Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3138392e39312e302e302f31392d3235203d3e203238323032.roa
File:                     3138392e39312e302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          RFwt4tR3lEmyMvCBYr/0D8Hybwtpos+nF9FTwPdMuqw=
Subject key identifier:   68:62:7D:FA:40:E5:64:6C:AC:EF:EF:0E:9E:1E:67:FC:01:53:2A:01
Certificate issuer:       /CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
Certificate serial:       755D578B258B03ACE6A9B0B21BB862FF1307AB7F
Authority key identifier: E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3138392e39312e302e302f31392d3235203d3e203238323032.roa
Signing time:             Thu 22 Jun 2023 11:14:13 +0000
ROA not before:           Thu 22 Jun 2023 11:09:13 +0000
ROA not after:            Thu 20 Jun 2024 11:14:13 +0000
asID:                     28202
IP address blocks:        189.91.0.0/19 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5d:57:8b:25:8b:03:ac:e6:a9:b0:b2:1b:b8:62:ff:13:07:ab:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8
        Validity
            Not Before: Jun 22 11:09:13 2023 GMT
            Not After : Jun 20 11:14:13 2024 GMT
        Subject: CN=68627DFA40E5646CACEFEF0E9E1E67FC01532A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:93:4e:e9:57:fa:18:d5:a0:1e:65:88:1f:
                    45:d1:1f:d9:fc:91:84:48:95:1e:34:c6:b1:1c:97:
                    1c:55:f2:2f:7d:9e:1a:c2:25:c2:79:ed:43:26:d2:
                    3d:d3:fa:20:78:16:f7:89:c2:12:a5:bf:a2:74:58:
                    9d:44:48:e9:37:34:a8:db:20:bb:29:82:c3:d1:37:
                    60:4c:0d:8b:03:7f:c5:30:dd:37:d3:36:f2:84:ec:
                    f7:03:1c:c4:3c:3c:b9:4d:ef:4b:ef:5a:96:92:7f:
                    87:cf:0f:1f:d9:33:f4:f3:65:a4:0d:0e:0f:78:88:
                    39:66:82:76:a5:ae:4f:69:91:13:c4:78:38:8c:35:
                    66:78:04:a8:83:8b:07:29:ba:d0:b2:ce:ba:60:b1:
                    ba:c9:b6:eb:fc:93:a9:09:18:d3:08:bb:73:13:97:
                    7a:50:53:45:0f:dc:87:fa:8e:77:c2:61:e1:79:dc:
                    1e:2a:4e:55:94:4c:48:13:0f:a6:19:78:ef:67:b2:
                    62:c7:e5:58:f1:0f:f8:94:44:22:f9:ae:6a:20:46:
                    d9:1d:d7:7c:91:a4:1a:d4:b6:55:b3:68:25:60:d2:
                    f0:10:d4:17:25:45:ad:ea:b3:ad:29:ea:b4:9d:da:
                    b1:7e:09:1b:dc:e9:03:0d:38:cb:eb:3f:29:47:99:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:7D:FA:40:E5:64:6C:AC:EF:EF:0E:9E:1E:67:FC:01:53:2A:01
            X509v3 Authority Key Identifier:
                keyid:E6:2F:C1:00:81:9A:1A:7B:48:F9:F7:98:18:EF:B6:9B:6B:9A:1F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E62FC100819A1A7B48F9F79818EFB69B6B9A1FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/1/3138392e39312e302e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:98:76:bb:5c:24:34:37:bb:a2:b7:3a:28:5a:b9:1e:d6:b4:
         a5:1b:af:9e:ab:ec:57:06:d8:50:17:aa:f2:2f:29:89:19:ff:
         62:e3:03:ae:18:ae:70:3d:08:d9:3c:c0:07:f4:f4:8e:f3:28:
         a0:1c:c4:4c:ee:95:22:dd:11:1d:ae:3b:63:05:ae:98:8f:a1:
         0b:c0:fd:ab:82:9a:17:e1:90:0b:70:23:46:ca:2d:61:84:3b:
         c0:b5:7a:11:10:72:1d:70:cb:46:51:61:23:f0:5c:09:95:83:
         4a:ef:71:8a:4a:4c:75:55:15:ff:a9:1a:7e:9a:5e:75:25:66:
         32:a6:44:3f:9d:d3:15:49:e6:fe:95:ad:02:99:e9:a6:dd:ec:
         fb:f3:5d:b5:43:62:4a:d5:84:0b:f0:a8:b2:e5:12:01:1f:cb:
         2a:ac:6d:c7:7c:20:ff:6d:0d:0f:5a:9b:ae:a5:fd:6e:7e:d2:
         d8:5b:c9:b7:b9:06:b1:35:43:92:4d:45:db:a8:45:74:d4:6e:
         de:1f:f2:dd:61:ec:5d:16:32:f8:9f:cd:4d:f5:7b:c1:fc:5c:
         dc:66:0c:37:00:dd:a5:2e:a8:30:ee:0e:55:c3:d1:fb:6f:3d:
         99:7f:5b:fb:c8:f4:af:3a:6a:3d:10:75:8e:73:df:bb:6f:ca:
         ee:55:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:55 2025 by rpki-client