Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e352e302f32342d3234203d3e20323730353834.roa
File:                     3138372e39342e352e302f32342d3234203d3e20323730353834.roa (raw, json)
Hash identifier:          6LR2QvoRmxGf/OUSQ7w0eEX5jOu27WKT1/fslIvCtBk=
Subject key identifier:   78:A5:F0:D2:64:87:F8:23:5A:36:8E:98:CF:A0:15:0D:C0:60:AF:E3
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       288A1AAE9BA962135F0C2BE70207F937D3FB7339
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e352e302f32342d3234203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:23 +0000
ROA not before:           Fri 31 Mar 2023 16:27:23 +0000
ROA not after:            Fri 29 Mar 2024 16:32:23 +0000
asID:                     270584
IP address blocks:        187.94.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8a:1a:ae:9b:a9:62:13:5f:0c:2b:e7:02:07:f9:37:d3:fb:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:23 2023 GMT
            Not After : Mar 29 16:32:23 2024 GMT
        Subject: CN=78A5F0D26487F8235A368E98CFA0150DC060AFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:88:2d:b6:36:ef:ed:94:f9:27:90:f0:99:
                    0f:ce:d4:db:61:bd:5e:f1:8f:eb:d4:b5:fd:2a:65:
                    23:53:24:6f:d2:1d:3c:14:ce:c4:e0:fe:27:21:c7:
                    7e:1d:e7:22:dd:6a:08:ec:d2:17:4f:ff:28:b0:69:
                    e2:76:3d:32:dc:0c:b0:d9:a8:a7:4b:2f:26:d7:1d:
                    6a:9a:c8:03:cc:3b:8c:be:91:41:b8:4e:7e:28:8b:
                    f4:f7:48:b2:58:7e:da:d3:73:a7:f4:c4:13:89:8e:
                    ba:15:98:4b:bf:84:e3:d2:4c:65:c6:ff:20:2b:54:
                    d4:96:38:b3:af:eb:1d:3c:f5:eb:a5:75:09:17:6e:
                    dd:bc:87:3c:4a:c7:e7:da:bc:7b:89:4f:0b:3a:12:
                    a4:1e:53:8c:a6:f4:09:5c:64:d5:0e:d9:22:f3:5e:
                    30:7d:21:7b:3e:9b:4d:eb:f6:08:f2:5b:71:16:f7:
                    45:62:1a:8b:c7:44:a5:71:24:32:da:97:84:0a:74:
                    ea:e2:9c:0c:f7:6d:04:7c:37:32:55:9f:7a:6d:58:
                    95:93:b6:c0:14:1a:5b:fa:c0:69:1a:2a:eb:72:d8:
                    7d:d8:d4:22:03:98:7f:9f:b6:d7:78:66:10:f6:e1:
                    64:b7:76:8a:2c:26:7a:3f:a9:b0:75:42:cc:6c:ff:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:F0:D2:64:87:F8:23:5A:36:8E:98:CF:A0:15:0D:C0:60:AF:E3
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/3138372e39342e352e302f32342d3234203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:fb:de:6b:be:09:49:62:42:d5:87:c3:bf:b2:8f:44:66:
         c2:a6:ad:48:9f:b9:27:9d:bb:73:39:7f:ff:98:9f:92:5d:9e:
         9f:4c:36:fa:59:7c:06:0a:1d:25:4a:74:7d:54:9c:1e:cc:1c:
         f6:ab:79:c2:39:63:d6:d5:33:c3:a2:7e:a3:e2:13:43:ba:5c:
         c1:2e:10:58:83:76:bd:c8:22:36:cd:67:54:f9:f5:26:ed:93:
         7c:5e:76:c9:a2:7b:46:b0:42:08:35:f2:2a:12:72:28:81:12:
         40:af:38:ee:ad:5e:95:ca:ef:cf:ad:1b:5c:90:ab:7e:b1:5b:
         1b:28:ae:43:75:be:eb:1d:d2:7e:38:2a:87:a1:1f:29:c7:83:
         bb:e0:ca:eb:97:90:55:7b:dd:6a:fa:4f:7f:20:f6:58:94:65:
         d8:3d:42:82:12:df:0e:fe:c1:b4:2a:4d:41:15:ea:63:e8:c7:
         3f:2a:ab:18:7d:e0:1d:de:48:ff:be:07:85:d6:66:1e:be:0e:
         80:66:05:c2:0f:50:26:02:14:5f:2e:fd:a1:cc:84:10:b4:f0:
         5f:42:54:3f:64:63:30:09:bd:c2:d8:94:f8:7d:9d:86:c9:71:
         aa:01:92:be:3f:f9:14:d6:30:39:7a:90:f0:73:b1:dc:3d:4b:
         57:b2:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:34 2025 by rpki-client