Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          rS8nipmPrMmTxImJg4s9GPXj/Jfl0XRl31mOGWpFzJ4=
Subject key identifier:   81:91:19:25:79:62:CA:3C:5E:39:A5:32:DB:0D:6E:C8:B0:21:DE:B1
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       13B91BA09200BC3B43EA1E36381BA09C6DB07C86
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:08:23 +0000
ROA not before:           Thu 02 Jan 2025 13:03:23 +0000
ROA not after:            Thu 01 Jan 2026 13:08:23 +0000
asID:                     262875
IP address blocks:        189.113.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b9:1b:a0:92:00:bc:3b:43:ea:1e:36:38:1b:a0:9c:6d:b0:7c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:03:23 2025 GMT
            Not After : Jan  1 13:08:23 2026 GMT
        Subject: CN=819119257962CA3C5E39A532DB0D6EC8B021DEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:bd:d8:8c:39:22:e9:91:76:d8:68:98:30:
                    91:71:ab:ec:a2:91:78:63:f1:b9:5a:bf:73:aa:6e:
                    29:4f:5e:cf:b1:04:df:e0:5c:62:12:b2:79:0a:7d:
                    aa:bd:49:a6:69:81:95:53:8b:5c:fb:10:28:d7:0d:
                    46:e5:66:6c:5d:37:e3:02:18:64:6c:9e:81:3d:aa:
                    7f:ac:1e:85:8d:f6:cb:a0:5c:a9:c6:4c:8c:0f:eb:
                    da:3c:35:6a:b9:22:10:6f:e3:07:49:45:d1:a6:5a:
                    8b:eb:1e:c5:12:73:ee:bc:85:4a:0b:2e:4a:02:8b:
                    8c:18:88:3d:29:d0:05:fe:ef:8e:3a:29:11:46:3d:
                    55:e0:b2:a0:18:cd:3d:46:76:e4:d6:e5:16:8f:5b:
                    c1:f7:9e:09:ea:3d:30:5b:28:13:8b:bd:15:8d:f4:
                    75:ff:48:12:44:51:dd:97:ba:ce:96:db:04:47:a2:
                    1e:68:42:e9:da:65:ee:b8:00:2c:a8:56:be:a2:62:
                    d3:55:4a:d9:b1:8c:24:aa:00:c7:7d:a8:c3:60:7a:
                    57:8d:c7:0f:ea:1e:f9:4d:2d:67:4c:d7:0f:39:e8:
                    73:42:5a:62:97:3d:b9:a6:b4:5f:68:d8:e4:85:19:
                    26:82:3c:6b:57:70:b2:fa:f7:b2:9a:20:af:9d:27:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:91:19:25:79:62:CA:3C:5E:39:A5:32:DB:0D:6E:C8:B0:21:DE:B1
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34312e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:41:4f:f8:a4:86:0d:4b:16:16:23:22:e2:c6:4e:c6:97:
         9c:4c:68:20:80:09:a3:82:5e:d2:fa:01:43:9a:30:8b:3b:e5:
         b3:5e:27:04:6a:83:24:24:f4:83:d1:c6:19:b9:e8:c3:ec:5a:
         8b:4d:ec:60:33:71:a9:2e:9c:d1:cd:53:e3:55:39:47:64:2c:
         d9:f8:be:d9:80:ec:e5:6f:7a:48:16:79:09:81:f5:13:2c:ea:
         85:07:67:c8:a6:65:d7:fb:00:54:a2:ea:69:4c:a9:61:56:cc:
         bf:eb:27:69:5d:64:d4:c1:8b:33:b5:70:6e:5f:01:4e:d3:fa:
         af:c7:42:fd:77:03:50:1e:b8:22:e6:78:23:a6:17:77:c5:05:
         21:35:d3:03:fd:7e:96:07:c4:23:32:47:1f:56:7a:b3:b0:7a:
         86:82:d8:39:0f:aa:5a:1f:52:65:e8:9a:d4:19:1e:1f:7c:88:
         99:f8:82:05:6f:88:21:bc:79:41:c0:19:57:83:e9:f5:64:74:
         59:fb:ad:46:c1:bb:7c:f0:6e:d4:59:b4:d6:bb:e0:cd:56:35:
         d6:de:ea:73:a6:bc:60:ec:2c:6b:3e:87:b6:a8:ea:d5:f3:c6:
         ca:b7:7f:cf:57:52:e4:9f:b3:01:28:19:54:7b:e5:9e:78:be:
         3b:b0:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:52:50 2025 by rpki-client