Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          7ag9wi+jxTM4eRL2xHHDYMcsBVSu4jUCdAiX6wee7aE=
Subject key identifier:   9B:4B:42:75:6F:3A:6A:FC:D3:EA:D9:3D:74:3E:79:A0:4E:EE:1C:A8
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       35AA3619B39DF98E582A5A23B6D2B532F0801871
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa
Signing time:             Sun 23 Apr 2023 20:49:30 +0000
ROA not before:           Sun 23 Apr 2023 20:44:30 +0000
ROA not after:            Sun 21 Apr 2024 20:49:30 +0000
asID:                     262709
IP address blocks:        187.111.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:aa:36:19:b3:9d:f9:8e:58:2a:5a:23:b6:d2:b5:32:f0:80:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 23 20:44:30 2023 GMT
            Not After : Apr 21 20:49:30 2024 GMT
        Subject: CN=9B4B42756F3A6AFCD3EAD93D743E79A04EEE1CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:84:ee:2d:e9:be:5b:3f:d8:a4:32:3a:19:
                    33:66:d8:0b:06:19:2a:c1:4d:22:e1:66:9b:8e:c1:
                    29:e1:f6:fe:10:42:3a:f9:d9:b7:aa:93:a0:df:cf:
                    6d:11:e5:83:08:e5:54:6f:37:50:c6:f5:22:a2:61:
                    a0:67:53:12:63:2a:95:db:23:b9:41:03:73:4e:33:
                    da:9d:ab:23:5e:34:a3:1f:e1:32:5c:bc:8b:fa:66:
                    a1:41:ec:9c:67:73:95:9f:71:5e:fb:68:0f:42:26:
                    f8:8e:80:3d:e9:e8:17:d4:06:93:7c:ee:70:19:5d:
                    b8:dd:21:50:64:9e:49:6d:56:94:55:45:e9:b5:90:
                    75:34:db:bd:da:66:2b:a6:57:97:e5:a1:fd:ec:ed:
                    e7:5e:d6:bc:04:c7:8b:45:8f:ec:f4:c1:0d:58:4b:
                    84:2a:6c:b1:95:ac:65:98:a8:3e:dd:93:23:61:0b:
                    ea:08:03:cd:9f:e9:1e:ed:a3:8c:c7:a3:a4:30:5a:
                    f8:ed:09:00:c5:d2:6b:40:18:0a:60:7a:f3:d4:98:
                    7e:51:1b:03:6d:21:97:dd:ca:85:37:67:ad:87:38:
                    a0:9e:1b:49:9a:29:18:45:fb:12:66:16:2b:a7:8f:
                    0e:a8:50:bc:ac:02:e2:ed:e0:a6:5c:bd:e3:ec:79:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4B:42:75:6F:3A:6A:FC:D3:EA:D9:3D:74:3E:79:A0:4E:EE:1C:A8
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e31342e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:38:a3:60:21:1f:75:86:e6:8c:c4:ea:29:bb:17:b5:4f:
         b7:c0:5f:f1:64:ce:1c:94:26:9a:4d:cc:39:ae:9c:90:b6:1f:
         9e:5d:49:94:c8:a3:19:3e:7a:a7:71:5c:8d:3a:fa:40:c2:17:
         2f:59:5e:e2:ba:d6:fb:5f:b1:b9:90:7a:79:12:72:1d:4b:53:
         43:39:a4:91:69:c7:38:f5:e6:60:04:69:73:b6:9e:c3:a8:86:
         61:8f:d9:28:b1:79:81:a6:25:6e:24:aa:e5:e8:73:e5:79:a4:
         73:c7:77:c9:16:06:e5:5e:2d:f7:81:53:19:f7:81:30:ad:3a:
         f2:8f:ad:69:f9:92:26:3e:9d:d0:0e:3e:1d:2f:20:eb:88:ab:
         cf:a5:79:28:7a:b2:9a:c2:c9:8d:35:34:32:dd:06:04:94:dd:
         6d:c1:3f:c5:b7:2c:db:97:d9:31:11:0a:94:44:40:30:68:c7:
         d2:ed:d7:1b:0a:97:cb:4a:8a:fe:f3:d4:8d:f8:5c:25:b2:82:
         45:c4:3f:20:35:8b:f8:d3:29:64:d3:16:66:8c:5a:71:9b:3e:
         7a:84:29:6e:d2:34:17:77:97:4d:9c:60:33:ea:3e:d5:a0:48:
         47:7a:25:e1:76:59:02:89:ea:56:09:12:f4:fb:5a:80:f9:93:
         af:7e:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:44 2025 by rpki-client