Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3232203d3e203238353938.roa
File:                     3138372e3132302e34382e302f32302d3232203d3e203238353938.roa (raw, json)
Hash identifier:          z+/neBXTkMy8y6b1WrNnGcdXjqCrzIREy8ryQcMtgSM=
Subject key identifier:   E0:58:98:E7:C4:41:5F:6A:53:C6:3F:CA:D3:22:10:FC:C9:CB:02:3F
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       79500577337AC7C252F95A5C6520C04015C6DFB0
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3232203d3e203238353938.roa
Signing time:             Wed 07 Jun 2023 16:12:52 +0000
ROA not before:           Wed 07 Jun 2023 16:07:52 +0000
ROA not after:            Wed 05 Jun 2024 16:12:52 +0000
asID:                     28598
IP address blocks:        187.120.48.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:50:05:77:33:7a:c7:c2:52:f9:5a:5c:65:20:c0:40:15:c6:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Jun  7 16:07:52 2023 GMT
            Not After : Jun  5 16:12:52 2024 GMT
        Subject: CN=E05898E7C4415F6A53C63FCAD32210FCC9CB023F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:89:16:8d:9c:63:4a:6b:8d:68:c6:45:62:
                    57:9a:ba:0e:1d:c5:79:94:f6:31:f8:66:43:30:b7:
                    69:b5:f6:d0:90:e3:2f:a7:21:58:83:65:68:70:cd:
                    ca:d3:fd:c3:99:71:15:38:4c:03:da:b6:5f:4b:65:
                    22:bf:38:29:ca:a7:2a:70:ce:7b:2b:ee:42:cf:74:
                    20:6c:1c:c3:30:d1:3a:fb:8e:63:88:7c:34:56:f6:
                    59:44:e3:71:7f:7a:c3:74:32:6d:cd:f4:5f:af:b2:
                    9b:17:c6:35:7d:82:39:ba:8d:f4:30:10:0f:61:56:
                    35:45:82:8e:f0:a8:2c:ba:3f:93:fd:25:d0:70:f8:
                    78:8a:90:5b:ea:38:6f:cb:5b:aa:70:7c:f1:43:b1:
                    3c:6c:8a:fd:6c:bb:35:c7:05:1a:16:78:41:21:bc:
                    97:50:95:6e:df:28:24:57:2d:c0:44:89:90:38:cc:
                    98:f9:9f:ca:ec:ca:83:ad:8d:92:e0:5e:22:0f:16:
                    d9:7b:f1:8d:8d:3e:5a:7f:ef:de:1a:70:39:a1:20:
                    a3:f4:0f:d8:04:b9:8c:36:4c:2d:ad:01:2c:d1:b0:
                    b1:30:ed:02:db:02:bf:5e:5d:0b:d2:b7:3a:f4:fd:
                    45:41:be:8c:d1:bb:ad:89:8c:72:9e:7a:bc:8b:29:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:98:E7:C4:41:5F:6A:53:C6:3F:CA:D3:22:10:FC:C9:CB:02:3F
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:6d:23:70:76:6c:13:57:a8:15:04:aa:64:7b:a5:f0:12:
         55:9d:11:61:2d:92:3f:ba:25:02:f6:99:d1:bf:67:0f:29:36:
         d9:52:bc:f8:61:94:f1:c7:65:f5:19:e8:e6:60:9d:8b:16:fb:
         9e:2a:ed:c2:72:bf:36:74:63:5e:3d:d3:3e:a2:48:27:c4:6a:
         c8:94:ff:fe:de:c1:49:01:e4:22:67:ce:9a:cb:5e:9d:f9:2a:
         15:e8:32:08:08:a3:5a:17:f5:3a:c5:32:a4:2f:98:82:d6:af:
         5c:a5:e6:48:c0:34:66:ad:02:da:e3:c8:ff:57:8b:b9:88:3e:
         3d:5c:2d:6a:16:d2:75:1a:e1:f1:06:ff:62:22:6a:7d:2e:0c:
         45:aa:74:69:d7:25:d2:68:53:54:00:76:24:a4:a0:a3:db:83:
         b4:f2:b5:a1:93:2c:dc:c5:04:bc:c7:eb:ed:8b:29:04:a4:4c:
         dc:8f:49:75:9a:44:bb:2e:c0:df:22:34:ca:ff:c0:96:15:b8:
         e7:43:90:52:28:d8:71:ec:0a:89:bc:83:e9:68:89:5f:ee:0c:
         19:cd:dd:25:cd:68:38:60:ed:a9:1a:39:5d:f8:fc:9a:7b:ff:
         b5:98:56:40:f9:a5:a9:f9:be:a2:e3:d5:4e:82:42:32:df:71:
         63:fa:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:14 2025 by rpki-client