Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa
File:                     3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa (raw, json)
Hash identifier:          tnzJ2xAv7u+yzoDneHw4e37fqJ/aAAn9nPfGzjT2+80=
Subject key identifier:   44:E8:45:3C:0A:B6:D9:F2:00:C1:86:F1:3A:48:06:3E:2A:B2:9A:B5
Certificate issuer:       /CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
Certificate serial:       2BEE0A361CAFC2EA32ABE4CBD1510C1E09BB7529
Authority key identifier: 4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa
Signing time:             Thu 13 Feb 2025 19:03:47 +0000
ROA not before:           Thu 13 Feb 2025 18:58:47 +0000
ROA not after:            Thu 12 Feb 2026 19:03:47 +0000
asID:                     270918
IP address blocks:        187.121.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ee:0a:36:1c:af:c2:ea:32:ab:e4:cb:d1:51:0c:1e:09:bb:75:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
        Validity
            Not Before: Feb 13 18:58:47 2025 GMT
            Not After : Feb 12 19:03:47 2026 GMT
        Subject: CN=44E8453C0AB6D9F200C186F13A48063E2AB29AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:63:b0:30:6a:a4:8f:39:57:06:3c:c5:3d:
                    2f:a6:52:79:d3:4f:6a:33:ea:16:e2:22:e7:da:b5:
                    52:1b:58:0e:c4:76:cc:64:de:56:fd:12:7e:f3:e1:
                    9d:39:1d:5d:78:58:0c:f0:21:3a:38:0a:0a:21:8d:
                    be:c7:82:c0:93:4b:22:b7:84:6d:de:6e:03:97:1a:
                    8c:48:49:5d:47:ce:2e:d5:3d:9d:b8:44:97:99:1b:
                    4d:8c:88:5a:bd:dc:18:17:b6:9a:a0:6d:a5:2b:b5:
                    32:ee:20:f0:30:21:67:28:74:de:f6:2e:2c:2e:02:
                    72:df:59:f5:2a:87:5e:ae:7a:90:2f:96:0b:be:98:
                    f5:66:83:c1:ad:88:c3:b1:78:fa:da:90:48:76:ea:
                    ad:72:a6:fa:09:af:6c:1f:88:4a:95:c9:0b:93:0c:
                    aa:2b:02:90:01:20:3d:5e:29:a2:6b:6e:8c:85:d2:
                    c3:71:87:4f:81:77:fa:24:c2:fe:28:1d:a5:3e:63:
                    c0:72:96:ce:e1:23:e3:3f:e9:5b:66:a4:2b:14:86:
                    a2:67:37:5e:f5:57:87:4a:7f:60:d2:8f:c0:5d:18:
                    f6:c0:ca:30:82:b2:b0:d3:2e:55:12:a8:22:cd:11:
                    c9:89:27:fc:77:b8:96:e6:b4:dd:62:86:2c:f2:7f:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E8:45:3C:0A:B6:D9:F2:00:C1:86:F1:3A:48:06:3E:2A:B2:9A:B5
            X509v3 Authority Key Identifier:
                keyid:4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:78:7e:78:c8:35:4a:fe:d9:56:a5:a3:75:94:31:bf:6d:
         83:11:97:79:9e:f9:84:f2:48:37:df:74:48:80:0c:fe:bf:0f:
         c9:3a:3f:c2:be:e9:ff:30:9d:68:84:a9:04:02:24:44:86:27:
         06:dc:62:fd:97:a7:22:ef:a6:be:6f:31:da:31:4d:56:4a:41:
         2b:3c:3a:1a:84:04:1f:de:8b:e4:0b:cb:4b:89:3c:17:d7:f1:
         1d:5c:a9:f3:e4:f5:a5:88:31:bb:db:8f:04:16:73:97:43:4b:
         c6:0a:0e:bd:fd:26:07:28:2a:5a:72:77:f6:d6:ed:95:1b:3b:
         6e:94:ec:fe:ad:27:79:b0:6d:8e:a2:e0:f4:e8:7c:50:9a:14:
         e0:c3:79:9f:f6:43:bc:b8:3b:dd:70:8b:63:d3:be:c1:68:60:
         8b:82:de:5f:51:b7:63:3f:90:54:ca:d9:07:b0:db:6c:21:6f:
         86:3c:40:de:63:c3:30:f2:31:25:55:c8:88:22:67:0b:00:06:
         57:0a:95:11:13:a1:f3:29:21:d9:c7:96:83:30:fb:5e:d9:1d:
         c7:c5:4a:a5:52:d4:7e:f7:75:13:a6:2b:65:95:af:c4:b5:8f:
         77:1f:26:64:c4:ef:b9:79:9c:70:ed:f2:03:60:6f:b7:d6:1e:
         7a:36:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 23:32:21 2025 by rpki-client on console.sobornost.net