Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32332d3233203d3e20323632383735.roa
File:                     3138392e3131332e33322e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          4ivwYZnY2xp+Om8cQU+vVqnQsr+yEACz024PWJ17ZYE=
Subject key identifier:   A2:F0:C2:B3:A5:4D:2F:E9:E7:07:2A:09:C4:96:63:04:35:E5:04:D9
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       45E21A7740D47F948FC6DB744D534FCDE9708967
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32332d3233203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:01:05 +0000
ROA not before:           Thu 02 Jan 2025 12:56:05 +0000
ROA not after:            Thu 01 Jan 2026 13:01:05 +0000
asID:                     262875
IP address blocks:        189.113.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:1a:77:40:d4:7f:94:8f:c6:db:74:4d:53:4f:cd:e9:70:89:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:56:05 2025 GMT
            Not After : Jan  1 13:01:05 2026 GMT
        Subject: CN=A2F0C2B3A54D2FE9E7072A09C496630435E504D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:5c:46:ce:2d:50:59:a4:23:4c:34:c8:03:
                    49:d3:18:d2:e9:86:9e:9e:44:48:a4:1c:bd:09:ff:
                    bd:47:b2:5e:ad:53:f3:66:95:cf:da:85:16:93:ef:
                    db:27:e4:ef:06:17:2d:2b:45:24:63:5d:0d:ff:1d:
                    e9:56:e5:ab:4d:92:4e:47:c0:02:53:30:d9:d4:fa:
                    a7:3a:b5:e9:e6:5e:95:00:9f:da:56:07:e5:25:06:
                    66:6e:e7:1d:8f:bd:14:28:31:ea:48:22:d4:ad:00:
                    86:07:ac:70:70:85:cc:45:4b:e1:d0:0c:81:48:f3:
                    7b:46:4d:1e:9c:1b:6e:19:2b:34:89:a0:91:82:d4:
                    7c:be:fe:87:60:06:ef:90:19:56:e4:bd:ab:74:b4:
                    9b:a4:c6:15:a8:5b:ee:f3:0d:e8:90:3c:25:e3:07:
                    31:ba:67:5f:3c:ae:a1:4d:da:46:da:e3:3f:dc:5c:
                    8d:b1:2d:11:3f:16:e8:62:3c:cd:cc:ad:69:91:42:
                    27:f4:0d:2e:0d:9c:c5:9c:0b:d5:e2:fb:20:50:e7:
                    7d:8e:b5:e8:a8:a1:e5:02:82:10:e5:18:19:36:24:
                    76:38:96:63:41:ef:40:b7:d4:3a:50:8c:9e:de:75:
                    9b:25:1a:8c:d8:12:67:68:6a:45:d8:49:8b:87:b8:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F0:C2:B3:A5:4D:2F:E9:E7:07:2A:09:C4:96:63:04:35:E5:04:D9
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33322e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:d3:b6:fd:5a:60:fd:13:45:04:c8:bd:1b:70:a1:6b:b9:7f:
         60:82:52:11:59:b2:32:ad:bd:76:68:d5:0a:91:88:68:83:10:
         fe:62:3c:3f:c5:92:ca:fe:d0:6a:6e:db:69:6a:83:2b:20:98:
         86:65:9f:ad:c6:b5:2f:5d:56:bd:4d:69:11:b9:1c:0a:af:ff:
         4c:69:84:7b:96:dc:36:43:b7:06:0c:6b:d8:59:19:60:d8:6c:
         f6:9e:15:b0:64:53:4b:1e:2f:5b:19:cd:00:6e:ce:d0:d9:d1:
         16:8f:c3:c8:8c:b7:7b:57:bf:f0:54:4b:4c:51:ef:e9:ea:56:
         6e:ed:dd:7d:f5:bc:36:f2:44:19:96:21:72:62:f5:93:a9:6b:
         b9:1e:24:09:8d:60:e1:96:88:87:b4:44:9c:7d:57:ff:22:0f:
         0f:ce:4a:a1:fb:35:e2:67:17:ac:6a:e9:cd:e2:e4:5d:d6:44:
         e5:50:94:1a:a0:26:8a:18:9a:77:f8:fd:62:f5:c9:3d:6d:45:
         76:45:63:c5:8c:c3:60:ba:46:02:97:ee:5b:b6:f7:53:a7:61:
         a0:fb:9b:6c:97:c1:3a:54:51:10:82:a7:0e:7a:31:82:57:4e:
         a1:66:b3:6d:5d:b0:f6:ba:53:fd:6a:58:ea:51:bd:10:75:26:
         0e:0e:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:50:29 2025 by rpki-client