Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32332d3233203d3e203238333630.roa
File:                     3138392e37362e3233322e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          ITjYgnEzaY1zM5W+X9xfGu3yCTB3U2qOqoA7xq9wspg=
Subject key identifier:   24:87:DC:C5:4B:D0:07:87:36:3F:39:8B:3B:25:F2:5C:B3:FB:ED:4D
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       088C6361A446D1F941A615220AFB6DF741C0EE46
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:36 +0000
ROA not before:           Sat 06 Apr 2024 02:40:36 +0000
ROA not after:            Sat 05 Apr 2025 02:45:36 +0000
asID:                     28360
IP address blocks:        189.76.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8c:63:61:a4:46:d1:f9:41:a6:15:22:0a:fb:6d:f7:41:c0:ee:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:36 2024 GMT
            Not After : Apr  5 02:45:36 2025 GMT
        Subject: CN=2487DCC54BD00787363F398B3B25F25CB3FBED4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:0e:04:25:af:d4:0a:78:c5:15:de:0a:73:
                    ff:d7:de:3c:d5:d4:ee:71:19:37:ad:26:22:58:44:
                    2d:94:34:97:e8:83:9a:da:19:cb:12:65:12:47:a6:
                    33:3d:02:b5:80:43:f5:9e:d4:a2:0a:4a:6d:2d:a1:
                    fd:d9:78:dc:71:4d:d8:bf:a8:0f:34:a8:6f:c9:df:
                    40:32:0e:b0:e6:21:8e:55:aa:c9:39:06:42:81:b0:
                    25:fe:89:92:94:1c:72:11:86:e8:5c:3a:88:d7:02:
                    97:36:8a:b9:e3:35:5e:0a:4a:13:52:c3:b6:cf:57:
                    bf:5c:3b:7d:8c:cd:54:ed:38:7d:b4:3b:43:39:f7:
                    ee:66:55:e3:a6:c7:34:6e:03:d6:8a:ff:ee:1c:ea:
                    fc:2f:b8:ba:14:4d:11:e3:c9:69:e0:e1:d1:cc:72:
                    9e:34:74:ca:6e:88:08:f7:81:5b:3b:13:ca:55:3b:
                    c7:bb:86:ef:a4:0f:ca:da:0d:18:a0:f7:06:1b:86:
                    97:ac:67:6a:93:5b:73:5a:1b:7d:a5:34:4f:98:8d:
                    24:f0:71:6f:a5:c8:40:c9:15:15:e4:b9:43:95:09:
                    d9:6b:c1:9d:96:4b:72:23:5a:2d:46:36:ab:7a:81:
                    ce:2c:04:7b:a2:ba:1a:53:9a:c6:60:05:0d:82:7e:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:DC:C5:4B:D0:07:87:36:3F:39:8B:3B:25:F2:5C:B3:FB:ED:4D
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3233322e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:90:12:e4:0e:ae:cc:81:3e:41:f9:9d:de:06:04:88:12:c7:
         7b:07:ae:85:42:a4:c9:32:bf:49:41:18:0b:f0:41:c5:36:8a:
         ea:1d:b8:d5:83:6a:41:9d:92:91:41:81:cb:55:48:7b:a7:0c:
         df:ed:0f:03:57:fa:5a:4f:c8:14:62:27:a8:5d:18:4c:4d:34:
         d7:77:32:62:98:fc:ee:90:bd:67:09:3a:dc:3c:46:eb:d6:d4:
         2b:68:d8:08:ec:0e:38:65:55:40:b0:60:9f:2e:61:eb:5d:3c:
         6f:59:d3:64:a0:f2:52:e1:f9:9b:4f:ea:11:95:59:06:50:85:
         67:7a:44:7a:ef:01:77:0d:0a:56:c1:08:e4:4b:f8:1a:c8:50:
         f9:15:69:76:13:c8:cd:ec:6d:5e:ea:96:92:8f:3a:f1:ec:48:
         40:b4:03:16:6a:b8:17:58:26:35:a6:c7:09:31:ba:24:01:14:
         24:b9:97:d1:78:27:06:a7:56:3a:39:dd:47:20:66:fd:b6:47:
         3a:c2:67:72:49:60:17:dd:ab:99:9b:51:75:f7:1f:3f:c3:8d:
         10:f7:1e:e5:f6:5e:64:68:d1:0b:53:8e:7f:c8:97:a2:e9:96:
         e5:5a:b2:9a:ae:ed:80:42:21:ce:7a:a5:4a:12:50:a8:12:ee:
         5e:1d:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:00 2025 by rpki-client