Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e32342e302f32312d3231203d3e203533313230.roa
File:                     3138372e3131312e32342e302f32312d3231203d3e203533313230.roa (raw, json)
Hash identifier:          AVOVUXZx73Yx7yG/ny07olOWsg7+y9H+AdMnSs3zikk=
Subject key identifier:   14:42:11:85:55:14:09:A2:7C:B5:61:CA:94:38:71:98:BC:F6:38:D5
Certificate issuer:       /CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
Certificate serial:       7AA86EDAA36FE9AB76B652235CB6ECAB39982AE5
Authority key identifier: 20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e32342e302f32312d3231203d3e203533313230.roa
Signing time:             Thu 06 Oct 2022 19:54:38 +0000
ROA not before:           Thu 06 Oct 2022 19:49:38 +0000
ROA not after:            Thu 05 Oct 2023 19:54:38 +0000
asID:                     53120
IP address blocks:        187.111.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a8:6e:da:a3:6f:e9:ab:76:b6:52:23:5c:b6:ec:ab:39:98:2a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
        Validity
            Not Before: Oct  6 19:49:38 2022 GMT
            Not After : Oct  5 19:54:38 2023 GMT
        Subject: CN=14421185551409A27CB561CA94387198BCF638D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:f2:46:86:c5:b2:52:20:81:09:7c:50:6f:
                    e1:4e:94:15:fe:ad:9b:ce:6f:86:14:2d:fb:3b:d6:
                    ce:42:cf:00:77:31:f9:b3:f3:aa:c9:39:5f:6a:3b:
                    bd:45:41:67:4b:0e:7b:a2:b4:12:74:60:de:41:d6:
                    40:70:31:31:f6:62:86:5b:0f:f4:e0:82:61:18:8b:
                    94:b2:2b:00:01:b3:95:89:51:ee:56:58:95:e3:98:
                    f2:a3:8f:38:cc:11:2a:de:fb:36:8c:04:3c:66:90:
                    4c:a6:07:3e:4d:bb:88:e8:eb:0a:93:a1:23:e5:27:
                    b6:b6:1b:0d:f5:be:aa:fa:c2:36:65:5b:c3:4e:5d:
                    55:ba:94:c5:fc:67:70:69:7a:d0:e2:1d:fa:cd:c9:
                    1f:02:90:66:91:3d:fb:0e:b9:3b:30:1f:63:e5:cd:
                    fa:13:9d:bc:39:7d:26:88:34:bd:fb:59:e1:7c:da:
                    c2:b6:c5:6f:85:54:bf:8f:c9:c3:51:1b:89:c4:cd:
                    22:4d:a2:85:e3:6b:61:d9:32:9e:a7:50:a1:86:66:
                    26:59:ed:0d:37:aa:f2:c2:8e:76:42:6e:c6:39:41:
                    b8:05:8e:4b:0f:be:56:5b:4d:98:02:9d:f6:c9:07:
                    21:98:36:de:3c:d4:fb:48:67:2d:10:c4:60:4f:19:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:42:11:85:55:14:09:A2:7C:B5:61:CA:94:38:71:98:BC:F6:38:D5
            X509v3 Authority Key Identifier:
                keyid:20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/3138372e3131312e32342e302f32312d3231203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:4b:f8:c6:11:f7:a8:5e:5d:ab:06:ef:3b:5a:70:ae:f1:
         ec:7d:53:0f:5d:ca:58:e1:53:bb:c6:bb:f7:98:bd:b2:2a:94:
         35:bb:3a:f1:c7:c8:13:91:1d:b5:d6:c9:9f:98:60:e5:14:6a:
         fb:ef:f6:b7:35:f2:b8:ad:e6:3a:bb:bb:28:2e:01:ab:d0:63:
         a5:8f:06:07:e0:65:fc:de:41:00:23:4a:18:03:1a:67:55:fe:
         cf:b3:95:8b:5d:11:c1:82:f8:b5:64:7b:57:23:5f:81:0b:c1:
         ac:94:17:35:0a:22:93:11:4a:1c:47:90:c5:5e:78:b2:2d:a6:
         71:07:e5:31:6b:78:d6:e1:50:e5:67:b8:ab:f1:0f:64:8e:f2:
         06:1d:fd:6c:a0:e9:a3:3b:0d:52:4e:19:c5:6b:5f:ba:a8:88:
         92:86:0f:44:6e:33:c7:b6:dd:50:f6:c1:85:87:e7:67:31:fd:
         f6:32:90:17:3c:ba:ee:8a:69:52:cf:89:d5:37:db:76:52:da:
         51:0d:2d:13:76:9e:62:17:0e:6f:e6:bf:01:e7:e8:a2:7c:66:
         8c:f4:74:04:14:0e:4f:91:e6:66:5d:fe:a1:eb:b3:83:55:75:
         65:88:dc:d8:5d:2d:6f:ba:01:cd:6f:94:b8:11:98:07:13:60:
         8e:48:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:50 2025 by rpki-client