Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34302e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34302e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          AzM+oy29wzXp+ePNrTodCdCO4h4yuZqYGAOKJQyeyds=
Subject key identifier:   73:15:36:8F:7F:DF:3E:65:87:29:9F:3E:A9:C8:21:4B:66:66:FB:C1
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       17FEF820CDF607A0350EA3F888CEB7BA645CF574
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34302e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:08:07 +0000
ROA not before:           Thu 02 Jan 2025 13:03:07 +0000
ROA not after:            Thu 01 Jan 2026 13:08:07 +0000
asID:                     262875
IP address blocks:        189.113.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fe:f8:20:cd:f6:07:a0:35:0e:a3:f8:88:ce:b7:ba:64:5c:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:03:07 2025 GMT
            Not After : Jan  1 13:08:07 2026 GMT
        Subject: CN=7315368F7FDF3E6587299F3EA9C8214B6666FBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:b5:d9:1e:49:8a:16:cf:81:73:33:c0:e7:
                    04:1c:42:49:f1:2e:f0:16:e2:78:72:ae:3a:aa:c9:
                    30:07:a0:fb:d9:fe:a1:84:ec:9a:6f:5a:67:1d:e1:
                    b6:4a:60:3d:86:ca:d9:e7:0e:89:10:76:20:6c:66:
                    80:e6:76:2e:d5:e0:2c:45:34:98:2f:b2:da:5a:20:
                    1a:2f:55:71:9f:15:95:34:60:02:70:3f:62:11:48:
                    e8:3f:8c:45:c5:db:dd:a8:38:87:a0:49:5c:49:0a:
                    21:7f:5a:50:8a:59:6b:ec:47:7f:7f:07:40:cf:44:
                    af:01:7c:4e:08:33:76:dd:5d:40:93:df:6d:ef:8b:
                    0a:8f:68:2f:84:ea:96:70:fa:05:ea:94:95:f5:48:
                    d9:6a:9b:84:54:b5:58:a2:85:97:9b:32:ba:fa:8f:
                    a3:df:b2:45:47:96:9a:22:71:33:9f:3f:f1:cf:4f:
                    ad:ce:d6:62:a3:7e:52:91:b5:d7:a2:d6:bd:dc:46:
                    a0:f1:10:b9:94:ef:7e:f1:31:15:c1:b9:5b:75:b5:
                    04:67:2c:c5:1b:32:2f:17:1a:8d:b8:10:3f:65:a2:
                    22:4c:31:e6:30:53:c5:8b:ff:c9:e4:82:6a:9a:01:
                    4c:bc:0c:fc:51:1e:0b:53:b4:0f:cb:a2:c0:c2:b3:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:36:8F:7F:DF:3E:65:87:29:9F:3E:A9:C8:21:4B:66:66:FB:C1
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34302e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:68:b8:bb:77:51:71:d6:70:c2:c4:7b:a9:16:35:b4:4e:
         02:31:55:d9:6e:87:c0:18:34:c9:a2:16:58:f2:a4:9a:19:39:
         ae:21:da:a1:04:69:f0:c5:63:22:69:61:a3:b7:f6:68:50:44:
         65:b6:c7:00:0f:08:4d:36:85:c4:94:11:97:5c:63:ee:19:33:
         57:b2:5e:e2:5d:90:70:3f:f8:e5:50:b9:38:2b:9b:23:15:a2:
         1e:8e:4a:4b:fe:97:40:5c:fc:cf:66:a0:d4:ae:b6:e9:a8:1a:
         4e:df:20:e6:2b:f8:e2:d3:bf:8c:c6:35:dc:3c:aa:cc:82:a2:
         1f:db:29:9a:b6:85:13:70:b9:f2:fe:6d:ea:58:15:4a:cf:ad:
         b3:08:88:f6:6e:8e:87:d5:2c:7e:b2:a5:98:66:83:88:7d:5e:
         eb:ef:22:d3:79:cb:39:9f:fc:b9:d9:bd:34:de:e2:c3:e4:5c:
         ba:dc:b6:c7:58:a3:39:cb:a7:39:0d:54:46:e3:53:ab:35:3e:
         f4:5f:3c:64:99:7c:e2:eb:49:6b:cd:2b:4a:93:3d:c7:21:c4:
         b7:6a:df:bb:16:de:a0:00:93:53:cc:0a:5c:aa:99:c4:85:66:
         df:51:9f:73:fb:5e:d1:de:68:73:02:cc:26:d6:0d:3d:18:4f:
         36:38:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:50:25 2025 by rpki-client