Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa
File:                     3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          13XFC3NyGV0vl+jptB0KbTDi7ayLwVi6fr032IyKfxY=
Subject key identifier:   A6:04:CD:C4:7A:B0:3F:AC:1B:51:50:DD:35:26:71:26:C4:4B:3D:CB
Certificate issuer:       /CN=FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413
Certificate serial:       4639FB9B859F0317077EC2CF4B9DDD8016139572
Authority key identifier: FC:4D:39:33:6E:F3:8A:FA:9E:9A:EE:F9:92:F0:BC:D9:F1:5D:94:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa
Signing time:             Fri 03 May 2024 20:27:25 +0000
ROA not before:           Fri 03 May 2024 20:22:25 +0000
ROA not after:            Fri 02 May 2025 20:27:25 +0000
asID:                     262272
IP address blocks:        187.120.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:39:fb:9b:85:9f:03:17:07:7e:c2:cf:4b:9d:dd:80:16:13:95:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413
        Validity
            Not Before: May  3 20:22:25 2024 GMT
            Not After : May  2 20:27:25 2025 GMT
        Subject: CN=A604CDC47AB03FAC1B5150DD35267126C44B3DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:43:33:d6:90:c1:4e:2f:2c:ee:fd:63:b2:
                    18:bb:73:e6:bf:b7:7a:d9:dd:19:ab:96:99:e4:0c:
                    bc:71:ce:6c:1a:63:b4:32:02:f7:c5:e8:91:bd:31:
                    71:04:c0:62:d7:7b:6f:14:64:93:0c:64:9d:8f:1d:
                    a4:41:54:05:3f:98:b4:ab:fc:8f:71:68:43:2a:c6:
                    48:9a:d9:92:f1:2e:53:9f:22:59:4c:eb:06:72:70:
                    72:a9:8d:7e:93:d9:43:30:a4:42:b4:fe:6a:91:06:
                    e0:a5:c0:b8:04:ef:15:5d:c0:7b:6f:5c:8b:3f:e5:
                    64:71:c6:7b:99:49:2f:02:3c:9c:c2:0a:7b:17:03:
                    4d:15:20:76:98:ea:46:7b:4f:0f:c4:3e:00:a0:dd:
                    ef:2c:98:2d:de:49:1a:1d:82:6c:55:55:9f:8b:1a:
                    2c:00:38:6e:38:b9:b2:87:20:c8:ad:d2:4e:dd:07:
                    1d:5a:bc:5f:1c:b6:40:f8:cf:dd:7c:81:20:3d:4f:
                    b2:c6:35:e6:02:9c:98:da:db:02:f3:9c:7a:83:0c:
                    ac:da:b4:d5:0c:a7:97:66:aa:ec:c4:bc:84:6f:03:
                    10:3c:7a:ec:12:a7:81:06:7f:5e:7a:74:bb:74:3e:
                    3f:c5:3a:22:8f:6b:9a:7f:93:6a:23:0a:ad:5f:41:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:CD:C4:7A:B0:3F:AC:1B:51:50:DD:35:26:71:26:C4:4B:3D:CB
            X509v3 Authority Key Identifier:
                keyid:FC:4D:39:33:6E:F3:8A:FA:9E:9A:EE:F9:92:F0:BC:D9:F1:5D:94:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4D39336EF38AFA9E9AEEF992F0BCD9F15D9413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3138372e3132302e3134342e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:f0:f4:94:00:3e:9f:d3:22:07:3f:f7:d9:12:8a:8e:c7:
         4c:13:8c:05:5d:c9:11:cd:97:1d:de:d3:e8:c6:fb:4f:be:6c:
         51:9c:80:f2:43:5a:d2:01:3f:2f:60:8b:5c:dc:c6:76:f5:78:
         73:ff:74:bf:21:22:91:4d:7f:cb:00:b5:5c:9b:53:8d:44:6f:
         55:8a:d2:1d:89:ab:aa:65:99:3b:54:4b:c1:74:bf:c3:af:c2:
         c4:c9:74:21:fb:ea:4f:1a:85:5b:a8:86:7b:90:2f:fe:e3:09:
         af:5b:dd:79:0c:4d:3b:bb:a8:ef:b8:8b:9e:9d:12:68:10:6c:
         3c:de:2a:06:93:cc:0b:28:54:3d:ae:e6:a8:78:22:7e:ad:b6:
         2f:27:a0:b5:bf:9b:36:7d:a5:2f:b3:4a:33:d4:80:51:93:b1:
         49:67:ef:ad:1c:1a:bf:af:f4:5a:f4:60:45:ac:a4:17:2c:da:
         cc:f6:a4:f6:2a:00:20:0c:5a:b6:41:99:11:ca:4a:0f:82:fa:
         78:37:f9:ac:41:68:36:0a:a0:de:e0:c5:c7:5b:70:7c:3a:5d:
         c8:30:cf:7d:27:f3:ca:c8:41:32:18:56:50:1b:91:a0:0a:56:
         89:df:a2:28:2e:45:8a:a1:0d:aa:b1:f3:47:46:97:8a:95:86:
         65:9e:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:50 2025 by rpki-client