Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231382e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3231382e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          9pa6gVApbh5yrRdml8yNJtO0XTkukzydoQDtlNtDyNo=
Subject key identifier:   12:2A:5D:49:A9:14:DC:2F:E0:08:6D:D4:97:0D:78:C0:53:20:B1:FC
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       2248283E3F9D609F52208A51A84F4155D90D168C
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231382e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:29 +0000
ROA not before:           Sat 06 Apr 2024 02:40:29 +0000
ROA not after:            Sat 05 Apr 2025 02:45:29 +0000
asID:                     28360
IP address blocks:        189.76.218.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:48:28:3e:3f:9d:60:9f:52:20:8a:51:a8:4f:41:55:d9:0d:16:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:29 2024 GMT
            Not After : Apr  5 02:45:29 2025 GMT
        Subject: CN=122A5D49A914DC2FE0086DD4970D78C05320B1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:a1:83:aa:75:17:a7:9e:5f:83:1c:25:ef:
                    12:6b:ba:18:0c:4f:81:f3:95:d5:ac:4c:02:ab:54:
                    40:34:a8:d1:75:b1:02:b7:7b:77:ae:a0:d0:3e:b0:
                    9c:53:90:e4:e5:07:f8:82:f0:1e:7b:13:9e:c2:c6:
                    18:2e:ce:09:33:d4:da:5a:a8:51:79:26:5d:87:ed:
                    b1:0b:d7:6d:bc:c2:ea:31:5e:2d:90:21:f1:1e:5b:
                    bd:31:98:56:af:20:08:13:b6:43:9e:08:f1:4c:4d:
                    a7:df:da:95:96:94:1e:06:fd:4d:e0:c1:e8:92:84:
                    44:34:fd:64:77:52:d0:3f:be:e6:09:bc:3d:0c:f9:
                    00:6a:38:37:7a:a7:4d:c5:9e:6e:66:b9:69:e8:83:
                    b7:1f:73:d2:ce:a9:5f:fb:30:f5:9c:db:b5:ab:99:
                    c6:3b:3e:8d:24:61:a1:b1:69:f9:4f:9e:af:70:f4:
                    cb:bc:4f:7c:28:3c:bd:0b:ba:81:b3:57:22:14:02:
                    72:a5:aa:6f:17:41:ff:ed:1b:f6:0b:9b:28:9f:62:
                    08:8f:97:9a:2c:b1:9e:f5:c5:66:e1:ed:a0:ea:3e:
                    e7:30:e1:0d:d1:58:76:a3:95:ad:52:8c:d3:83:99:
                    87:33:d1:5b:5a:8c:2b:5a:b3:97:c7:3b:af:7a:6b:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2A:5D:49:A9:14:DC:2F:E0:08:6D:D4:97:0D:78:C0:53:20:B1:FC
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3231382e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:4a:fe:59:13:77:bc:6c:08:95:ab:ee:aa:14:41:19:66:
         83:3b:d6:01:95:93:18:af:c9:d9:b4:49:25:15:d9:a6:74:7f:
         f3:6d:83:35:1f:b0:63:ac:b6:3c:b5:21:b4:99:d3:db:34:30:
         df:c0:6a:7d:9a:3b:c8:f7:74:64:a3:c8:0f:e9:8a:4e:e1:31:
         70:4c:0f:63:b4:40:7a:36:65:7a:47:5b:9a:62:7b:ff:43:0b:
         bf:da:61:b4:c1:39:50:4b:43:ba:80:76:84:41:12:a1:bb:45:
         89:9a:32:2f:41:7d:47:1a:d0:54:c0:91:c6:54:40:66:b5:fe:
         32:b9:cb:cf:08:d2:ac:42:98:36:84:30:67:2d:d8:e2:2c:65:
         1a:f0:15:64:c1:34:35:dc:89:8e:7b:bf:5f:b3:6d:61:7a:5b:
         5c:d4:37:5b:c3:44:85:e6:90:89:b2:60:59:59:72:0f:c5:fd:
         94:00:43:eb:6b:71:df:74:41:5a:9a:9b:f1:44:c7:6f:4a:3c:
         3a:6b:c4:9e:00:0b:93:3e:d1:95:33:f3:c4:0f:34:69:d4:20:
         d9:61:00:a7:b1:57:8a:d9:a1:9a:7f:3e:b7:df:59:f4:8b:60:
         77:f2:75:b2:85:ad:f3:20:e0:8f:d1:1b:e3:b4:3e:05:d1:aa:
         98:1e:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:33 2025 by rpki-client