Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34332e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e34332e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          qyqFVTvD/ZnHMCLzOM9l0Pm2r10nNaZ2dc9/2X8y9lk=
Subject key identifier:   B7:7E:C4:6C:AB:3F:DE:44:BE:05:50:60:E7:E9:95:C3:62:70:F7:F3
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       65633E6D1D5A7E77DA0FBCD6F3A2A8F4EE7C1163
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34332e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:08:55 +0000
ROA not before:           Thu 02 Jan 2025 13:03:55 +0000
ROA not after:            Thu 01 Jan 2026 13:08:55 +0000
asID:                     262875
IP address blocks:        189.113.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:63:3e:6d:1d:5a:7e:77:da:0f:bc:d6:f3:a2:a8:f4:ee:7c:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:03:55 2025 GMT
            Not After : Jan  1 13:08:55 2026 GMT
        Subject: CN=B77EC46CAB3FDE44BE055060E7E995C36270F7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:38:70:cb:fe:7f:5c:87:e5:62:ba:71:f0:
                    03:d1:e1:28:1e:b5:b7:11:f9:7e:3c:28:a4:6c:8d:
                    fd:11:71:e1:83:f0:1d:0a:c8:f8:2f:b6:3e:42:50:
                    b3:dc:52:ec:bc:93:c9:f4:97:31:26:3d:55:58:64:
                    00:3a:08:75:45:59:a6:5f:f8:7a:7c:9e:6e:dd:ba:
                    98:8c:96:4c:3e:c0:78:45:7f:52:fb:00:a1:0b:f2:
                    42:b5:d7:89:b7:3b:21:8e:3d:ab:2b:9a:21:f8:77:
                    9b:96:fb:5b:ca:4d:93:91:f4:cc:f7:3c:86:81:de:
                    8a:28:a0:ae:00:57:2e:c7:1d:7e:a5:8f:02:a3:82:
                    1d:32:72:84:05:5c:bb:34:1a:90:ee:0c:02:eb:76:
                    33:5a:69:31:7a:d0:ae:41:3d:83:f3:3a:4b:b0:3f:
                    ea:5e:2d:3e:70:5d:d0:07:f0:26:2d:90:11:38:37:
                    d8:f1:e0:1e:6b:00:d8:0d:d4:4e:68:f5:fa:0a:72:
                    de:35:82:cd:c4:0a:71:40:0a:78:4f:65:56:85:16:
                    fb:8d:24:79:ca:02:c4:29:03:47:55:ea:85:c8:54:
                    42:6c:9c:62:c2:36:41:da:76:28:17:58:07:84:fa:
                    d9:06:cb:ff:46:91:0e:53:c8:9d:1e:51:f7:9b:ad:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7E:C4:6C:AB:3F:DE:44:BE:05:50:60:E7:E9:95:C3:62:70:F7:F3
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34332e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d8:ab:7f:1c:66:e5:5b:a3:8e:4f:f0:54:d0:b6:bc:8b:27:
         e0:1b:d0:16:9b:f3:ad:18:42:24:6e:fe:41:02:d9:af:b9:28:
         36:d5:3e:94:c9:a2:d3:2a:65:32:a8:a4:40:f5:ff:e6:a1:20:
         bb:ad:07:58:7f:af:c3:3b:3b:83:24:d7:20:d8:c0:db:0b:4a:
         85:54:c4:3b:c7:2a:71:88:60:76:e4:a2:17:48:6f:10:d1:19:
         c8:e0:ae:a4:78:d8:34:25:37:c6:4a:3a:9a:b9:44:df:7f:a9:
         ea:ae:e1:87:cf:c7:3f:f2:cd:2a:a6:47:c4:29:9c:f5:ee:65:
         45:d5:00:2d:35:c8:df:f9:05:29:6f:19:39:b5:25:04:36:41:
         f7:22:e5:12:d4:36:6e:80:f6:2e:e1:f1:c1:1b:7a:01:c8:e9:
         08:52:4b:a3:db:cd:39:28:19:0f:1c:2b:25:c5:52:18:19:4f:
         a9:5d:f8:f3:f2:66:fd:7c:72:1f:21:a6:e5:53:1b:d1:1d:20:
         24:d6:dd:99:da:4e:8e:a5:1e:f1:01:9f:de:7c:d1:93:e4:a3:
         9f:3e:af:25:00:61:25:49:2e:97:50:88:5a:50:7c:b1:bd:e8:
         23:4f:39:18:a6:50:10:59:a7:a7:f6:5c:c4:08:62:2e:cb:ad:
         81:3b:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:50:25 2025 by rpki-client