Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa
File:                     3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          6oMUCdLhfDMxbFyKBva0DO3Y/3pPDVLYNt0xLZ0PHmI=
Subject key identifier:   7D:F8:E5:CD:7A:B7:B4:AD:C9:EA:DC:B1:6E:8B:63:F0:21:F7:3C:FF
Certificate issuer:       /CN=84952BD36EF412E113A81649D3C5602505743767
Certificate serial:       412A5605DEF1FEDC8972EE1C5EECCA2D34817440
Authority key identifier: 84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa
Signing time:             Tue 18 Mar 2025 11:23:48 +0000
ROA not before:           Tue 18 Mar 2025 11:18:48 +0000
ROA not after:            Tue 17 Mar 2026 11:23:48 +0000
asID:                     262669
IP address blocks:        189.39.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2a:56:05:de:f1:fe:dc:89:72:ee:1c:5e:ec:ca:2d:34:81:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84952BD36EF412E113A81649D3C5602505743767
        Validity
            Not Before: Mar 18 11:18:48 2025 GMT
            Not After : Mar 17 11:23:48 2026 GMT
        Subject: CN=7DF8E5CD7AB7B4ADC9EADCB16E8B63F021F73CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:d4:32:40:31:da:be:9f:62:c7:b4:0c:67:
                    da:72:f7:e7:f6:98:b8:0d:f4:91:7b:29:1a:7e:82:
                    03:14:57:eb:c4:46:5e:c2:46:85:fa:84:fd:52:27:
                    0c:1d:2f:58:41:ec:05:5a:f8:df:38:0d:47:6e:5e:
                    d0:7a:e8:6d:4b:fd:2d:63:6a:f6:4d:91:65:18:64:
                    a4:46:6b:3b:13:48:f7:2c:a5:69:6a:80:31:56:bf:
                    42:2d:e9:d2:47:02:3b:76:85:ac:99:6b:20:76:58:
                    21:dd:91:f7:8a:d8:e3:85:dc:b6:bd:00:0a:46:e0:
                    e7:39:f0:cf:c9:ab:0f:6f:35:1f:ee:cd:ae:de:0b:
                    58:38:0c:40:74:83:c1:a3:50:b0:a3:f0:ad:7c:a7:
                    d5:93:3b:9c:93:18:ed:87:4b:af:e6:85:9f:41:65:
                    db:0d:35:05:d7:4e:6f:c3:f6:fd:97:a8:4d:4e:9a:
                    5e:70:b4:58:b7:bc:8e:f0:d0:c0:08:e6:8b:c8:4b:
                    bd:f1:47:db:d2:ae:76:b5:1f:87:a5:fe:81:a9:96:
                    e0:e2:64:00:69:0d:1f:99:2d:b1:aa:26:e2:e0:80:
                    62:ef:3d:24:69:b6:ed:96:28:3d:94:67:ec:3e:fa:
                    6c:6a:1f:df:4f:d3:0f:d4:03:ed:71:1f:05:d4:77:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:E5:CD:7A:B7:B4:AD:C9:EA:DC:B1:6E:8B:63:F0:21:F7:3C:FF
            X509v3 Authority Key Identifier:
                keyid:84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/84952BD36EF412E113A81649D3C5602505743767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:9c:3f:95:9f:52:6e:cf:91:dd:cb:9e:9c:33:e3:b0:4d:
         93:8b:40:e6:8a:d6:51:eb:94:b9:f4:15:be:9b:21:6f:6f:f1:
         cc:d4:54:3c:9f:a2:24:a2:76:a6:bc:5c:ac:3a:d8:49:52:8a:
         68:0b:84:2f:36:9a:7f:de:3f:ce:db:b0:b5:a8:71:72:f2:a5:
         94:3e:db:b4:cf:f4:f1:2e:41:9f:f6:4a:78:02:c0:38:5c:69:
         25:b8:d6:bb:01:13:d8:71:33:d9:8c:c8:ad:02:31:ae:78:0a:
         f1:a9:cf:52:83:3b:9a:27:87:5e:48:bd:6c:5e:b2:c3:63:0c:
         92:5c:32:79:76:a4:1b:a4:97:6a:53:3e:6c:5a:4a:c7:bc:67:
         19:cd:7c:d7:01:ad:a4:cd:06:80:1a:46:4e:f1:ae:8e:7e:c7:
         e7:16:19:d4:da:4f:12:d6:6f:1b:a6:8c:cd:ab:96:10:a3:48:
         e9:52:23:0a:b1:76:f0:f9:bb:cd:09:27:2f:52:23:46:0b:93:
         c3:d1:f7:df:72:f7:50:ea:7e:97:93:e9:70:60:94:86:32:7f:
         63:b8:b2:40:23:a1:a2:18:a0:bc:62:c0:ed:c7:df:51:58:b9:
         cf:ef:4e:7e:76:78:24:23:5f:05:7e:94:a2:c9:41:36:31:7f:
         08:82:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:55 2025 by rpki-client