Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
File:                     3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          DTHW1k7Q7TNiJ0dY8DCTXDo9fak71sh5go3G+KekJgg=
Subject key identifier:   83:E4:02:63:50:FA:D9:E3:68:EB:B5:00:6A:C9:68:42:3E:53:9D:9F
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       46FD98C7394EE63A0C13AAF084065F0AE50BADCE
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
Signing time:             Mon 22 Jul 2024 18:02:18 +0000
ROA not before:           Mon 22 Jul 2024 17:57:18 +0000
ROA not after:            Mon 21 Jul 2025 18:02:18 +0000
asID:                     262272
IP address blocks:        187.120.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fd:98:c7:39:4e:e6:3a:0c:13:aa:f0:84:06:5f:0a:e5:0b:ad:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:18 2024 GMT
            Not After : Jul 21 18:02:18 2025 GMT
        Subject: CN=83E4026350FAD9E368EBB5006AC968423E539D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:6d:a6:9c:67:e5:d9:0e:24:2e:57:cc:96:
                    20:c7:44:f3:85:59:fe:c6:c4:af:2b:32:65:9e:3b:
                    92:17:5b:2e:ff:1b:5d:05:33:85:32:74:bf:a6:17:
                    25:b4:a8:5a:a3:c9:e5:62:e9:78:63:4e:ac:b7:25:
                    37:e4:99:d5:de:bd:8c:85:aa:77:1c:1d:7a:bb:65:
                    dd:b3:80:69:99:e1:d3:ca:17:38:02:fd:a4:61:4f:
                    9d:cd:ad:80:64:74:70:5c:71:96:bc:09:20:d6:00:
                    bc:8b:d2:57:3f:c3:21:22:84:1a:bc:bb:e2:78:f3:
                    e9:2f:13:f3:57:03:6b:7b:44:68:36:55:0a:64:33:
                    34:b4:eb:ed:51:bb:13:a5:f2:58:37:87:91:5f:9f:
                    9f:5a:5c:6f:06:83:c9:85:55:3c:58:7d:57:79:42:
                    89:ef:a2:3d:d8:db:2b:7c:35:33:10:ce:fb:03:d3:
                    a7:a3:7d:2e:11:b4:c6:d9:29:39:0b:d4:9e:17:98:
                    6f:b1:1b:e9:8b:ca:60:c3:6f:ed:9d:58:16:69:df:
                    d6:7e:66:4a:41:df:0a:0c:2f:42:cb:34:8d:78:f9:
                    c1:fa:0d:88:05:7a:cf:33:9f:7b:8a:62:5b:cc:19:
                    15:b1:a1:e5:ad:61:08:ee:4c:3f:3d:22:cf:0d:1b:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:02:63:50:FA:D9:E3:68:EB:B5:00:6A:C9:68:42:3E:53:9D:9F
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:89:57:16:87:cf:4c:6f:59:24:ee:c3:f4:f1:b5:15:3f:
         2c:9f:bf:f0:62:b8:76:a3:3d:a9:99:38:f7:14:38:12:f3:01:
         7e:38:e4:4e:15:3e:27:83:0f:67:1f:de:e6:c5:b4:eb:a2:84:
         dd:9f:d2:27:de:02:3a:f7:63:16:53:19:11:8b:6f:3e:3c:b0:
         3b:df:67:4e:79:d7:bf:62:1b:ba:3d:c8:d3:1b:12:36:41:d5:
         38:26:34:94:7a:a7:b6:ea:c7:25:0c:80:6e:87:20:18:01:de:
         99:20:9b:37:21:8d:ec:0d:e7:f4:a0:94:ec:76:aa:0f:0e:a5:
         70:72:26:ee:e1:77:6a:b6:c7:92:2c:fc:52:93:9a:77:6d:1f:
         7b:86:63:f7:de:54:cc:36:c1:9c:8b:21:90:2a:55:f3:60:6a:
         8e:0b:7c:e3:8a:a1:12:58:51:9c:89:93:67:28:cf:06:50:b3:
         44:06:3e:b2:72:5d:ca:b1:8c:93:16:4e:f1:bc:fa:1c:fb:c0:
         fd:f8:5d:fe:3e:17:97:de:5d:69:d9:91:a5:e9:6d:cd:a1:00:
         df:a0:60:ff:4c:53:ce:bb:b5:0d:f8:12:ad:5b:8b:b3:86:8f:
         8a:27:57:be:66:69:90:73:f9:eb:96:54:f6:3f:c0:43:8d:36:
         28:88:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:01:04 2025 by rpki-client