Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32322d3234203d3e203238323736.roa
File:                     3138372e3130322e39362e302f32322d3234203d3e203238323736.roa (raw, json)
Hash identifier:          L88CESegBx15B6ZLKUpxIyMzjyqqSgXLrPBElDzkjS0=
Subject key identifier:   4A:2E:E4:00:FC:53:F8:4A:D7:3C:5D:97:E2:01:D3:70:6A:C5:08:EB
Certificate issuer:       /CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
Certificate serial:       69A8C34985ECF78138F51EFE488DF532AC04F813
Authority key identifier: C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32322d3234203d3e203238323736.roa
Signing time:             Fri 12 Jan 2024 14:18:00 +0000
ROA not before:           Fri 12 Jan 2024 14:13:00 +0000
ROA not after:            Fri 10 Jan 2025 14:18:00 +0000
asID:                     28276
IP address blocks:        187.102.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a8:c3:49:85:ec:f7:81:38:f5:1e:fe:48:8d:f5:32:ac:04:f8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
        Validity
            Not Before: Jan 12 14:13:00 2024 GMT
            Not After : Jan 10 14:18:00 2025 GMT
        Subject: CN=3082010A0282010100E0B2E432D3137D03A01B76056B906A9C381E169CF1732F02F9D37E6E2228DB4B7E0413CD680BA434450DDB39002FA7A70C1588AF0EB5F587965ECD329FC77A9C908918EE520DA1645538159CF10E808C59F24C5013DBE9B4C1751289303E6D3DB01BC1F4603A22F54DC3F7CE3B375D25D43B04C1ABBC3896B67586A4BD4661726926DC6A52BED39F093F74C2E9914178A5B642595CFEB68245AC7BCCC581E092339FCD56F3C33B4906BA4B5AC8E54EE7F1A35D8F4215515CE7842FF1B2D16835BE29C22174AE01543B1BF8826ADBB8A7F951A01FC82411E4485AF04F73102FFD0733B1C50608F3017418D7D604FA45F45EAF1E4D4E946B79D95A135D27654E950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:e4:32:d3:13:7d:03:a0:1b:76:05:6b:90:
                    6a:9c:38:1e:16:9c:f1:73:2f:02:f9:d3:7e:6e:22:
                    28:db:4b:7e:04:13:cd:68:0b:a4:34:45:0d:db:39:
                    00:2f:a7:a7:0c:15:88:af:0e:b5:f5:87:96:5e:cd:
                    32:9f:c7:7a:9c:90:89:18:ee:52:0d:a1:64:55:38:
                    15:9c:f1:0e:80:8c:59:f2:4c:50:13:db:e9:b4:c1:
                    75:12:89:30:3e:6d:3d:b0:1b:c1:f4:60:3a:22:f5:
                    4d:c3:f7:ce:3b:37:5d:25:d4:3b:04:c1:ab:bc:38:
                    96:b6:75:86:a4:bd:46:61:72:69:26:dc:6a:52:be:
                    d3:9f:09:3f:74:c2:e9:91:41:78:a5:b6:42:59:5c:
                    fe:b6:82:45:ac:7b:cc:c5:81:e0:92:33:9f:cd:56:
                    f3:c3:3b:49:06:ba:4b:5a:c8:e5:4e:e7:f1:a3:5d:
                    8f:42:15:51:5c:e7:84:2f:f1:b2:d1:68:35:be:29:
                    c2:21:74:ae:01:54:3b:1b:f8:82:6a:db:b8:a7:f9:
                    51:a0:1f:c8:24:11:e4:48:5a:f0:4f:73:10:2f:fd:
                    07:33:b1:c5:06:08:f3:01:74:18:d7:d6:04:fa:45:
                    f4:5e:af:1e:4d:4e:94:6b:79:d9:5a:13:5d:27:65:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:E4:00:FC:53:F8:4A:D7:3C:5D:97:E2:01:D3:70:6A:C5:08:EB
            X509v3 Authority Key Identifier:
                keyid:C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e39362e302f32322d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:42:09:55:81:46:4d:33:8a:94:61:4d:f2:71:5a:d6:7f:
         4e:6a:51:65:4e:d7:85:1e:1b:fb:d2:e5:c5:ab:72:de:47:20:
         b2:5e:17:d6:84:bf:55:27:a6:75:71:53:68:c7:73:b7:48:85:
         30:b0:8b:ea:13:59:6a:59:29:fb:9c:63:a0:55:17:45:fb:28:
         85:0a:a2:16:dc:b7:62:a7:ce:bc:0b:2f:93:34:6d:8f:98:61:
         34:a2:70:04:37:aa:48:14:7e:db:98:da:ec:81:70:4e:fe:d8:
         6d:bc:72:6b:ea:fa:d3:56:f7:a5:85:3a:fd:1a:a7:7e:f2:3a:
         b3:7f:51:0b:38:2b:b8:82:fd:54:8e:fe:c2:e4:46:65:c1:70:
         fe:a8:9a:bd:09:a2:d5:ef:5d:6f:02:22:af:88:36:05:dd:93:
         88:84:5f:15:4a:5f:5a:76:41:65:b2:e5:4b:ad:f3:c1:8c:fb:
         40:d1:95:9d:fc:c5:5b:7f:48:7a:fd:9e:97:4d:12:86:96:56:
         30:14:55:e0:4c:58:a7:9e:d8:00:64:a1:a5:5f:29:ba:0a:8e:
         3f:83:28:0e:38:05:56:97:a7:fc:09:8e:0f:3d:6f:2b:e9:65:
         c8:7f:8f:1a:c3:0e:d7:9f:ff:20:c4:a9:50:38:e0:73:6e:ab:
         f5:e5:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:49:10 2025 by rpki-client