Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138392e34352e31362e302f32302d3230203d3e203238333430.roa
File:                     3138392e34352e31362e302f32302d3230203d3e203238333430.roa (raw, json)
Hash identifier:          tU/u6nHz6/iviYogOl85OIhVT6jr5XDXKyi3MzWE6mk=
Subject key identifier:   05:AE:CE:ED:4E:40:E9:CF:96:37:21:61:2C:66:82:DB:92:F6:97:C1
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       5F1FA1382494DFB6B41ECB6A83FAB65921DB8C80
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138392e34352e31362e302f32302d3230203d3e203238333430.roa
Signing time:             Thu 22 Sep 2022 19:45:05 +0000
ROA not before:           Thu 22 Sep 2022 19:40:05 +0000
ROA not after:            Thu 21 Sep 2023 19:45:05 +0000
asID:                     28340
IP address blocks:        189.45.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1f:a1:38:24:94:df:b6:b4:1e:cb:6a:83:fa:b6:59:21:db:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 22 19:40:05 2022 GMT
            Not After : Sep 21 19:45:05 2023 GMT
        Subject: CN=05AECEED4E40E9CF963721612C6682DB92F697C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:4b:52:19:31:be:d4:6f:94:fc:be:5f:00:
                    6a:45:29:0f:1f:bc:03:7e:e7:03:7b:ec:9c:76:31:
                    34:0f:bd:2b:5c:83:d7:c4:f0:bc:45:c1:e1:b3:f8:
                    48:51:de:54:18:d5:a6:cc:44:0a:07:11:0b:4d:97:
                    22:7c:6e:1e:95:cd:3c:02:44:3f:0a:c0:2a:5b:47:
                    37:be:e7:c8:ac:c8:16:1c:69:b5:b3:f3:33:50:4b:
                    df:26:7e:a3:06:ea:d2:c1:89:6f:4c:40:a5:1e:ee:
                    78:ea:34:4d:d2:26:f6:b4:ff:8c:91:1d:60:ea:8b:
                    b7:2b:49:31:51:30:1f:de:2d:a4:59:a3:74:7d:62:
                    7c:d9:33:f8:66:eb:24:90:6e:a0:8f:86:92:b9:7e:
                    f9:cd:ef:9c:cf:28:1d:8a:9b:8e:2a:b0:fe:3f:f6:
                    df:e1:81:40:b7:5d:b1:59:3c:f7:a8:e7:42:3b:db:
                    f6:6d:c1:73:77:18:e2:c3:90:4c:38:5e:20:9b:f4:
                    88:20:24:31:e9:2f:5e:af:a3:0c:04:82:da:03:0a:
                    b1:2a:af:ff:05:77:d0:2b:fa:09:de:e3:e2:69:89:
                    23:d7:ed:5c:d4:ac:ed:b8:41:4d:17:76:51:92:1c:
                    f3:90:d2:a5:75:2c:e9:e0:ac:3a:40:ab:cf:52:1e:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AE:CE:ED:4E:40:E9:CF:96:37:21:61:2C:66:82:DB:92:F6:97:C1
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3138392e34352e31362e302f32302d3230203d3e203238333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:dc:a3:c6:81:41:d3:db:73:11:8b:59:49:b5:06:cb:12:31:
         0f:7e:27:83:89:b1:19:d3:e5:9c:70:3e:18:15:8c:73:10:f3:
         7d:3c:1b:3e:5f:24:0c:a9:83:43:1b:7e:b4:2f:4c:15:cd:5c:
         6d:c3:44:c5:d1:0c:85:05:4f:cd:b7:34:eb:8f:25:90:47:7f:
         ab:52:65:6c:e0:06:8b:c0:f0:b1:d7:01:fb:e7:26:2f:c1:61:
         cc:8d:e5:5d:19:0d:f1:45:82:23:61:48:e0:79:fc:fa:1f:ce:
         3e:b6:78:25:30:31:e6:36:79:f7:f5:6f:38:f0:6c:f0:95:d0:
         eb:8d:8e:d8:55:9e:71:b4:86:99:f1:33:89:ea:8e:81:e1:05:
         87:76:5c:63:28:94:23:53:2f:17:42:e9:73:7f:12:95:7f:43:
         1c:73:0d:6c:c4:28:7a:cc:1c:d5:cc:51:fe:7a:02:65:a4:f8:
         8e:c0:71:22:4b:2b:17:a6:30:b1:b1:f3:e9:fd:2e:92:47:a9:
         47:8f:b7:30:6d:c6:84:f4:5b:0b:69:4f:a0:78:8c:e3:eb:74:
         77:ba:ca:0b:ee:f0:9f:68:b0:a6:5b:77:31:cf:5b:15:4c:d6:
         71:95:1d:8c:ca:6b:41:14:27:ca:f3:de:ce:0c:18:64:87:66:
         53:5f:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:00:28 2025 by rpki-client