Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa
File:                     3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa (raw, json)
Hash identifier:          Wx7FR3/YxElX66UIePfvRS4gwtc6cC1HHhxf7+fam9U=
Subject key identifier:   8B:1E:BC:67:D0:47:02:5A:79:5C:21:5A:BD:FC:F4:B0:C7:01:D6:5F
Certificate issuer:       /CN=ABBF81B9971F90A3BFCC0E06899CBAED391D0740
Certificate serial:       1693C027F856DDE8C072EA20057E7DF779E79E46
Authority key identifier: AB:BF:81:B9:97:1F:90:A3:BF:CC:0E:06:89:9C:BA:ED:39:1D:07:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa
Signing time:             Mon 12 Dec 2022 18:26:38 +0000
ROA not before:           Mon 12 Dec 2022 18:21:38 +0000
ROA not after:            Mon 11 Dec 2023 18:26:38 +0000
asID:                     270398
IP address blocks:        189.126.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:93:c0:27:f8:56:dd:e8:c0:72:ea:20:05:7e:7d:f7:79:e7:9e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABBF81B9971F90A3BFCC0E06899CBAED391D0740
        Validity
            Not Before: Dec 12 18:21:38 2022 GMT
            Not After : Dec 11 18:26:38 2023 GMT
        Subject: CN=8B1EBC67D047025A795C215ABDFCF4B0C701D65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:f6:82:0f:a3:7e:71:6d:0c:78:e3:69:72:
                    19:71:65:6e:f8:02:84:a2:2a:9e:82:de:06:5a:e7:
                    7b:a3:70:6b:35:c3:02:91:28:41:bf:d8:d4:09:d4:
                    44:ba:8d:6a:ca:22:d3:68:a3:d9:89:ce:b9:4f:7c:
                    a9:59:28:57:c9:7a:82:8c:24:1d:9f:ff:f5:df:14:
                    6d:29:af:ee:14:93:d9:a3:82:ec:ad:bc:92:7c:78:
                    cf:31:6d:f4:fe:ee:a2:86:59:24:8c:c2:6a:80:7e:
                    c7:34:31:bb:68:1a:a5:77:d5:7a:57:94:82:1f:0d:
                    d0:c6:83:ad:ae:6a:85:1c:6d:c7:c2:01:08:16:d7:
                    d7:76:a2:1b:09:85:86:91:ea:b3:23:21:33:45:ef:
                    9b:3f:33:ef:6e:83:b6:5e:de:21:51:5c:e8:c6:56:
                    b4:19:cb:32:35:31:2e:9e:38:4e:f7:8f:af:76:98:
                    36:0c:d5:a7:19:52:a5:ac:f6:62:2b:f2:d1:f7:05:
                    55:b2:12:29:96:0f:00:a4:4d:69:d4:41:89:82:11:
                    18:c7:e9:6d:83:c3:a2:44:39:e8:ce:04:42:c8:b8:
                    e8:95:3b:49:4e:e5:fe:f4:22:91:b6:ca:c8:e4:5f:
                    e4:18:68:7c:86:93:17:c6:3e:00:08:71:c0:dc:01:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:BC:67:D0:47:02:5A:79:5C:21:5A:BD:FC:F4:B0:C7:01:D6:5F
            X509v3 Authority Key Identifier:
                keyid:AB:BF:81:B9:97:1F:90:A3:BF:CC:0E:06:89:9C:BA:ED:39:1D:07:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31302e302f32332d3233203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:50:45:be:b9:89:cd:70:04:44:34:f1:7c:73:f3:b3:c0:
         c0:49:2c:b2:20:0e:c5:27:0e:90:23:04:2a:30:5d:37:03:77:
         33:5c:4c:ef:06:c8:2d:5b:ff:c1:a2:89:fd:60:48:ce:0a:5f:
         b1:d6:31:20:11:c2:f6:f7:7c:ef:5b:b0:f0:a5:d0:c9:c5:44:
         eb:32:4b:fc:ba:7e:e2:9b:d6:f8:de:95:2f:59:c0:c6:2e:53:
         2d:9b:b5:a0:21:8a:08:ce:eb:c4:3f:52:0b:be:8c:72:bb:b3:
         3c:e5:93:2b:22:41:26:63:42:3c:06:df:fd:26:7c:c6:15:63:
         07:1a:b9:da:fb:ee:e7:99:e1:6e:ba:95:2c:57:0c:bf:b2:5f:
         df:f5:ad:06:30:99:1f:a9:8d:a3:07:99:79:30:fc:d9:0e:f8:
         24:61:f5:2e:44:53:4a:11:a7:89:41:e0:94:a6:9c:9f:e3:11:
         23:bc:16:6a:e7:d0:67:03:e4:b1:b5:2a:df:db:2c:cb:dc:37:
         9e:61:ba:74:45:57:0c:1a:9d:1a:18:ce:93:93:b0:cd:b5:4f:
         75:7a:17:f8:86:2e:81:f0:13:47:fd:e3:dc:96:ac:fe:0b:25:
         d2:fd:eb:d3:01:67:d3:44:b7:e5:ec:1a:82:71:3b:52:8a:0e:
         72:18:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:35 2025 by rpki-client