Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          nSKuQnXx0l+uwZLfcsbgWOTyg3k2eCJu9CoER9TMSuI=
Subject key identifier:   D6:D8:8A:41:21:35:89:B7:B8:32:9E:AA:6C:1F:04:24:BC:33:DE:78
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       2C46F6D45BBFB383B6812E9D0F4D67C052587B42
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:06:32 +0000
ROA not before:           Mon 12 Aug 2024 20:01:32 +0000
ROA not after:            Mon 11 Aug 2025 20:06:32 +0000
asID:                     28360
IP address blocks:        189.76.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:f6:d4:5b:bf:b3:83:b6:81:2e:9d:0f:4d:67:c0:52:58:7b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:01:32 2024 GMT
            Not After : Aug 11 20:06:32 2025 GMT
        Subject: CN=D6D88A41213589B7B8329EAA6C1F0424BC33DE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:5e:72:d7:01:c0:2c:e8:89:5a:f3:d3:38:
                    c7:ba:50:7a:7a:99:a8:38:9f:46:90:57:53:8e:81:
                    f9:1a:24:b2:76:0a:f3:dd:48:55:fa:cf:ef:33:b3:
                    5e:cb:4d:31:f7:b0:9d:62:cf:e1:1e:75:82:bf:d0:
                    d1:a6:f3:d2:81:ff:1a:11:ec:76:97:3d:c1:4f:d6:
                    2d:4f:79:55:d2:1c:6e:b2:83:16:63:02:d1:49:2c:
                    c8:43:a9:88:a0:2e:bd:7e:49:d3:64:1f:71:6c:23:
                    df:04:4e:09:a6:8c:b7:3c:0d:44:80:fd:f9:c7:4a:
                    55:b5:22:6f:dc:ff:d6:0d:03:77:ba:83:6f:78:b8:
                    c4:6e:34:2b:6c:8e:b9:ec:4b:c3:82:29:e1:44:e7:
                    71:a0:d0:99:e9:af:34:1a:45:93:83:4c:fa:4e:9e:
                    a5:0a:fb:47:21:ff:03:a9:e7:dc:b4:b2:9c:c3:97:
                    9a:26:15:24:5b:80:ad:0e:9e:0a:5a:b4:9f:40:f3:
                    ea:bf:a2:f3:3e:14:51:fc:97:fe:18:d0:d4:fa:cc:
                    60:57:de:32:43:25:cb:ef:37:76:21:f8:c5:d5:cc:
                    f5:85:13:af:10:a6:76:9e:9c:e5:da:c9:2f:2e:47:
                    5b:ec:a6:5f:bc:ce:84:de:65:f1:24:67:c2:d2:2a:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:8A:41:21:35:89:B7:B8:32:9E:AA:6C:1F:04:24:BC:33:DE:78
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:88:ab:32:13:82:c5:cc:fe:36:a6:28:24:43:14:2c:37:
         6c:64:9b:6c:c6:a5:9a:c8:c6:6f:98:c2:41:ae:f2:dc:45:b2:
         3e:0d:92:3a:af:9c:ff:75:48:c5:7d:7c:14:bb:6a:da:37:e4:
         35:dc:fe:17:32:2f:76:64:1c:59:c8:40:83:4e:3f:87:cf:76:
         f8:fa:43:58:22:23:b4:c9:1b:3c:0e:26:0e:ee:f6:f6:a3:ee:
         a7:d8:cf:6c:14:f9:90:b1:27:7d:a5:ab:e8:d3:41:ab:1c:21:
         97:01:44:e1:5a:8b:ee:12:bf:0b:6b:a7:43:91:c7:aa:43:33:
         e7:b4:22:f6:77:d5:b7:4e:3e:52:fd:a6:23:33:80:3c:5f:de:
         fa:8a:60:e7:ae:42:6d:9b:ce:c2:be:c6:b8:3d:ef:f7:3c:06:
         3f:75:3e:05:b6:5c:f0:f4:8e:cc:d4:78:24:8e:6f:7f:62:e3:
         52:0a:ad:a1:c8:5c:08:d4:9e:e8:a3:d0:bd:89:93:6b:b6:7a:
         b2:27:50:a5:25:df:8e:6c:bc:81:5c:10:37:79:1b:9d:73:b1:
         19:b1:81:7f:f7:82:9a:e4:ec:49:b6:69:bb:6f:69:45:2c:ca:
         44:b5:a6:6f:c0:f5:7c:a9:3c:5e:17:02:2e:d3:1f:94:50:26:
         32:cf:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:02 2025 by rpki-client