Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132342e302f32332d3233203d3e20323730373333.roa
File:                     3138392e382e3132342e302f32332d3233203d3e20323730373333.roa (raw, json)
Hash identifier:          9jyN6GhZzqT2psHJTiiQzx6bitIaMtzosKeC6n2Ravc=
Subject key identifier:   08:4F:9D:F6:40:A2:53:C2:1B:B9:61:C8:32:91:44:EB:AE:11:9B:C8
Certificate issuer:       /CN=ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813
Certificate serial:       7A64D3073C130773D40A0EA47453EB1B066A6585
Authority key identifier: AD:F5:53:E5:23:6A:9C:98:DF:FC:8F:1E:63:26:1D:8C:4E:DF:58:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132342e302f32332d3233203d3e20323730373333.roa
Signing time:             Mon 13 Jun 2022 14:00:03 +0000
ROA not before:           Mon 13 Jun 2022 13:55:03 +0000
ROA not after:            Mon 12 Jun 2023 14:00:03 +0000
asID:                     270733
IP address blocks:        189.8.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:64:d3:07:3c:13:07:73:d4:0a:0e:a4:74:53:eb:1b:06:6a:65:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813
        Validity
            Not Before: Jun 13 13:55:03 2022 GMT
            Not After : Jun 12 14:00:03 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:ed:c1:9b:25:5b:af:f2:d6:a8:2d:d3:5e:
                    6f:eb:30:4f:fb:5a:75:8c:d8:88:85:e5:95:97:3c:
                    ef:5d:6e:66:27:4a:31:7b:83:73:fd:d5:73:e8:da:
                    bc:a7:ab:58:ac:0a:19:ed:5e:a3:cd:a7:91:f3:0c:
                    65:65:fe:7b:fb:d1:3b:48:72:4c:d3:71:5f:36:3a:
                    f3:f3:da:31:48:5c:4e:d3:a0:da:10:0a:5a:ed:46:
                    b6:3a:42:a5:7d:da:5b:07:fa:66:c5:d6:9f:18:b4:
                    ed:4c:ed:68:48:89:a9:ff:62:15:ff:93:a5:5c:84:
                    fb:bd:b9:63:02:74:cc:b1:41:dc:69:5f:21:7f:0f:
                    38:99:5c:a0:3f:b7:30:e4:ca:7c:b7:d9:c9:54:03:
                    06:43:1d:aa:10:71:6d:35:ea:63:7e:cc:16:07:dc:
                    ec:85:fd:43:3e:9a:28:03:aa:77:59:d8:f3:89:96:
                    6e:38:e6:e8:94:71:9a:65:cc:d1:33:7d:43:2c:a1:
                    bd:08:68:31:b4:73:25:14:83:30:f6:85:bf:28:64:
                    51:4e:50:3a:b4:90:80:2c:30:28:ba:09:3d:9e:cd:
                    c1:a8:09:31:ed:fb:74:d1:6b:7a:2e:ae:7c:1f:08:
                    c7:f6:aa:d7:92:dd:e4:d4:3e:1a:1b:ae:68:a2:15:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4F:9D:F6:40:A2:53:C2:1B:B9:61:C8:32:91:44:EB:AE:11:9B:C8
            X509v3 Authority Key Identifier:
                keyid:AD:F5:53:E5:23:6A:9C:98:DF:FC:8F:1E:63:26:1D:8C:4E:DF:58:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADF553E5236A9C98DFFC8F1E63261D8C4EDF5813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132342e302f32332d3233203d3e20323730373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:2a:5a:70:c4:eb:5a:ea:4f:85:9b:66:b0:84:e6:46:0a:
         6a:7e:d3:f9:bf:86:54:d9:eb:26:eb:2a:ae:f7:99:8e:9b:d3:
         2e:f7:4e:f4:bb:ae:69:d4:45:a6:c5:06:32:cf:e2:36:20:17:
         d2:48:6f:37:a4:0f:f6:bd:8c:97:f8:cf:b3:c7:cf:b8:e9:9e:
         ce:74:46:df:8e:e2:c1:d5:07:ee:e0:f0:86:1f:32:a2:89:7a:
         ba:4d:75:bf:5f:bb:c7:c2:14:d3:a3:11:1a:f6:81:e0:4d:7c:
         a6:e2:d9:2c:f1:1a:96:40:6e:11:8a:14:83:7d:3b:aa:45:60:
         3a:6a:dc:d1:79:7a:55:31:ee:7a:5b:a9:39:f9:03:2c:d2:9b:
         e9:fb:62:fc:49:c7:33:2f:1e:2e:18:af:b6:3c:87:fa:65:e9:
         b3:98:b3:44:89:e7:a5:81:54:7b:03:ad:47:d7:2a:75:2c:98:
         07:e2:01:cf:d0:8d:bf:32:5c:5a:75:7c:c7:52:6d:86:46:77:
         38:c8:7a:ce:55:44:ca:76:c6:6e:cb:db:46:77:68:75:b7:bd:
         8f:d8:57:c3:09:63:38:66:67:da:aa:76:cb:04:a9:42:e4:84:
         13:51:4f:f0:74:12:45:d0:6b:f6:eb:5f:e4:5a:58:01:5b:4b:
         be:78:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:33:55 2025 by rpki-client