Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/3138372e3132312e3232342e302f32312d3234203d3e20323636333536.roa
File:                     3138372e3132312e3232342e302f32312d3234203d3e20323636333536.roa (raw, json)
Hash identifier:          3uE3+cZWALWmbinbHEgYGgatOnfIuP6RyUmDMvHVsIc=
Subject key identifier:   A8:4E:55:A9:17:C1:49:B5:F7:24:18:1D:A8:E3:CA:A6:50:EA:B9:56
Certificate issuer:       /CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
Certificate serial:       1E6040532DE9A27CBD2DEB963C937B1BA4703125
Authority key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/3138372e3132312e3232342e302f32312d3234203d3e20323636333536.roa
Signing time:             Mon 23 Dec 2024 20:02:40 +0000
ROA not before:           Mon 23 Dec 2024 19:57:40 +0000
ROA not after:            Mon 22 Dec 2025 20:02:40 +0000
asID:                     266356
IP address blocks:        187.121.224.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:60:40:53:2d:e9:a2:7c:bd:2d:eb:96:3c:93:7b:1b:a4:70:31:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
        Validity
            Not Before: Dec 23 19:57:40 2024 GMT
            Not After : Dec 22 20:02:40 2025 GMT
        Subject: CN=A84E55A917C149B5F724181DA8E3CAA650EAB956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:dc:58:41:30:bd:b4:e0:e5:fc:46:81:37:
                    f9:1e:d3:05:c4:25:25:7e:9c:a3:80:73:b8:b4:22:
                    44:f7:77:90:93:ca:97:d6:35:dd:51:f5:7e:f4:11:
                    21:06:ed:c7:74:a5:26:bc:9b:78:a9:19:3e:2d:f3:
                    e8:42:5b:a1:ad:e6:88:4b:75:06:1c:5a:7f:db:9b:
                    35:89:f7:05:3c:35:ef:be:c7:cf:aa:ac:4b:37:8f:
                    ab:eb:d0:0a:3c:ce:6e:a3:2b:66:e6:f3:58:f1:34:
                    ee:65:a0:30:85:65:3c:5b:27:42:ed:4e:bf:6a:26:
                    64:00:a1:fc:f9:13:f9:b2:56:d1:a7:a8:19:6e:0d:
                    3d:ae:81:91:f2:5a:2e:c6:6e:84:81:e6:d5:4f:97:
                    35:f3:63:de:b2:e9:b2:f5:a6:3a:5a:e9:e2:39:30:
                    fd:11:e7:cd:0c:d7:b9:98:a2:c7:02:20:b6:dc:8a:
                    8a:0e:48:57:e8:74:e8:2f:e1:a2:38:56:94:f6:77:
                    bf:d4:15:7d:f8:77:b8:15:03:59:1f:72:88:6c:83:
                    7e:ec:df:ae:ae:ff:f3:e5:36:7e:a1:ce:07:ca:51:
                    e6:16:d7:f4:b5:9b:17:ce:5c:97:0d:33:f6:60:3f:
                    d0:41:43:fb:97:94:d6:ab:5b:f5:52:a7:47:7f:1e:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4E:55:A9:17:C1:49:B5:F7:24:18:1D:A8:E3:CA:A6:50:EA:B9:56
            X509v3 Authority Key Identifier:
                keyid:BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/3138372e3132312e3232342e302f32312d3234203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:57:4e:d4:e3:20:d1:8e:93:e5:f2:ea:36:08:26:14:d2:
         5e:da:47:8b:93:f9:52:86:17:fd:12:dd:fe:47:22:34:ae:ab:
         3b:d5:af:60:0e:59:fc:bf:12:54:3a:c6:05:b4:07:91:1f:a4:
         4c:20:20:91:19:3d:df:3e:79:3f:fa:29:3f:68:51:7b:4c:6b:
         95:64:e3:c7:91:71:c4:43:21:b3:a1:0b:d8:1a:6e:a9:70:c9:
         28:dd:35:cd:44:26:ef:62:f0:f9:ff:87:8f:a0:91:4d:43:14:
         87:93:ed:76:0e:39:37:97:43:db:87:e4:7e:0f:c9:4c:59:61:
         b1:cd:5c:3a:99:09:8d:28:d7:68:2f:0f:49:85:c8:04:cb:18:
         d4:1b:43:96:45:12:18:d2:1e:2f:28:63:15:88:69:fd:7d:69:
         71:06:f7:cb:d6:11:25:a0:ce:05:14:d3:82:ef:7d:1f:63:99:
         a9:66:b5:ba:0b:46:52:dd:bb:1f:90:52:03:e6:e8:e5:e3:8d:
         05:b7:66:98:2b:fc:48:cf:ed:34:57:0c:62:11:7d:a4:63:d6:
         ae:81:81:56:7c:22:f4:21:46:ef:59:70:4c:51:76:e8:51:dc:
         2a:cf:6c:02:16:24:9b:59:05:c8:5f:0f:09:e7:a4:3c:a6:8c:
         79:b7:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:37:59 2025 by rpki-client