Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32312d3231203d3e20323639303733.roa
File:                     3138372e3131302e3134342e302f32312d3231203d3e20323639303733.roa (raw, json)
Hash identifier:          StQq5b6erwxqiiGZCe2AgrDyQYjxdlVa9y8MbG6CvvQ=
Subject key identifier:   E5:F5:94:B7:69:12:F8:BD:5C:4F:4F:74:50:20:0D:C1:3B:5B:7C:6E
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       227A5941326E1B78150C84B4D0EFE2F9F24C48C7
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32312d3231203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:50 +0000
ROA not before:           Tue 22 Oct 2024 14:16:50 +0000
ROA not after:            Tue 21 Oct 2025 14:21:50 +0000
asID:                     269073
IP address blocks:        187.110.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:59:41:32:6e:1b:78:15:0c:84:b4:d0:ef:e2:f9:f2:4c:48:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:50 2024 GMT
            Not After : Oct 21 14:21:50 2025 GMT
        Subject: CN=E5F594B76912F8BD5C4F4F7450200DC13B5B7C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:12:59:f0:53:17:0b:06:7c:63:f3:e0:32:
                    77:24:20:1e:82:80:23:7b:e1:9e:ec:18:70:be:f5:
                    c7:eb:96:33:89:0f:c4:f3:ad:b1:c4:b5:ac:94:11:
                    5f:2d:dc:2c:0d:1b:e6:f8:8a:8e:90:fc:6d:78:9b:
                    17:41:91:b7:6f:69:f0:9e:6e:d8:8e:d6:79:d6:fc:
                    16:7c:f5:ea:72:6a:3a:12:9e:3c:ec:bb:87:48:49:
                    c4:c0:71:db:e5:88:4c:cb:51:95:47:3a:fb:24:69:
                    78:9d:01:ec:87:d2:31:5a:49:13:6e:4c:d9:50:c6:
                    44:52:9d:e7:df:6d:8c:e2:77:26:f2:65:09:11:d5:
                    3f:f7:ec:ee:5d:cf:b7:ee:2a:92:57:9a:ee:b3:00:
                    b9:b9:68:73:ee:34:92:c7:e2:f8:c8:69:9f:69:3f:
                    4d:8a:d0:cd:ca:82:9b:e0:fd:11:6e:b7:56:a3:74:
                    2e:c3:ab:f6:06:19:cf:6f:9d:06:9e:20:59:0b:fb:
                    b1:ae:dd:fd:31:bd:e2:43:9c:c3:c8:cb:02:78:56:
                    1e:f6:95:e9:8c:be:29:26:4d:5b:90:22:be:26:0f:
                    20:84:51:95:7a:98:71:6a:09:cf:c6:51:3b:8e:e6:
                    58:53:93:4c:60:37:ac:cc:af:a4:f3:8b:8f:f2:fb:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:94:B7:69:12:F8:BD:5C:4F:4F:74:50:20:0D:C1:3B:5B:7C:6E
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32312d3231203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:50:80:ef:94:cb:e3:05:15:b3:c7:95:25:de:bb:a5:a7:
         f5:36:95:71:e8:c8:f3:73:c6:30:9c:a0:ae:a3:4b:a8:27:27:
         5c:2d:b5:04:d6:0c:8c:40:56:a4:e6:73:b7:09:fc:0f:e2:45:
         6a:94:95:1f:06:72:9c:58:86:ea:33:8f:60:63:dd:28:5a:43:
         e2:20:76:f2:02:1c:be:59:5a:64:2c:d0:ae:5a:4b:ce:c1:ed:
         d7:48:c6:d1:91:b7:6a:74:4e:12:ea:fd:6e:0d:36:f3:46:be:
         32:3f:91:af:bd:0e:27:79:e5:c2:26:8d:4a:c0:8e:c4:68:0e:
         32:7d:53:10:a7:a7:78:63:8e:fb:cd:50:c6:0a:4c:22:27:4e:
         39:8f:50:f1:6c:e4:bb:88:e7:d8:8c:0d:65:c8:a8:88:07:fd:
         36:19:ec:e2:81:eb:dc:42:65:11:4b:70:c8:98:59:6a:d6:2b:
         61:54:ba:22:14:68:cb:aa:da:1b:b6:53:d8:9e:d7:7f:f7:90:
         b7:93:5a:f5:e0:22:16:2f:c6:ae:87:fb:f7:d3:20:a6:e5:3c:
         cd:82:e5:c0:c6:26:bd:4c:c3:11:62:d8:64:7e:9f:7c:8d:66:
         19:55:55:ba:41:f4:61:7f:66:19:e2:6f:ee:4f:20:54:5f:08:
         1e:a6:5d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:16 2025 by rpki-client