Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/3230312e3138322e3132342e302f32322d3234203d3e20323637353138.roa
File:                     3230312e3138322e3132342e302f32322d3234203d3e20323637353138.roa (raw, json)
Hash identifier:          k3goOF/JEJBJJDsjS7oTBTb8O0KNLfQ5XtTVEpNY68s=
Subject key identifier:   78:AD:DC:7E:E7:34:39:F1:5D:3E:D3:6D:DA:AF:98:13:C4:10:0C:B2
Certificate issuer:       /CN=247A04F19573C8A3741F6C3F5EC97649723FE18C
Certificate serial:       37D49CC5B2C730704AA2F642DBF52957CAF33077
Authority key identifier: 24:7A:04:F1:95:73:C8:A3:74:1F:6C:3F:5E:C9:76:49:72:3F:E1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/247A04F19573C8A3741F6C3F5EC97649723FE18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/3230312e3138322e3132342e302f32322d3234203d3e20323637353138.roa
Signing time:             Tue 07 May 2024 12:52:02 +0000
ROA not before:           Tue 07 May 2024 12:47:02 +0000
ROA not after:            Tue 06 May 2025 12:52:02 +0000
asID:                     267518
IP address blocks:        201.182.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:9c:c5:b2:c7:30:70:4a:a2:f6:42:db:f5:29:57:ca:f3:30:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247A04F19573C8A3741F6C3F5EC97649723FE18C
        Validity
            Not Before: May  7 12:47:02 2024 GMT
            Not After : May  6 12:52:02 2025 GMT
        Subject: CN=78ADDC7EE73439F15D3ED36DDAAF9813C4100CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:cc:97:9f:36:cc:7b:56:85:c4:66:34:9e:
                    1c:ae:2e:a5:3e:25:a6:b8:7e:3e:72:27:3f:58:66:
                    3f:f6:be:a5:8e:1a:59:55:4b:92:33:a8:a8:af:d1:
                    25:f6:64:3b:10:53:95:fc:d3:46:72:96:c3:38:13:
                    90:a4:e0:7e:71:ac:0a:0a:37:fd:2b:33:27:a0:da:
                    66:6d:f2:2a:c4:c8:96:e2:3d:db:c9:dd:de:f5:d6:
                    56:51:98:25:58:90:13:23:07:8d:2d:a1:79:dc:e0:
                    4e:32:ca:7c:53:8b:3d:9a:8e:66:3c:57:07:f4:29:
                    2e:92:9c:e4:04:b8:1d:ea:39:f5:9a:fe:09:03:85:
                    13:ac:2b:03:57:a8:09:23:f7:92:28:8a:39:a8:3e:
                    00:ad:e7:ff:ba:4e:02:9b:73:ef:a6:68:dc:b4:54:
                    7f:e1:c4:85:85:70:d0:00:70:8e:da:26:97:1c:bd:
                    c3:61:4f:db:29:3c:c1:8e:7a:dd:02:c4:9c:59:68:
                    21:19:87:ce:06:61:be:f7:a6:65:a9:78:2a:85:de:
                    3a:c3:fd:1d:2d:ee:43:de:cc:e3:73:f8:f0:59:14:
                    1c:60:db:0f:f4:e5:07:8c:f7:8a:96:81:61:9e:10:
                    0d:67:0a:f4:73:3f:cc:1d:c4:be:fb:af:2a:97:f9:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:DC:7E:E7:34:39:F1:5D:3E:D3:6D:DA:AF:98:13:C4:10:0C:B2
            X509v3 Authority Key Identifier:
                keyid:24:7A:04:F1:95:73:C8:A3:74:1F:6C:3F:5E:C9:76:49:72:3F:E1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/247A04F19573C8A3741F6C3F5EC97649723FE18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/247A04F19573C8A3741F6C3F5EC97649723FE18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4EyWLLkUaiRqvzGYidDP8tYntPHFsPFFiM2ZBo5i2Dg/0/3230312e3138322e3132342e302f32322d3234203d3e20323637353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:ad:6d:42:c7:71:3f:ce:6f:a7:0e:07:71:82:7a:03:2f:
         b8:47:f4:37:2b:9b:08:a6:95:1b:b4:69:fa:99:65:61:56:a2:
         ef:c1:0f:43:8d:4e:46:07:3c:1f:dd:01:1a:5f:f1:1a:e2:81:
         49:36:a0:0e:cc:c0:a9:86:ed:a0:72:25:f0:8e:e4:b7:78:88:
         5d:b0:77:0f:b0:0d:13:19:34:50:6b:e9:c6:66:c5:a9:6c:10:
         95:cd:66:4d:5a:62:11:f0:6c:57:92:f4:0e:31:fa:91:9d:c6:
         91:5e:1f:d5:a3:5a:c9:a6:67:79:fe:24:a8:88:82:80:01:a2:
         cd:de:49:a8:0d:78:f0:69:be:9b:81:e2:21:4b:bc:b7:a7:f6:
         ee:8f:6b:9f:68:60:7b:a9:e0:6d:49:2e:0d:65:1c:90:1a:4e:
         72:3b:c0:1b:87:3c:e0:fa:da:9c:83:e2:c1:ea:d2:28:0a:2d:
         e1:d4:79:e1:49:0a:cc:be:6f:e8:8b:b0:02:45:67:32:bc:a7:
         1f:cd:65:38:94:19:35:e3:14:d7:52:87:9a:fa:b5:dc:ba:2f:
         18:53:76:e9:20:97:ab:31:a0:d1:6f:42:f1:f8:c3:e4:55:a2:
         fd:c6:b6:b2:13:b3:c1:af:9d:72:cd:7e:4b:05:49:5f:23:ad:
         79:ba:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:50 2025 by rpki-client