Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e392e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e392e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          F5C0ud39KWEPj90Yg8l+CDe5A5BZ4AvkfTSP3vo/9uk=
Subject key identifier:   57:D3:A3:7E:1A:5C:2A:9C:E4:2C:FD:82:BC:F1:A6:11:F6:F0:5C:A3
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       02643E3DBA8FCE62BA8625DBDB00DE45FCB9EBA7
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e392e302f32342d3234203d3e20323632373039.roa
Signing time:             Sun 23 Apr 2023 20:49:43 +0000
ROA not before:           Sun 23 Apr 2023 20:44:43 +0000
ROA not after:            Sun 21 Apr 2024 20:49:43 +0000
asID:                     262709
IP address blocks:        187.111.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:3e:3d:ba:8f:ce:62:ba:86:25:db:db:00:de:45:fc:b9:eb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 23 20:44:43 2023 GMT
            Not After : Apr 21 20:49:43 2024 GMT
        Subject: CN=57D3A37E1A5C2A9CE42CFD82BCF1A611F6F05CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:30:16:f0:4d:77:82:3e:b0:d8:20:d3:14:
                    ba:21:9a:dd:f1:51:37:ba:68:e5:ee:88:e9:48:28:
                    2a:33:8b:fd:c5:cd:3c:7a:34:f0:19:35:2b:70:09:
                    9d:ed:1d:d9:f5:cc:8f:84:a3:19:e0:0c:f5:7f:60:
                    92:13:3d:e7:97:33:85:05:67:78:30:c3:fa:8a:34:
                    e5:5b:bf:54:96:17:5d:d9:c9:4c:da:4e:86:bc:ec:
                    75:d5:77:57:48:3a:58:39:1e:bc:b7:59:15:ae:7c:
                    4f:14:24:98:86:98:75:27:32:da:a5:fc:8a:67:44:
                    2b:f7:18:c6:d6:62:dc:dc:c1:65:25:d1:53:7b:6b:
                    e3:7f:0f:67:93:e5:ed:98:27:86:ad:d4:b8:95:fe:
                    d6:6c:3a:48:a9:97:6b:9f:dc:78:be:f5:90:6b:a7:
                    dc:0c:9c:9c:bb:84:ad:7f:1b:b2:d3:77:33:24:4d:
                    87:c0:98:31:c5:02:ed:0e:d7:b7:c5:b0:0b:d1:87:
                    d5:f9:f0:33:98:c5:7d:13:a2:c9:a6:05:dd:f7:93:
                    19:4a:53:bd:a5:77:26:08:7e:1c:7f:03:24:32:c4:
                    f3:af:02:8d:ad:f6:81:2e:6b:8d:89:83:5e:72:78:
                    f1:65:40:91:4b:3e:40:f8:a6:c4:9e:a8:c2:be:98:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:A3:7E:1A:5C:2A:9C:E4:2C:FD:82:BC:F1:A6:11:F6:F0:5C:A3
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e392e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:a2:d0:77:01:8a:7e:9a:b4:e1:04:1d:4a:d6:fc:a1:5e:
         36:ef:0a:71:07:4e:55:86:9a:95:3c:c2:04:57:29:68:1e:80:
         08:9e:fc:98:15:0e:b0:7d:b4:d7:c0:8b:b5:a0:1b:32:c6:ae:
         52:05:6e:72:80:a6:02:26:6d:69:70:7e:c5:8f:48:da:84:cd:
         2a:7c:d9:5e:76:69:1e:23:df:72:a6:ed:29:0b:94:12:47:1d:
         5e:7c:ef:42:46:28:db:d1:a5:bd:1a:01:44:18:c2:28:6e:89:
         86:d3:a7:d9:7d:d6:c6:21:66:c2:db:00:62:c0:33:37:ad:37:
         29:9e:84:38:51:2c:96:d0:4e:8d:77:2b:f9:f0:53:4a:35:65:
         ba:bd:f1:9c:68:ce:ad:ce:1d:ab:40:68:c4:b4:c5:c4:5c:c9:
         59:25:02:9a:8b:39:51:5f:e3:16:e2:1f:d9:d9:9d:89:8d:98:
         09:57:0b:65:d9:bd:b3:81:83:e8:f7:1a:fd:54:81:5f:fb:2f:
         2e:77:5b:11:cc:16:1d:8a:e2:c8:85:01:9e:eb:af:a6:eb:dd:
         90:d4:07:d5:69:ad:0a:df:91:d4:70:96:60:ee:cc:e0:4c:77:
         79:2b:e1:70:46:40:f2:ab:0c:0d:aa:9c:9b:c3:63:e3:e2:88:
         47:dd:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:31:35 2025 by rpki-client