Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3131302e3232342e302f32302d3332203d3e203238353938.roa
File:                     3138372e3131302e3232342e302f32302d3332203d3e203238353938.roa (raw, json)
Hash identifier:          yW8AQWiamO0SvgwcGH98o9Z2jMM2UMdt+38rRSFLfiY=
Subject key identifier:   32:91:99:F2:8C:7A:0A:90:00:58:71:61:B7:E1:D0:6F:26:90:EC:5C
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       1BA5BAFB2FCE25BEC2294DCB09E4A7C026C79A2C
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3131302e3232342e302f32302d3332203d3e203238353938.roa
Signing time:             Fri 20 Oct 2023 22:59:08 +0000
ROA not before:           Fri 20 Oct 2023 22:54:08 +0000
ROA not after:            Fri 18 Oct 2024 22:59:08 +0000
asID:                     28598
IP address blocks:        187.110.224.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a5:ba:fb:2f:ce:25:be:c2:29:4d:cb:09:e4:a7:c0:26:c7:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 20 22:54:08 2023 GMT
            Not After : Oct 18 22:59:08 2024 GMT
        Subject: CN=329199F28C7A0A9000587161B7E1D06F2690EC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:40:f2:ec:45:71:a3:eb:48:be:88:ca:ef:
                    0c:99:74:f1:ff:a5:3b:ee:6b:e4:13:28:4d:cf:e0:
                    37:42:8d:3e:10:0a:c0:1b:b0:06:57:31:c7:15:9d:
                    d4:9e:eb:94:9d:7d:4c:2e:c1:ec:2b:06:e7:99:50:
                    63:e3:ed:52:ce:9a:80:95:81:9f:7e:7b:3c:47:43:
                    41:60:65:df:a5:f1:38:ff:6a:71:f6:d4:42:ff:75:
                    1c:f8:f5:49:20:ea:8e:0c:32:13:95:7f:e3:e2:77:
                    81:43:67:6b:20:5b:dd:74:39:96:09:32:66:9c:a2:
                    c9:c1:fe:ba:b2:b6:f6:f6:8f:15:fa:9c:ea:80:13:
                    60:09:25:a7:3c:3c:f4:e5:8c:95:4d:c5:46:8d:8a:
                    a0:22:9c:f9:b1:d1:67:98:d7:1d:bd:49:e0:6e:10:
                    af:be:e7:ad:67:88:41:4c:0e:89:2b:67:38:4d:12:
                    df:c2:0d:fd:63:60:8e:fa:6e:0a:f8:e9:66:bf:26:
                    8b:30:06:2b:9e:ff:4e:ce:3c:78:3d:cd:ab:79:8a:
                    11:55:43:e3:88:9a:fc:c9:23:a2:cd:52:e9:8e:b2:
                    a8:75:d7:c2:76:6b:19:48:e2:72:b0:51:40:50:f3:
                    69:6f:55:f2:ed:69:95:db:55:d7:2a:66:a0:01:21:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:99:F2:8C:7A:0A:90:00:58:71:61:B7:E1:D0:6F:26:90:EC:5C
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3131302e3232342e302f32302d3332203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:95:db:99:42:9f:f4:d1:2f:9a:ef:6b:ef:a0:c8:93:a3:f8:
         03:09:12:6b:76:f6:8d:50:dc:b6:cf:fa:49:bd:c2:95:81:d4:
         b3:19:8e:46:0c:09:02:7d:bb:99:75:34:e5:f1:58:75:cb:8e:
         e6:19:53:e1:27:77:bb:7f:93:e8:82:f0:40:6c:37:af:d2:1f:
         99:86:f1:7b:1c:7c:87:32:02:a7:1c:50:c3:49:0b:50:78:aa:
         fe:39:e5:48:d9:47:17:4e:f2:8f:4e:ca:d8:59:19:40:2f:73:
         6a:31:94:6a:2e:93:20:8f:f8:fa:22:15:20:80:72:38:09:fa:
         d9:40:27:fe:01:84:56:28:41:fc:97:ab:26:8d:78:f6:5b:ab:
         92:a1:6d:f6:03:c6:cb:27:68:9d:7e:de:8a:d4:d0:ff:a5:63:
         e8:c0:22:f3:83:00:a2:8a:48:49:8a:62:0c:34:46:ed:4b:b8:
         6e:9e:86:37:e1:20:6d:b4:c8:25:10:77:23:4e:71:04:03:e0:
         5f:9f:46:59:ee:33:3b:f6:7f:3c:93:ef:f1:e0:ee:71:13:2a:
         3c:28:81:46:0d:5a:68:f1:3d:38:84:84:e8:bc:7a:d2:ac:64:
         bc:6a:db:76:3f:93:f5:59:a0:e1:13:13:cc:49:21:33:72:5e:
         b5:b8:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:45:20 2025 by rpki-client