
         da:71:14:f3:39:c2:0a:1b:c3:81:3a:2c:ad:e8:cf:f0:b7:54:
         39:42:b9:cc:b7:08:2b:11:4e:7a:1e:02:60:8c:fb:82:55:bb:
         6c:06:7f:a9:e0:59:dd:1d:eb:01:e6:dd:2a:83:43:49:50:d1:
         12:bd:9d:b5:80:fb:7d:d4:71:a0:3e:a6:9e:35:c5:2b:5e:35:
         2c:f6:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:44:47 2025 by rpki-client