Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135392e302f32342d3234203d3e20323730393138.roa
File:                     3138372e3132312e3135392e302f32342d3234203d3e20323730393138.roa (raw, json)
Hash identifier:          i4vzt1xt4e2d1RavxhqcksJK0nIMhBuMOm+3NJmn3wE=
Subject key identifier:   AB:43:24:F6:DE:71:11:AD:C6:8D:49:CE:4F:AA:A4:25:91:F8:92:B7
Certificate issuer:       /CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
Certificate serial:       659E26DCA2844C7DFF878C14DE6BFFE642C70623
Authority key identifier: 4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135392e302f32342d3234203d3e20323730393138.roa
Signing time:             Thu 13 Feb 2025 19:03:48 +0000
ROA not before:           Thu 13 Feb 2025 18:58:48 +0000
ROA not after:            Thu 12 Feb 2026 19:03:48 +0000
asID:                     270918
IP address blocks:        187.121.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9e:26:dc:a2:84:4c:7d:ff:87:8c:14:de:6b:ff:e6:42:c7:06:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F565A5812728624EE4199A0244BE5407F1AAAB0
        Validity
            Not Before: Feb 13 18:58:48 2025 GMT
            Not After : Feb 12 19:03:48 2026 GMT
        Subject: CN=AB4324F6DE7111ADC68D49CE4FAAA42591F892B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:30:8e:98:33:31:93:86:29:15:3e:39:2b:
                    f2:3d:8c:79:73:2c:4b:eb:c7:c0:e8:cd:85:8d:21:
                    3a:27:67:c0:73:a5:1c:d8:e8:22:bd:cc:75:e3:a9:
                    fc:0e:c9:8d:a3:1a:78:00:02:cd:1b:4d:d1:11:23:
                    cc:c0:e6:97:b7:3c:04:60:25:05:72:79:5a:5f:01:
                    af:13:3b:ca:79:5c:58:31:13:3f:63:45:ea:d2:40:
                    11:5b:31:bf:5b:fb:2f:a1:fc:4f:da:c6:7b:4d:ef:
                    0d:90:f5:0a:23:b5:19:de:54:1d:bf:38:0c:2b:92:
                    d7:38:60:14:41:ee:b6:74:e7:0c:5c:c3:be:0f:d9:
                    68:cd:a7:5d:4d:03:73:46:7a:6b:fb:2f:78:c7:9d:
                    1c:46:c6:78:1e:4b:95:4f:2b:ff:60:76:b1:0d:c2:
                    ea:39:65:35:6c:f2:a1:5a:0b:09:54:53:62:2e:bd:
                    a8:42:94:6c:a8:9c:71:e5:7c:d1:f3:ef:b8:8e:69:
                    fe:28:df:24:92:48:dc:9a:5f:35:30:0e:77:5c:30:
                    0f:a5:80:cd:01:4f:25:26:d8:04:5b:ab:25:8b:9d:
                    78:c6:18:9c:59:0f:84:55:4c:47:2b:c7:cf:f2:bf:
                    24:8c:6c:ee:eb:46:fd:d3:19:b3:10:32:b5:da:ce:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:24:F6:DE:71:11:AD:C6:8D:49:CE:4F:AA:A4:25:91:F8:92:B7
            X509v3 Authority Key Identifier:
                keyid:4F:56:5A:58:12:72:86:24:EE:41:99:A0:24:4B:E5:40:7F:1A:AA:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/4F565A5812728624EE4199A0244BE5407F1AAAB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F565A5812728624EE4199A0244BE5407F1AAAB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135392e302f32342d3234203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:92:06:49:50:8f:fb:78:15:34:f0:bb:92:5c:5b:c8:56:bc:
         85:c4:7c:68:d1:62:2d:2c:b5:2c:28:ff:1a:f0:80:f7:1e:35:
         c4:93:c1:a3:3d:33:33:53:65:a8:1c:c3:f3:4f:39:56:9a:c7:
         01:1b:e6:2f:4e:f1:35:a4:70:29:c6:0d:00:a5:10:aa:15:55:
         32:91:c9:17:f7:50:87:cc:a0:02:35:fb:98:50:e9:97:34:64:
         c0:62:fd:f4:95:61:5d:cc:27:1e:ce:f4:c7:2e:d2:e1:bb:3e:
         39:c5:7c:cf:5e:09:b7:7f:2d:11:c6:5a:de:4e:20:4f:73:37:
         68:63:75:cd:e8:8b:ed:0d:aa:92:cf:20:a3:b8:bf:ba:ee:f5:
         84:cc:34:ff:30:c0:39:d3:92:7b:aa:b6:74:6f:df:15:c1:85:
         d4:6e:5b:67:9f:43:1b:34:73:61:c2:b0:21:f8:59:07:c1:7a:
         7b:ad:41:b2:db:5e:ed:8a:2f:29:5d:e7:47:29:f7:fe:8b:1a:
         36:b4:0d:dc:15:b3:8e:5b:e7:73:4d:5d:b6:4e:ed:46:26:36:
         78:15:ff:86:0b:c0:32:4b:e5:6b:68:08:74:fd:7a:98:6e:76:
         c0:f9:bf:aa:db:02:1e:5b:2d:46:79:48:78:3f:c8:9b:6d:07:
         d4:c2:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 23:32:21 2025 by rpki-client on console.sobornost.net