Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoMGCwKgV4j3Hrj1MzySmk8fo87SVmhQNEr1aGDmUkhH/0/3138392e38342e3130382e302f32322d3234203d3e20323730383836.roa
File:                     3138392e38342e3130382e302f32322d3234203d3e20323730383836.roa (raw, json)
Hash identifier:          vntA+2xnGXF8dAyClEPBoULKEA3VuQHdTQs64YoBs+c=
Subject key identifier:   46:AB:55:4B:B0:36:FE:D5:C8:8B:E6:E6:8D:5D:F6:35:41:B0:E4:51
Certificate issuer:       /CN=AB369B472C7CE391737DE3B2354ECAE47B5419E6
Certificate serial:       0B34BB8D7AB80457E202AF82425BE441C60E308F
Authority key identifier: AB:36:9B:47:2C:7C:E3:91:73:7D:E3:B2:35:4E:CA:E4:7B:54:19:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB369B472C7CE391737DE3B2354ECAE47B5419E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoMGCwKgV4j3Hrj1MzySmk8fo87SVmhQNEr1aGDmUkhH/0/3138392e38342e3130382e302f32322d3234203d3e20323730383836.roa
Signing time:             Mon 19 Sep 2022 12:00:00 +0000
ROA not before:           Mon 19 Sep 2022 11:55:00 +0000
ROA not after:            Mon 18 Sep 2023 12:00:00 +0000
asID:                     270886
IP address blocks:        189.84.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:bb:8d:7a:b8:04:57:e2:02:af:82:42:5b:e4:41:c6:0e:30:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB369B472C7CE391737DE3B2354ECAE47B5419E6
        Validity
            Not Before: Sep 19 11:55:00 2022 GMT
            Not After : Sep 18 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:aa:1a:5e:1e:06:39:f7:3f:8a:d8:93:26:
                    bd:1f:a8:be:dd:94:91:c7:96:70:f0:34:eb:82:6e:
                    66:4c:f9:61:f4:af:1e:e4:68:63:ba:64:ee:fd:46:
                    d0:77:89:7e:1c:ff:a8:aa:a4:1f:02:7e:20:ba:4f:
                    53:fc:4a:8b:56:66:8b:b7:58:7f:42:b5:d6:05:2f:
                    96:b0:ee:ba:6d:d1:a3:df:1e:f1:f0:51:de:33:2a:
                    16:c3:19:06:15:96:a5:7b:7a:13:98:b3:2b:5b:e9:
                    37:29:8d:31:21:b0:44:58:a3:cf:1c:4a:f5:b8:43:
                    5c:08:bd:e8:6b:bb:01:61:33:a8:49:94:3e:03:30:
                    43:d1:fc:0c:aa:00:8b:c2:23:e1:d4:77:68:43:82:
                    81:6c:2b:cb:38:1c:4e:d4:94:2b:2a:98:22:cd:52:
                    b3:7a:54:02:f4:3d:79:0d:de:42:77:8f:97:3e:02:
                    f1:44:a6:22:23:a4:4f:c6:6e:9f:6f:f7:80:1c:2e:
                    42:cb:3f:1c:64:61:8f:6f:e5:b3:ee:d5:17:82:2e:
                    34:7a:47:5d:95:bf:4f:a5:0b:c2:e2:c3:7a:7c:af:
                    be:3d:5a:b5:38:05:f7:ce:1b:26:85:23:53:86:86:
                    84:f5:fa:c5:9f:a2:d1:ef:56:1a:33:0f:2c:77:43:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:55:4B:B0:36:FE:D5:C8:8B:E6:E6:8D:5D:F6:35:41:B0:E4:51
            X509v3 Authority Key Identifier:
                keyid:AB:36:9B:47:2C:7C:E3:91:73:7D:E3:B2:35:4E:CA:E4:7B:54:19:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoMGCwKgV4j3Hrj1MzySmk8fo87SVmhQNEr1aGDmUkhH/0/AB369B472C7CE391737DE3B2354ECAE47B5419E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB369B472C7CE391737DE3B2354ECAE47B5419E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoMGCwKgV4j3Hrj1MzySmk8fo87SVmhQNEr1aGDmUkhH/0/3138392e38342e3130382e302f32322d3234203d3e20323730383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:c5:92:f3:57:db:a2:50:d1:fe:07:20:bc:4c:b3:24:e6:
         ae:28:71:af:ea:82:60:89:e3:30:44:7f:f3:81:c9:c6:0e:54:
         4d:ed:74:1d:25:69:95:d4:65:19:70:3f:ea:05:4a:e6:6e:3d:
         db:10:d9:cb:9a:5d:11:39:67:d8:3e:14:30:db:f0:7c:10:1c:
         0a:99:18:8e:e9:41:17:33:ef:eb:13:8f:fd:75:d3:4f:de:c8:
         6d:43:b9:fd:b5:77:ae:7b:34:69:4d:7b:8d:4e:dd:d8:42:40:
         4f:90:f5:4b:51:cf:6d:9f:76:6e:4f:95:ea:12:b0:28:15:2c:
         bd:b0:6d:2f:d2:8d:61:cc:aa:4e:5e:65:c4:d9:c1:02:09:02:
         30:71:8d:17:df:56:95:ad:3d:d9:7a:ef:83:b0:df:70:9f:64:
         e6:09:f8:cf:a0:6c:f5:b1:f8:f2:1e:b9:b2:39:5e:e4:4e:b1:
         78:aa:63:53:d6:47:93:24:27:0a:78:66:ce:9c:f9:4a:e0:54:
         7c:c9:6f:60:02:d6:08:89:4a:83:d7:51:6e:e5:a4:ad:82:97:
         46:4d:b3:ed:f9:98:2b:46:b9:6d:7d:dc:c5:93:92:44:26:fc:
         6c:63:cf:9f:86:34:a2:62:fa:ac:61:b5:7f:e7:11:fd:06:db:
         8c:a0:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:01:29 2025 by rpki-client