Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e392e302f32342d3234203d3e203238333036.roa
File:                     3138392e33382e392e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          Xtw0khaVziINZkED4mixeTvDkVBQ577vpg8nJRABpHI=
Subject key identifier:   4D:E8:2D:9E:93:31:3D:71:58:E9:5B:44:3D:CC:17:5C:20:C9:19:1C
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       7EAAC9902402988A4C5911890C65BA58E7E53868
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e392e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:15 +0000
ROA not before:           Tue 25 Jun 2024 15:16:15 +0000
ROA not after:            Tue 24 Jun 2025 15:21:15 +0000
asID:                     28306
IP address blocks:        189.38.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:aa:c9:90:24:02:98:8a:4c:59:11:89:0c:65:ba:58:e7:e5:38:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:15 2024 GMT
            Not After : Jun 24 15:21:15 2025 GMT
        Subject: CN=4DE82D9E93313D7158E95B443DCC175C20C9191C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:05:a6:91:6d:4e:25:59:79:77:19:2f:a5:
                    9a:4a:b8:50:5a:43:fc:91:98:86:71:bd:65:d1:b5:
                    ba:17:32:1d:e6:6c:1a:b2:4d:a3:7d:0c:90:52:f2:
                    dc:9b:a4:e5:cf:12:41:89:2a:72:3a:e4:87:8a:dc:
                    9b:85:24:2d:f8:d4:7a:85:ed:e8:6d:c2:f8:45:1f:
                    74:67:33:d3:1a:c6:d8:21:4d:9e:42:53:75:0e:a2:
                    e9:b2:bf:a3:30:5c:d0:66:8f:c5:7b:10:19:32:de:
                    93:82:06:2d:a7:44:81:57:a9:bf:16:0c:bb:05:36:
                    ea:7e:10:03:59:e3:a3:d6:8f:cf:fc:ec:0c:0a:62:
                    32:90:f3:80:93:72:e1:a4:cb:e8:b8:6c:82:a2:76:
                    a7:15:2e:24:3e:93:50:85:36:1f:dc:20:cf:7e:52:
                    74:f7:fb:6d:d2:1d:85:fd:d5:74:4a:11:67:69:41:
                    d6:0a:8b:c3:bb:04:9d:cc:e9:7d:84:db:96:b0:d8:
                    1f:f9:b3:ee:14:80:ee:98:db:a8:eb:9d:a6:84:55:
                    49:31:c8:3f:b6:d2:c4:44:68:c4:6b:da:fb:54:c5:
                    d1:d6:59:1c:a5:af:f5:63:72:b5:bc:ae:18:90:83:
                    7a:6f:bb:ad:2e:c2:21:6f:72:78:b3:5a:7e:33:9a:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E8:2D:9E:93:31:3D:71:58:E9:5B:44:3D:CC:17:5C:20:C9:19:1C
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e392e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:83:c4:54:bc:a9:04:d4:05:17:49:e1:c6:44:b5:09:7f:
         09:27:81:b0:b7:82:f7:c4:9e:f3:0d:0c:bc:58:43:7b:47:30:
         b1:bc:4a:59:d8:8e:79:63:da:7a:bc:f8:ae:8e:2d:2e:50:a7:
         0a:1f:6c:36:71:5d:69:2d:a7:7e:70:28:4b:3d:9f:70:7a:04:
         63:65:cc:c4:d8:52:d5:bd:03:b7:0c:09:f5:53:55:63:11:75:
         cb:90:34:8f:ea:c3:04:0f:c5:b4:cb:42:68:12:77:84:84:3b:
         ee:65:1b:b8:48:09:75:9a:b9:49:1a:3f:8c:8a:8d:f0:48:bc:
         56:d0:22:cb:89:ee:67:7d:11:cc:57:e2:2e:64:9e:74:3a:77:
         11:85:48:64:31:80:b7:72:aa:70:1b:cf:d0:e2:c8:49:72:56:
         0e:15:dc:cb:79:40:2a:f6:46:39:87:06:9b:73:25:41:b3:77:
         5a:b3:74:cf:8b:d2:84:22:8e:01:82:1e:77:5e:52:11:96:bf:
         c9:bc:ef:01:00:30:79:45:03:62:68:d9:79:e7:ed:55:71:d0:
         c5:f1:66:e5:84:62:07:94:3b:31:63:a9:75:f8:0d:3d:6a:d6:
         7b:78:01:f1:42:91:a9:34:d1:09:4d:5e:66:12:6f:89:69:a2:
         9d:20:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:18 2025 by rpki-client