Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa
File:                     3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          X0MkCUajINn6EdZs0oyB1bs74gwRIpkx4XRy7tUDWRQ=
Subject key identifier:   30:03:98:6F:79:6A:CD:AB:B2:1C:57:DF:6E:63:7F:1A:99:F4:B5:F5
Certificate issuer:       /CN=FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413
Certificate serial:       566405A026569471C0925015B7B903EEA0AA3E5B
Authority key identifier: FC:4D:39:33:6E:F3:8A:FA:9E:9A:EE:F9:92:F0:BC:D9:F1:5D:94:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa
Signing time:             Fri 03 May 2024 20:26:43 +0000
ROA not before:           Fri 03 May 2024 20:21:43 +0000
ROA not after:            Fri 02 May 2025 20:26:43 +0000
asID:                     262272
IP address blocks:        187.120.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:64:05:a0:26:56:94:71:c0:92:50:15:b7:b9:03:ee:a0:aa:3e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413
        Validity
            Not Before: May  3 20:21:43 2024 GMT
            Not After : May  2 20:26:43 2025 GMT
        Subject: CN=3003986F796ACDABB21C57DF6E637F1A99F4B5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:77:a3:1e:9f:6b:0d:46:61:05:03:1d:85:
                    76:c0:41:6b:6f:ec:46:45:09:4b:76:62:37:3b:29:
                    f3:d2:92:44:84:0a:41:4d:6c:e4:4b:3c:e1:a9:78:
                    a4:0d:4a:54:5d:0a:01:9f:04:ee:41:8f:79:97:00:
                    0c:8c:da:6d:85:8e:59:d0:a8:69:2d:43:f2:34:4a:
                    08:7a:f0:b3:da:58:a3:c3:d7:d2:e0:24:db:85:07:
                    08:8d:ed:f4:08:db:f6:48:9c:1e:57:e8:f8:6a:89:
                    4e:6e:91:d8:02:b6:52:da:fe:82:39:01:67:7d:b2:
                    1c:9a:49:24:e3:41:6c:d8:f8:f5:dd:2c:8e:1f:1a:
                    69:7d:70:51:d3:3e:7c:b4:fd:6d:ad:b6:a8:2c:49:
                    37:27:8a:7d:3f:a6:76:0a:f5:bb:d7:eb:a1:68:10:
                    d1:81:9e:35:3c:3d:f0:df:98:66:ce:b4:73:31:1f:
                    86:03:82:5a:3e:b1:38:7d:88:1a:9c:65:2a:78:a5:
                    8f:3b:a3:0c:85:43:00:87:62:79:5c:c5:a6:01:f4:
                    a9:ae:fc:14:d2:ab:20:a0:bc:ab:4a:93:6d:4b:17:
                    2f:f9:3a:d6:49:a9:ba:6b:af:0f:6c:a6:fc:93:e3:
                    c2:0b:9c:04:fc:93:45:12:45:1e:be:ad:d0:93:6a:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:98:6F:79:6A:CD:AB:B2:1C:57:DF:6E:63:7F:1A:99:F4:B5:F5
            X509v3 Authority Key Identifier:
                keyid:FC:4D:39:33:6E:F3:8A:FA:9E:9A:EE:F9:92:F0:BC:D9:F1:5D:94:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3132382e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:7f:fc:26:b4:df:08:0f:28:f9:a1:f7:d1:a2:b9:f5:58:01:
         7e:3e:5e:ba:15:ef:f7:80:d4:04:e4:4e:68:00:84:72:54:01:
         ec:e0:c8:0f:80:98:b2:fe:e9:dc:27:18:55:00:9a:ea:72:3e:
         e8:30:1f:b3:eb:8e:4f:9e:e4:e5:c6:80:2a:41:80:3a:1b:57:
         a5:c6:20:7e:48:c3:e4:fa:25:b0:5f:eb:e8:a1:70:c2:e6:92:
         5d:65:c3:5e:46:7c:ff:65:e0:d0:5b:ce:41:b4:37:ac:f1:30:
         c5:8a:d2:b5:7b:cb:14:95:10:fa:ea:5c:76:9a:6e:73:0a:1c:
         8b:f5:a6:4d:20:00:f2:f2:a6:8c:07:d2:f1:2a:8a:fc:fe:f2:
         b2:c6:f4:f6:16:08:1a:03:de:9b:55:3e:af:52:ab:c4:28:79:
         8c:d1:a2:4d:a4:0f:73:df:92:5f:15:fb:ed:c1:65:2d:75:ca:
         2d:f0:14:38:81:82:4f:f6:b0:da:06:ba:db:44:e4:b0:ce:0b:
         68:ac:80:af:fd:f6:97:c7:0b:9e:f5:60:ea:b8:f7:fe:0d:44:
         58:4b:02:37:3b:8a:24:25:e3:45:61:6e:30:be:98:f7:eb:20:
         ee:ed:5f:96:aa:60:69:74:cc:13:7f:7b:bd:84:07:0f:c9:98:
         56:6c:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:27 2025 by rpki-client