Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3138372e34392e38302e302f32302d3234203d3e203238313432.roa
File:                     3138372e34392e38302e302f32302d3234203d3e203238313432.roa (raw, json)
Hash identifier:          cOC6wpDgwlK785HxZmNdjkArXLVALB58elsD/EktsBQ=
Subject key identifier:   BC:4C:C6:4A:57:38:D5:69:82:92:84:30:8C:6D:A1:52:A6:35:83:16
Certificate issuer:       /CN=D968B6511EF07778C01FA7FFE031522476B79B01
Certificate serial:       17CA9B60ACED92E0B968422B07718424AB1E23EE
Authority key identifier: D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3138372e34392e38302e302f32302d3234203d3e203238313432.roa
Signing time:             Wed 18 Dec 2024 14:16:00 +0000
ROA not before:           Wed 18 Dec 2024 14:11:00 +0000
ROA not after:            Wed 17 Dec 2025 14:16:00 +0000
asID:                     28142
IP address blocks:        187.49.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ca:9b:60:ac:ed:92:e0:b9:68:42:2b:07:71:84:24:ab:1e:23:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D968B6511EF07778C01FA7FFE031522476B79B01
        Validity
            Not Before: Dec 18 14:11:00 2024 GMT
            Not After : Dec 17 14:16:00 2025 GMT
        Subject: CN=BC4CC64A5738D569829284308C6DA152A6358316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:4b:02:e5:96:0a:58:ee:05:55:22:0d:f9:
                    65:d2:5a:2c:45:2d:f0:b7:68:01:6a:02:c6:45:f1:
                    6e:84:70:10:5e:84:a1:c5:36:4a:b4:f4:46:e1:89:
                    ce:36:f7:ab:f5:9b:90:b6:08:c4:89:27:55:ba:49:
                    40:8f:4a:85:3f:08:92:fc:35:27:48:92:38:4e:a9:
                    72:3c:1a:e5:59:5b:dc:62:c5:c0:52:c7:35:72:68:
                    5a:83:07:13:08:31:e9:60:48:b6:68:bc:fb:cb:62:
                    3d:c4:d3:48:e1:0a:f0:ed:34:63:07:28:fe:65:b3:
                    66:45:75:99:85:93:d7:14:47:74:32:db:f8:9d:41:
                    6b:2c:a0:a5:7c:28:e4:92:dd:73:64:c1:ce:7a:26:
                    49:c4:8a:45:3a:4c:fe:63:f8:44:77:50:3c:59:d2:
                    d7:e4:8c:42:0c:a6:80:7a:91:96:f4:46:9a:21:98:
                    e0:fa:b4:48:a1:fe:6c:c8:ef:b3:b1:1e:f7:e2:68:
                    6d:9c:c7:1b:18:1f:0b:1b:66:fc:ad:de:68:9c:8c:
                    eb:53:b6:50:a6:ee:a3:36:54:d3:8d:45:42:b6:f4:
                    d9:3d:3c:6d:b4:cb:4e:58:1b:c7:ac:b3:3c:6d:aa:
                    f1:db:26:53:7f:ab:8e:6c:5f:2d:e4:81:6a:c7:3e:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:C6:4A:57:38:D5:69:82:92:84:30:8C:6D:A1:52:A6:35:83:16
            X509v3 Authority Key Identifier:
                keyid:D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3138372e34392e38302e302f32302d3234203d3e203238313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:a4:73:b0:b7:18:2c:58:01:cf:3a:33:7d:ab:e1:ba:62:
         29:47:c8:54:b9:d6:33:24:32:26:54:e1:13:90:98:3c:a5:38:
         2a:36:8f:a9:82:85:2d:a9:3f:8e:df:00:e1:a5:96:92:8b:23:
         03:d0:67:88:96:0e:b0:98:10:f7:4d:44:75:d9:6b:b4:2e:53:
         2c:45:82:97:59:ba:08:cc:d0:a4:ae:b2:f1:1c:e1:6c:98:2a:
         a7:b5:a8:f6:54:84:6a:73:d9:62:40:4e:cb:75:14:c9:f7:d9:
         6e:83:10:79:12:6e:03:b4:38:2c:f1:84:ed:4a:83:02:75:47:
         95:e6:ea:41:24:9e:80:f6:b5:c7:d3:b9:20:25:da:0b:66:6c:
         19:0c:94:95:f1:af:51:e0:92:2a:e7:94:e1:dd:3e:50:5b:13:
         e9:a6:7a:3c:85:b1:04:7f:92:fa:de:26:b5:3e:2b:18:3b:65:
         94:85:fc:65:6d:53:22:19:73:70:06:de:8d:0a:a5:2e:97:5f:
         c6:30:6f:06:79:5a:1d:cb:63:5b:20:b5:7c:12:8e:88:1f:ad:
         f8:8e:05:36:57:9b:a5:5c:7b:ee:5d:eb:7f:9c:82:80:33:aa:
         dd:fc:41:41:69:2a:d9:9a:f3:2b:f9:4a:99:1b:c9:16:46:20:
         42:ff:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:00:05 2025 by rpki-client