Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3332203d3e203238353938.roa
File:                     3138372e3132302e34382e302f32302d3332203d3e203238353938.roa (raw, json)
Hash identifier:          ayePdDRWQwi4ya7KsZ6NDcToWppiC9o14fJqv7dSvRI=
Subject key identifier:   27:C6:28:40:85:33:06:94:0F:F6:FE:C0:95:B4:71:23:A4:6A:F5:E5
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       7B2970A4A9CD0AEECDFDEEE93E4BF510115BB134
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3332203d3e203238353938.roa
Signing time:             Fri 18 Nov 2022 22:40:01 +0000
ROA not before:           Fri 18 Nov 2022 22:35:01 +0000
ROA not after:            Fri 17 Nov 2023 22:40:01 +0000
asID:                     28598
IP address blocks:        187.120.48.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:29:70:a4:a9:cd:0a:ee:cd:fd:ee:e9:3e:4b:f5:10:11:5b:b1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov 18 22:35:01 2022 GMT
            Not After : Nov 17 22:40:01 2023 GMT
        Subject: CN=27C62840853306940FF6FEC095B47123A46AF5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:f6:29:7d:db:f7:d6:22:f7:11:34:0e:b9:
                    f2:30:05:96:76:cf:96:41:90:92:5b:df:fa:7a:a9:
                    ea:98:f8:71:b5:8b:8b:b3:4d:fa:9e:6a:01:8e:f3:
                    21:bc:92:c0:67:f4:af:07:d6:b5:48:d2:c0:4d:05:
                    74:3a:bd:13:38:a3:fd:b0:12:5c:69:c5:23:a6:5a:
                    18:40:7e:6f:17:c4:33:f0:ed:7e:83:f2:1d:cc:51:
                    4e:6a:40:60:e7:c6:db:f5:34:f0:c2:2f:a9:26:c6:
                    5a:04:0e:94:04:30:e3:d8:36:6d:20:d8:39:9f:1a:
                    2b:f4:d4:3c:69:50:60:36:7c:81:90:72:e8:78:f2:
                    9a:98:86:74:50:c1:a5:85:91:93:81:13:98:a8:82:
                    d2:78:d5:9a:e4:56:c5:c1:bb:04:f2:27:b4:3d:81:
                    21:6b:c1:da:ee:76:9e:74:55:68:79:98:03:54:58:
                    89:d5:45:7a:9b:d4:57:c1:b3:ec:84:81:2a:ee:36:
                    37:12:e0:45:b9:ed:e1:d3:3f:09:0c:29:7e:c5:be:
                    a5:ce:0f:af:6f:e0:f3:da:68:cb:e4:9d:8c:14:2c:
                    1d:35:39:33:9b:2c:ae:24:20:cc:f3:7b:97:4e:32:
                    47:4e:5b:53:4a:b8:ea:2f:8e:a0:d6:d3:f8:e1:e1:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:28:40:85:33:06:94:0F:F6:FE:C0:95:B4:71:23:A4:6A:F5:E5
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3332203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:49:14:8a:68:03:8f:3e:bf:be:95:1b:0c:0c:d4:41:42:
         2a:c8:28:a4:8c:43:1a:94:49:f8:0b:9c:b1:3d:f6:c2:67:b1:
         f1:33:9a:36:7a:9a:a6:4d:5f:a3:02:3b:11:37:d1:09:5a:3a:
         3f:fb:ee:5d:2c:c4:4c:0e:8c:b1:da:c9:d9:d3:fa:51:6e:0b:
         e1:4c:8b:d2:bc:64:90:c3:ef:a5:91:b8:15:84:a2:6e:48:d2:
         d8:39:47:76:94:50:0f:83:d2:be:d5:9e:dc:1e:8b:7a:d0:cd:
         51:d9:e7:29:a5:ad:a8:bb:83:ca:48:c5:7f:5a:c2:0b:99:5e:
         ee:96:d1:e8:07:77:c5:72:30:59:8f:ef:70:b1:81:16:3e:a5:
         81:29:f5:4a:69:71:6a:6d:99:5b:fd:8d:48:78:55:71:78:c6:
         d2:da:01:58:5d:74:65:d4:4c:87:bc:38:90:26:90:c4:c3:91:
         01:f7:94:0a:29:0c:e8:7d:41:32:c3:0c:19:da:9b:6d:d3:da:
         2f:9f:d8:bd:31:ff:72:1c:cd:1a:7e:11:b0:53:77:5c:f9:e9:
         2f:6b:83:d9:b9:92:4d:70:14:91:ae:6b:24:89:4b:9a:7e:a9:
         12:6a:44:e9:40:35:15:37:50:b8:7d:99:5b:a0:60:f5:80:bd:
         4f:7e:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:31 2025 by rpki-client