Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232362e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3232362e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          lqf5sP+CpOAxSPboGlvyw93hQozr+sGFmJiUJTu8W6A=
Subject key identifier:   B1:09:5F:D0:B7:BA:DA:3A:15:31:AC:35:98:69:DE:70:D6:4F:E1:F2
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       3588BE3B12FC7143B048225F7A02DA34002F0967
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232362e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:04 +0000
ROA not before:           Sat 06 Apr 2024 02:41:04 +0000
ROA not after:            Sat 05 Apr 2025 02:46:04 +0000
asID:                     28360
IP address blocks:        189.76.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:88:be:3b:12:fc:71:43:b0:48:22:5f:7a:02:da:34:00:2f:09:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:04 2024 GMT
            Not After : Apr  5 02:46:04 2025 GMT
        Subject: CN=B1095FD0B7BADA3A1531AC359869DE70D64FE1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:00:9f:20:2a:3b:95:b3:c2:a2:74:46:67:
                    4d:6f:2e:ac:5c:1e:42:26:08:07:78:9b:a5:ef:a7:
                    37:c6:94:52:73:70:af:f1:61:23:93:62:ae:14:46:
                    54:ea:7e:51:8e:5d:d8:ca:24:e8:a5:27:51:63:79:
                    22:00:19:9c:cc:5e:37:00:ba:e9:b6:42:b9:57:f4:
                    85:fe:e4:93:34:03:11:33:6b:f3:ad:53:3c:22:22:
                    f6:72:5a:0d:4c:d7:6b:8b:44:e0:e7:2b:09:de:17:
                    5d:dc:cc:6d:43:17:0e:22:f1:0d:3c:54:04:fd:b9:
                    b0:ee:da:e8:b2:a5:1c:f6:b1:4a:13:bf:31:72:31:
                    bf:9f:c1:1a:c9:92:ba:3a:e7:c9:24:10:bc:64:38:
                    d0:77:c1:b1:f0:36:29:f4:63:7b:f9:1f:c4:80:ec:
                    97:0d:0d:1a:9f:70:7a:ef:e0:d4:ba:4a:a0:a6:76:
                    26:2a:89:4c:2d:2e:d5:f8:31:06:1d:00:e7:09:6b:
                    c4:46:f8:be:c1:5a:12:5f:32:54:4f:9b:f0:b0:4c:
                    ec:4e:91:ad:fe:6c:95:92:3f:a6:98:48:2f:02:5d:
                    5e:24:0e:bd:c7:87:fd:4f:4b:76:40:98:96:66:c2:
                    5d:f3:83:ff:0e:b3:06:65:3e:54:be:49:95:1d:dc:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:5F:D0:B7:BA:DA:3A:15:31:AC:35:98:69:DE:70:D6:4F:E1:F2
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232362e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:f6:29:1a:97:b9:76:a0:64:32:80:0b:87:5d:60:76:73:
         e1:fb:74:bf:ab:d5:3f:fc:33:6c:ca:9e:7f:72:65:dd:42:d0:
         1a:34:fe:6a:31:14:70:fd:ba:fe:8a:55:3b:71:9c:01:dc:57:
         ea:54:93:05:be:1b:b0:77:d0:5b:75:74:df:ef:80:fb:52:f1:
         41:28:24:32:4f:9f:d2:52:6a:24:de:57:03:39:5a:cc:f3:ee:
         0d:22:5a:87:9d:fb:ab:4e:6c:5d:2b:fa:7a:37:b3:01:f3:4e:
         49:3b:51:64:2d:58:4c:5d:e1:d2:5d:de:b0:f0:b6:50:86:50:
         30:f5:84:f8:e7:ac:83:d2:b3:57:a4:61:e5:8d:06:7d:1f:bc:
         01:02:bc:86:c3:68:22:c7:97:c2:16:98:0e:36:cf:0f:bf:7f:
         94:00:12:2b:86:dc:2f:85:72:3e:64:39:42:35:68:97:46:5d:
         97:16:d5:cd:20:b8:ff:20:36:27:5d:d1:8a:65:1f:26:61:27:
         5f:17:65:f5:30:79:4d:01:31:8e:83:88:77:d1:32:da:af:ec:
         4c:85:31:6a:7b:84:51:ce:28:f5:d6:89:8c:61:8d:62:8b:db:
         5c:8f:14:30:8f:a1:aa:e4:74:26:81:13:5e:45:71:fb:7c:11:
         9b:a7:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:58 2025 by rpki-client