Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32332d3233203d3e20323730353834.roa
File:                     3138372e39342e342e302f32332d3233203d3e20323730353834.roa (raw, json)
Hash identifier:          HrlnI9IvX0iLlCnzwp4nij7h0bbf9HqTt1z8uj9IXDQ=
Subject key identifier:   39:3C:3B:2E:29:F2:E4:49:89:DF:D1:60:E3:72:34:CD:B2:D9:74:65
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       315558E93FD154D49A33934BDB6AF5292936065E
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32332d3233203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:33 +0000
ROA not before:           Fri 31 Mar 2023 16:27:33 +0000
ROA not after:            Fri 29 Mar 2024 16:32:33 +0000
asID:                     270584
IP address blocks:        187.94.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:55:58:e9:3f:d1:54:d4:9a:33:93:4b:db:6a:f5:29:29:36:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:33 2023 GMT
            Not After : Mar 29 16:32:33 2024 GMT
        Subject: CN=393C3B2E29F2E44989DFD160E37234CDB2D97465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:25:bb:ed:4d:e0:de:63:41:45:6d:44:93:
                    d0:38:a6:98:5e:d8:fc:7f:23:d6:30:b3:2b:29:fa:
                    1d:e4:3b:01:fa:1a:6f:5a:35:c6:68:fa:01:4b:81:
                    e5:a2:90:07:c1:cd:09:26:5a:1c:74:a1:47:39:67:
                    be:e6:fc:bb:48:91:4a:90:16:78:8d:7a:35:cb:a5:
                    2d:57:d5:a2:76:71:4e:66:d6:60:cb:35:5e:6f:90:
                    3b:ae:09:3b:fb:19:55:58:90:31:d6:31:d3:38:b0:
                    4e:1d:da:ab:81:3c:bc:c7:ee:a9:b0:2e:38:24:2c:
                    bc:0f:72:00:91:6d:8b:30:1b:66:cc:e3:c3:b0:a5:
                    9c:60:bf:34:10:ee:72:0e:75:23:4c:97:69:28:af:
                    de:fb:b3:ca:6b:11:32:3e:ce:b7:84:42:46:af:4c:
                    c2:49:4b:5c:5f:44:44:6a:c1:87:a6:f5:0b:66:30:
                    b9:99:84:81:e9:df:7d:9f:59:d9:8e:ee:ec:3a:d9:
                    f7:cf:bb:8a:df:a2:4a:a1:34:68:31:ae:7e:d3:8b:
                    ae:1d:4a:6b:7a:2c:91:88:63:81:10:f8:1c:07:73:
                    9f:6b:65:58:3b:c9:b6:92:9d:4f:c0:23:20:cf:91:
                    fb:5e:3f:2f:1f:c1:f6:e8:33:01:60:a7:bf:0c:3f:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3C:3B:2E:29:F2:E4:49:89:DF:D1:60:E3:72:34:CD:B2:D9:74:65
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32332d3233203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:19:15:12:5e:98:c8:84:45:df:34:47:b3:66:1e:74:d2:
         d2:b2:3e:96:e4:1e:bb:fc:a2:d0:3a:34:4e:ac:47:39:48:8c:
         8c:72:1f:49:f8:71:c9:86:19:bc:36:75:27:18:89:2f:8f:28:
         03:ae:8c:5a:84:0f:30:97:cb:83:ea:2a:b2:be:b8:94:b4:c4:
         83:80:67:33:ab:65:e1:c3:94:df:c2:d3:d9:c1:77:5c:a4:54:
         7d:da:d6:a8:9f:8f:ee:2c:71:b7:48:be:91:a1:5a:8f:0b:a8:
         1c:01:cb:29:b1:33:5f:a3:85:ef:70:8e:b3:7b:78:6d:f3:43:
         4b:46:52:b0:46:41:a2:fb:7c:f8:fa:17:7f:36:d6:3b:ae:7f:
         88:05:3e:19:dc:aa:22:33:26:ea:79:39:7b:4f:e7:f1:bb:1d:
         e4:52:18:d2:be:38:de:e5:2c:a9:b3:01:86:76:73:12:ba:b3:
         c0:91:3f:a5:f8:2d:44:28:15:bb:07:7e:cf:d6:9c:07:c2:62:
         86:c2:3a:0c:ac:13:da:70:03:1b:ef:81:e3:03:6f:75:95:19:
         e7:a0:78:b1:2d:fc:d7:79:1f:22:09:bc:bf:77:86:53:77:82:
         1f:9e:c0:33:18:7c:fe:2d:16:3e:a7:f5:c1:3a:41:b8:78:da:
         f0:c8:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:13:00 2025 by rpki-client