Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34342e302f32332d3233203d3e20323632383735.roa
File:                     3138392e3131332e34342e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          kyxiob8tB07R9eZ4MGd7z53BJWx5wUlwKXRSBf0BKY4=
Subject key identifier:   42:A1:2D:55:83:08:52:41:8C:71:99:0E:5B:DC:2A:03:BA:E8:81:23
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       47F29E96710DE54B69742A78AD595A6736DB75FA
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34342e302f32332d3233203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:01:26 +0000
ROA not before:           Thu 02 Jan 2025 12:56:26 +0000
ROA not after:            Thu 01 Jan 2026 13:01:26 +0000
asID:                     262875
IP address blocks:        189.113.44.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f2:9e:96:71:0d:e5:4b:69:74:2a:78:ad:59:5a:67:36:db:75:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:56:26 2025 GMT
            Not After : Jan  1 13:01:26 2026 GMT
        Subject: CN=42A12D55830852418C71990E5BDC2A03BAE88123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:56:76:fe:a7:38:ba:02:7a:50:ad:35:04:
                    ec:67:62:ae:9d:a4:cb:35:b8:2e:b9:43:aa:f7:f5:
                    02:21:ed:15:18:86:e2:12:05:42:01:7c:81:36:c5:
                    d8:b4:6c:9a:02:fe:a3:f2:f2:a6:56:ce:3c:fd:2e:
                    04:82:51:58:83:71:07:e7:b3:63:b1:d4:0c:20:c0:
                    71:8c:26:bf:27:3c:09:e6:59:ef:ea:39:16:80:f1:
                    f8:93:6a:74:c3:53:2b:6c:9d:29:ca:7a:43:0b:98:
                    8c:2d:36:df:6f:0c:7d:f7:1f:82:c8:a4:bf:2d:f6:
                    2d:33:c9:c4:08:a4:30:7e:a3:77:ec:ab:82:2e:c7:
                    de:eb:79:19:e3:3c:65:f2:f3:70:f7:bf:38:f3:0b:
                    2e:cf:44:c8:73:0a:bb:81:7b:61:b5:df:21:64:16:
                    0b:0f:bf:bc:83:f5:e0:97:c7:ef:2e:a1:c9:39:f6:
                    98:53:92:6b:d6:a0:17:81:eb:e9:e2:89:e6:e3:0b:
                    06:8e:5a:18:f8:10:f5:dd:72:e2:b6:2a:3c:d3:ed:
                    f3:e3:da:d2:23:45:7c:7d:7f:69:e2:0e:c0:41:16:
                    57:d0:a4:40:eb:2c:f4:50:3f:6e:b2:af:2c:54:95:
                    4e:65:32:aa:51:93:52:69:42:5f:36:64:23:46:59:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A1:2D:55:83:08:52:41:8C:71:99:0E:5B:DC:2A:03:BA:E8:81:23
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e34342e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:56:e4:bf:88:b7:2a:b0:9c:cb:e7:4c:f6:f0:5c:98:9f:98:
         47:a6:f6:98:ab:62:9f:86:6c:16:4e:84:e1:34:46:9b:f0:26:
         0a:e9:54:99:ea:51:a8:2d:2c:26:31:49:5c:d0:81:59:e4:e6:
         ab:49:33:f3:db:27:ec:ff:c8:b9:34:7f:18:ac:27:ee:ed:c5:
         cf:2e:f7:bf:a7:38:e3:1e:29:96:c3:12:3b:7e:8e:c0:1d:53:
         3f:5b:00:28:49:e9:72:02:e8:ac:7b:ea:3e:15:34:f2:5e:81:
         c9:a6:7f:aa:cc:ae:18:cd:e2:43:dc:ff:b7:38:04:2c:2e:90:
         bd:b2:38:24:62:c7:0a:06:a5:d8:dd:4f:ba:c9:c4:a0:30:44:
         2c:73:1b:4f:28:ce:c1:e2:7b:23:f9:39:20:3e:e6:36:4b:56:
         04:1e:da:e7:c0:cc:1d:83:09:b0:dc:fb:f5:f7:cb:90:2a:77:
         e3:8c:bc:ce:24:ef:10:60:41:fe:69:c4:81:c1:cf:9b:b0:cc:
         39:d8:db:b2:90:5b:9a:90:18:d4:d7:be:6e:27:d1:f8:a9:4e:
         0d:c7:07:ca:1b:0e:4d:19:69:cc:41:8b:ad:10:de:dd:54:02:
         52:10:83:9b:47:72:a1:83:11:c6:b3:a2:8b:af:3f:21:c1:dd:
         9c:71:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:07:47 2025 by rpki-client