Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e342e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e342e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          DqsPzpLXOf9FiZW0vyYlp9x+DUADTa3U5qOe8PCZXdw=
Subject key identifier:   2D:F5:8A:B3:9D:35:A5:76:E9:43:58:8B:8A:20:E3:17:AC:39:DF:EE
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       61AB266110EDE73C5743C314E986580BF38344C7
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e342e302f32342d3234203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:43:18 +0000
ROA not before:           Thu 20 Apr 2023 14:38:18 +0000
ROA not after:            Thu 18 Apr 2024 14:43:18 +0000
asID:                     262709
IP address blocks:        187.111.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ab:26:61:10:ed:e7:3c:57:43:c3:14:e9:86:58:0b:f3:83:44:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:38:18 2023 GMT
            Not After : Apr 18 14:43:18 2024 GMT
        Subject: CN=2DF58AB39D35A576E943588B8A20E317AC39DFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:ed:94:7f:06:86:bc:cf:bc:2d:db:88:ae:
                    28:8e:2e:2e:29:40:35:5a:63:e1:a9:52:94:16:14:
                    9d:b8:46:ec:b0:57:ad:ba:92:97:77:ec:60:6c:c0:
                    43:d2:71:d0:38:e2:5e:0f:92:dd:9f:c8:d1:c3:12:
                    2d:84:6a:46:c6:8e:0d:cd:d8:4e:2a:5e:52:be:7b:
                    5d:12:b6:b8:49:e4:d8:3c:b2:53:6b:56:37:30:9b:
                    1c:4f:95:6a:85:d6:13:fb:5a:7d:43:ae:c4:6b:d8:
                    ff:60:5a:ed:bc:3a:59:c2:6f:e0:7d:51:74:4a:95:
                    1a:18:96:ba:7a:aa:64:ee:05:30:9c:e4:9f:39:2a:
                    b2:2e:d4:2a:04:fe:9a:3b:ed:ab:50:3d:ec:ba:fe:
                    c7:1f:64:93:8b:ad:1d:a6:19:41:58:89:a4:b5:de:
                    84:dd:c8:7d:d4:f5:68:87:77:dd:fe:92:14:9f:65:
                    28:b0:c2:94:86:92:79:ac:aa:e6:b1:98:10:b3:a2:
                    b8:65:9f:02:e5:1e:ed:d1:3d:0c:b3:2d:b3:76:8b:
                    44:ad:f5:bb:82:4c:91:cb:f8:b4:6c:6b:d6:ce:29:
                    0a:ed:7f:51:c8:d4:39:82:f0:84:48:ad:18:80:3d:
                    29:55:21:82:2c:7e:37:d2:7f:13:d5:39:3a:60:71:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F5:8A:B3:9D:35:A5:76:E9:43:58:8B:8A:20:E3:17:AC:39:DF:EE
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e342e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:de:93:bd:d8:da:42:a7:e9:3d:dd:fd:57:51:85:bf:16:
         b4:a2:2e:4a:b1:76:14:2f:64:27:1e:77:b5:92:3e:d1:76:e8:
         d3:28:d7:c8:5e:18:38:ee:7e:52:75:eb:74:fe:cc:48:8c:3d:
         76:d3:c3:74:13:5e:78:36:23:3e:70:73:66:d6:cd:4a:01:41:
         63:8e:bd:70:13:d6:a1:e8:44:28:88:23:ee:36:33:41:bc:a7:
         c5:bc:63:4a:99:21:0f:37:4e:4f:81:67:99:f8:8b:37:b4:50:
         36:5e:87:ad:95:52:03:0e:9b:3a:92:38:21:a0:08:39:92:ce:
         f1:06:64:67:f9:1a:8e:71:79:4b:4a:23:00:3b:c1:bd:1f:58:
         83:6e:c8:f5:e4:b0:5c:9a:f2:34:56:0d:a3:73:b6:50:7c:1b:
         ee:59:eb:ea:a6:2a:9f:19:d1:57:b5:4b:68:fb:fc:7c:d1:f8:
         f6:f8:77:26:97:93:bf:88:82:26:6f:63:68:58:db:8d:0b:08:
         49:bd:cd:5b:96:1f:02:89:f9:23:95:73:f3:86:eb:73:42:96:
         07:04:a2:70:34:8c:18:25:8d:a5:88:b7:10:87:cb:c3:d6:20:
         2e:7f:76:23:9b:2d:41:8f:ea:5e:9b:8b:e4:a7:c8:33:23:0c:
         42:74:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:14:56 2025 by rpki-client