Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32342d3234203d3e20323730353834.roa
File:                     3138372e39342e342e302f32342d3234203d3e20323730353834.roa (raw, json)
Hash identifier:          0WMdlMGv+DyGjeBfhydTIpnDp9tWJWoxW1mSBhy1pWY=
Subject key identifier:   91:2A:30:07:DF:D1:83:86:36:3C:86:8A:23:42:A3:9D:E7:10:BA:54
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       70EDD08A2661859EC12990BE413F87BAB4D2934D
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32342d3234203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:31 +0000
ROA not before:           Fri 31 Mar 2023 16:27:31 +0000
ROA not after:            Fri 29 Mar 2024 16:32:31 +0000
asID:                     270584
IP address blocks:        187.94.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:d0:8a:26:61:85:9e:c1:29:90:be:41:3f:87:ba:b4:d2:93:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:31 2023 GMT
            Not After : Mar 29 16:32:31 2024 GMT
        Subject: CN=912A3007DFD18386363C868A2342A39DE710BA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:71:d8:09:98:2b:b0:62:20:b9:64:39:f3:
                    0b:62:8a:fd:68:1d:48:3f:9c:1d:2e:b7:46:42:02:
                    9c:5b:b2:4d:2e:d9:25:b7:a2:d6:98:20:36:7b:36:
                    97:24:a8:0b:c9:67:23:90:90:23:24:8c:c2:02:f3:
                    24:9d:b4:3e:6c:91:ad:9f:26:c6:09:9f:ea:0d:3d:
                    5c:ee:4e:24:8b:7b:3e:3f:f5:da:e9:8b:c9:94:cc:
                    d3:1b:4d:c3:26:8b:2f:b7:a4:bd:9c:d4:9e:66:4d:
                    e3:dc:fe:fc:a7:c8:35:cd:bf:c2:07:82:0a:e3:42:
                    77:12:12:e5:98:5a:6a:2c:4f:e3:69:54:fb:de:80:
                    05:48:a6:59:47:39:d5:65:d1:c3:63:4a:11:d7:60:
                    51:25:a9:10:a5:8d:52:aa:4c:14:56:df:fb:a4:5a:
                    cc:71:9a:38:a2:03:41:28:de:34:b8:1a:a4:61:e3:
                    b5:e1:e1:91:41:e7:51:a4:8f:88:70:b5:ba:c3:e6:
                    7f:96:77:0a:a7:a7:87:8b:aa:38:fb:76:19:24:f6:
                    2a:96:e3:8b:fd:0f:bc:f4:50:bd:36:1d:42:e4:24:
                    0c:fa:96:ee:f8:16:21:4d:50:93:cf:74:3a:84:75:
                    97:bf:67:db:99:d2:71:5b:03:5a:d0:ca:d3:41:01:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2A:30:07:DF:D1:83:86:36:3C:86:8A:23:42:A3:9D:E7:10:BA:54
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e342e302f32342d3234203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:fc:02:9f:b6:27:aa:1f:7a:23:e5:79:43:ad:7d:3e:d4:51:
         15:be:22:cd:bb:62:d0:bf:4c:28:12:27:90:f0:4b:20:42:b0:
         6c:23:86:08:af:b3:25:a3:f6:12:f7:3b:c1:f0:f4:a0:5e:84:
         6d:a0:ef:5b:ce:94:b2:49:d6:9e:98:8d:60:06:80:97:e3:32:
         bc:39:84:ff:23:f5:77:ea:d0:ac:aa:2e:e1:31:88:3f:d7:c9:
         26:48:97:a4:55:6e:41:a8:c4:af:a3:3e:9f:5f:df:4c:ba:26:
         5d:38:d6:66:26:3b:c2:56:53:00:31:98:31:d8:d1:69:78:f5:
         24:cf:f5:0d:49:dc:98:56:6d:19:da:b3:85:c8:71:28:4e:84:
         b1:75:36:b1:8e:86:aa:20:b0:ec:5e:fe:5c:a3:c4:f3:85:b7:
         8f:70:d7:fb:1a:2f:72:2b:53:cb:50:05:c0:f5:7b:ce:ec:29:
         61:18:31:d2:2e:de:df:ba:4e:81:73:99:1d:16:e7:f6:06:19:
         b1:b0:c0:98:60:21:a8:0d:30:db:7c:dd:9c:ee:4d:41:a6:30:
         28:f7:47:eb:76:03:61:d5:86:49:7a:be:90:c8:62:07:c4:c6:
         82:dc:76:43:3c:c5:51:92:22:e6:6a:63:60:c1:78:4d:54:a1:
         fd:9d:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:53:43 2025 by rpki-client