Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34302e302f32312d3231203d3e20323632383735.roa
File:                     3138392e3131332e34302e302f32312d3231203d3e20323632383735.roa (raw, json)
Hash identifier:          0IvlCxslxK6wcc8DlQCCtrGoLRx7jZeNWFcOfJnoioM=
Subject key identifier:   6F:5F:D3:FB:96:DD:87:1A:F4:C4:00:48:FF:AE:B0:58:E8:A2:21:8D
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       3F07EE342CB4723847A23AF85B9A2FB0D7CF512E
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34302e302f32312d3231203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:01:18 +0000
ROA not before:           Thu 02 Jan 2025 12:56:18 +0000
ROA not after:            Thu 01 Jan 2026 13:01:18 +0000
asID:                     262875
IP address blocks:        189.113.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:07:ee:34:2c:b4:72:38:47:a2:3a:f8:5b:9a:2f:b0:d7:cf:51:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:56:18 2025 GMT
            Not After : Jan  1 13:01:18 2026 GMT
        Subject: CN=6F5FD3FB96DD871AF4C40048FFAEB058E8A2218D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:38:9d:06:5d:ab:c7:28:8c:78:45:9c:f0:
                    02:3b:70:17:9a:98:99:7b:fa:43:dc:12:a8:b7:0d:
                    de:80:5d:cc:4d:4b:27:23:5b:ef:35:2f:7f:56:89:
                    aa:f8:43:15:b9:e4:fc:95:9a:7c:18:02:ea:dc:ca:
                    fa:42:e9:34:78:44:13:ca:49:af:2c:02:cd:11:14:
                    20:38:ce:51:4c:e2:02:f9:74:fd:c5:cd:74:27:d8:
                    0f:2e:7f:27:a8:8a:25:93:ed:f6:a9:de:e9:54:cd:
                    97:42:31:36:ec:30:d5:4e:f8:3d:81:eb:bb:8d:59:
                    8d:34:dd:64:c9:95:73:c4:eb:e8:0b:81:51:d6:01:
                    20:0c:d0:36:bb:a4:e8:8a:89:ec:81:da:28:5e:be:
                    b7:36:67:23:17:02:66:fd:af:19:e5:75:08:58:2b:
                    c2:33:7b:85:8f:83:d6:04:92:51:d0:2f:80:5b:de:
                    4a:7c:4c:4a:b1:4e:23:f4:71:6d:88:d2:7b:ef:7e:
                    3b:ed:5f:90:a7:a5:b4:c3:c9:2b:86:67:03:b9:c4:
                    0b:6e:d2:70:f0:c2:fb:47:8f:a7:7f:c1:4a:48:00:
                    16:c1:89:45:38:fc:67:cf:dc:a6:09:d1:1d:8b:c9:
                    3c:66:30:4f:5a:54:1b:9d:5a:16:b9:72:00:e3:84:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:D3:FB:96:DD:87:1A:F4:C4:00:48:FF:AE:B0:58:E8:A2:21:8D
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34302e302f32312d3231203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:d7:9c:5c:8c:e0:36:99:ee:0e:fd:74:4a:bd:1b:89:57:
         6c:54:33:0c:33:43:b9:16:23:fc:3b:76:ca:65:3a:2c:23:53:
         53:8a:02:de:38:dd:00:4c:18:1e:8d:7e:38:d8:47:03:df:f3:
         f0:3f:f9:76:ee:e7:9c:6c:fb:05:36:d7:b2:68:07:ac:e2:b8:
         ba:db:3f:15:15:bb:62:02:2d:7b:5e:5d:b6:21:84:c9:7c:f3:
         ad:34:a3:ca:33:98:70:78:a8:63:39:eb:37:b4:d9:a2:b2:ae:
         93:60:38:83:92:99:39:dc:20:16:25:c0:bc:fa:a1:49:47:8e:
         c8:d3:d1:33:db:7d:69:38:a7:eb:24:f7:73:d2:3c:a6:7d:4c:
         13:39:ed:6f:99:90:8e:4f:01:8b:4b:dd:eb:46:1c:a0:45:be:
         6f:28:f7:82:5f:82:e5:62:c3:28:78:88:5c:51:aa:e4:87:2e:
         3b:aa:e0:8f:8e:6c:a0:64:98:ef:d4:88:b4:ec:ed:42:58:0f:
         c0:62:e9:1b:1a:47:90:a3:fc:13:2f:41:2b:ae:b8:76:61:c4:
         73:fb:43:91:6f:8f:14:f9:12:82:84:19:e0:48:41:57:71:ff:
         c8:e0:3c:6a:60:fc:52:14:1f:98:3e:ec:e1:4b:c3:8d:c5:26:
         73:b6:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:06 2025 by rpki-client