Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32322d3232203d3e203238333630.roa
File:                     3138392e37362e3231362e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          yui/qKyNw9s+aTV7EgDJl0KbHXXQtMitbiVFVaJaCZk=
Subject key identifier:   16:8E:01:36:E0:2C:6F:2D:B1:FE:A1:15:A5:1E:2A:E5:90:7E:41:E8
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       41C3AFF0C4CCDB998AB8D04F05B0DDDC3A916133
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:32 +0000
ROA not before:           Sat 06 Apr 2024 02:40:32 +0000
ROA not after:            Sat 05 Apr 2025 02:45:32 +0000
asID:                     28360
IP address blocks:        189.76.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c3:af:f0:c4:cc:db:99:8a:b8:d0:4f:05:b0:dd:dc:3a:91:61:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:32 2024 GMT
            Not After : Apr  5 02:45:32 2025 GMT
        Subject: CN=168E0136E02C6F2DB1FEA115A51E2AE5907E41E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:ec:9e:7c:13:b9:dc:85:75:2c:3b:17:ca:
                    30:4e:8d:11:12:62:61:85:10:e7:13:ec:ef:ba:7b:
                    cb:c4:10:5b:36:17:59:47:c6:1a:cd:2b:83:2e:90:
                    d3:e7:c4:3e:59:c8:ea:6b:3e:9b:91:7a:ba:2c:46:
                    d8:19:62:11:e4:11:9a:d4:23:23:92:96:2e:f0:d1:
                    04:8c:47:07:c8:bf:0f:62:09:8e:66:ec:79:71:84:
                    9a:84:91:e0:25:cf:2a:67:4e:fe:72:e8:23:1f:85:
                    ac:58:a7:a9:bf:2f:9c:d2:d6:76:44:c4:d0:a2:de:
                    7d:85:fc:6b:62:ce:28:e9:a3:c5:ab:7e:db:92:25:
                    ae:23:74:84:83:89:36:ab:89:d1:02:e9:dd:e0:a9:
                    ff:89:9a:43:2f:05:79:16:27:b0:b9:f1:ec:8b:06:
                    cb:e2:d4:f9:1f:67:30:ef:ae:0d:c4:99:f5:f6:fa:
                    19:f8:4f:e5:09:2a:fe:5b:34:cc:70:dc:33:a2:95:
                    2f:5b:cb:36:e9:d8:6c:cf:70:36:23:8e:90:cb:75:
                    67:20:5e:01:df:e3:16:8e:5e:c3:2e:3b:c7:93:0b:
                    27:54:ba:d7:65:29:17:71:25:1b:a8:f9:9e:3e:85:
                    af:d0:dd:7b:51:ec:e7:be:52:e3:f8:2d:f0:df:82:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:01:36:E0:2C:6F:2D:B1:FE:A1:15:A5:1E:2A:E5:90:7E:41:E8
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231362e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:47:32:49:a1:ad:c4:b0:bf:cb:24:39:1e:a1:dc:14:26:
         ce:a9:2f:7a:fd:a2:10:27:75:1c:33:2c:fa:73:97:29:86:49:
         25:e4:a2:4a:f3:a2:bf:59:b7:4c:b5:6e:21:2d:24:74:54:8d:
         14:43:ee:42:bf:4d:d9:02:95:7d:50:d0:22:87:a2:d1:a2:33:
         50:50:7a:85:82:51:4e:b8:9d:f7:77:98:46:34:ed:c5:10:58:
         c8:b3:52:7d:8d:70:1e:bc:0d:83:a1:4e:dd:fc:b5:46:f4:c0:
         f0:3b:73:09:ae:6b:bd:25:32:57:cc:18:00:97:a1:ff:30:84:
         33:78:81:83:e1:15:c6:21:3e:d7:16:b2:0c:8b:54:ae:27:73:
         b5:30:45:36:41:a3:ae:0b:09:a1:0f:25:18:73:86:45:03:71:
         75:87:d8:bf:c3:a6:a6:ef:ea:65:13:04:f2:f7:a0:4e:4a:50:
         3e:41:1f:db:24:37:24:37:98:fb:83:9a:b0:12:3f:2f:bb:d6:
         68:75:25:7b:46:a5:72:f4:93:f8:f0:e6:1d:70:d6:03:95:e4:
         b4:67:46:ce:ab:78:d6:b8:58:e6:a5:61:84:a0:5e:ca:a7:19:
         44:e5:c7:01:f3:39:c8:57:a3:c3:03:6b:c8:39:d6:5b:ab:79:
         4a:a8:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:40 2025 by rpki-client