Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32312d3231203d3e203238333630.roa
File:                     3138392e37362e3233322e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          FbvVEN2X2Ro2+lmWQPzKeIbd9Hp3dYvHQvCFpUxvj9E=
Subject key identifier:   86:5F:04:F2:D2:7F:6A:25:0F:D1:FF:0E:75:9F:B7:CB:D2:F2:B3:0B
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       4B162025F1C6D37897A44615DB36AFD555F3696E
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32312d3231203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:38 +0000
ROA not before:           Sat 06 Apr 2024 02:40:38 +0000
ROA not after:            Sat 05 Apr 2025 02:45:38 +0000
asID:                     28360
IP address blocks:        189.76.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:16:20:25:f1:c6:d3:78:97:a4:46:15:db:36:af:d5:55:f3:69:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:38 2024 GMT
            Not After : Apr  5 02:45:38 2025 GMT
        Subject: CN=865F04F2D27F6A250FD1FF0E759FB7CBD2F2B30B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:bb:c5:39:98:84:3e:cd:b4:a5:64:1c:c1:
                    b8:50:c1:77:62:95:bb:ec:9f:5d:4b:0e:39:47:5c:
                    bb:06:db:66:74:93:df:4c:e0:bd:2a:dd:c8:e6:e9:
                    c5:b5:39:09:d0:fb:80:c3:5d:7a:4b:20:10:27:a4:
                    ff:32:7e:ba:ec:77:16:e3:39:c8:7e:bc:c0:28:08:
                    fc:44:87:fc:85:ee:8e:24:5c:57:ec:e8:84:c8:57:
                    30:9c:8a:97:f1:44:5c:e8:52:eb:4f:ef:21:9c:0e:
                    24:78:e4:c3:e6:a7:f7:e0:d6:a5:e7:7b:f2:76:58:
                    6b:5b:73:5a:4f:9c:c3:b4:81:c8:57:1e:d7:f7:50:
                    e6:50:05:ca:de:cc:f5:30:fe:48:eb:e4:19:63:49:
                    fb:57:5a:5c:f3:22:aa:3c:8b:30:f6:ed:c8:25:cc:
                    11:20:b1:d1:1b:ec:06:17:fc:f8:9c:36:97:8c:cd:
                    8d:3a:32:71:da:ab:d0:2a:bf:d5:53:b2:37:b6:53:
                    33:ab:05:67:b1:df:a8:e4:12:96:0d:45:3b:31:70:
                    3e:de:c4:c0:da:cb:d2:61:a9:65:de:fc:3a:f5:f1:
                    42:2a:9f:37:be:fc:65:f8:2a:82:ec:4a:48:e0:93:
                    a0:2a:0a:fc:a9:fd:a6:a2:4a:4d:e4:68:4c:78:40:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:04:F2:D2:7F:6A:25:0F:D1:FF:0E:75:9F:B7:CB:D2:F2:B3:0B
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:69:1e:df:57:16:bb:8c:7e:94:96:43:60:73:d3:2e:43:13:
         a7:65:d5:fe:6f:fb:be:1f:53:39:11:8c:6c:db:60:fd:bc:a9:
         91:bf:2e:8e:93:0e:75:70:44:df:28:8a:31:4f:70:86:19:0e:
         a2:1e:05:e8:d6:6b:c8:87:74:ff:fb:4e:01:c4:c6:96:61:d3:
         b9:6c:88:b0:85:21:68:6f:9c:15:f6:9e:55:55:79:29:fc:f0:
         ec:05:49:59:4d:b2:f9:a1:0e:de:fc:c0:3b:a7:84:f7:9e:26:
         a3:1c:39:9d:2e:19:05:ca:53:89:dc:1b:e2:e2:2a:48:92:33:
         fb:a4:33:ab:98:7b:24:04:b2:02:1c:31:8a:8f:28:7b:9d:c1:
         6c:4b:b4:75:50:f6:9e:80:86:fb:42:bb:46:16:ee:f9:83:61:
         71:11:a0:b0:05:bc:50:db:30:40:b5:25:db:ad:97:79:1a:e7:
         48:e5:39:b1:2b:a8:7a:42:f3:88:a6:b2:ba:dc:a3:bc:27:c1:
         75:5f:69:23:58:eb:89:7a:42:54:81:37:2f:dc:10:0e:31:61:
         43:ab:a8:a4:8b:ed:be:38:ba:7e:cc:5b:9d:79:20:c7:b8:57:
         47:ad:0f:c2:24:04:f1:a9:0c:9e:b4:8c:e8:e3:c5:bf:13:ba:
         98:77:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:18 2025 by rpki-client