Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
File:                     3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          PsRnsZv4G/EU9g4FyBdtcOKUdbM1ZU0EfZbk9qp+1iU=
Subject key identifier:   73:1F:35:A0:AE:D6:1F:FF:99:1C:83:1E:C4:7C:AE:88:6B:59:C5:48
Certificate issuer:       /CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
Certificate serial:       6B56AAFDE0F413668B471A0B5C5C18C0E8A6C5CF
Authority key identifier: 7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
Signing time:             Thu 03 Aug 2023 14:00:01 +0000
ROA not before:           Thu 03 Aug 2023 13:55:01 +0000
ROA not after:            Sat 03 Aug 2024 14:00:01 +0000
asID:                     28292
IP address blocks:        189.124.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:56:aa:fd:e0:f4:13:66:8b:47:1a:0b:5c:5c:18:c0:e8:a6:c5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
        Validity
            Not Before: Aug  3 13:55:01 2023 GMT
            Not After : Aug  3 14:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:fe:0c:30:33:15:5d:f2:7e:7f:df:6f:53:
                    d9:38:65:2a:2c:86:79:4a:e0:e5:db:a5:93:35:0d:
                    87:5f:fe:c8:5a:ea:2d:72:2a:22:6b:18:ec:b3:31:
                    6f:42:a8:db:af:9f:ae:e6:4e:ed:cb:cd:51:d8:e6:
                    6a:e2:36:d8:e5:f9:74:59:04:43:fb:d6:24:be:b4:
                    b3:7f:7c:d2:91:0f:c1:ea:31:1c:0f:25:66:3f:63:
                    81:dd:db:ad:75:51:bb:26:ba:a2:56:76:d0:9f:55:
                    aa:c1:7d:70:8c:58:29:7e:80:f8:c8:c8:52:c4:71:
                    04:0a:56:c0:b6:af:be:b4:4c:a7:b9:b9:60:cf:1f:
                    d7:67:e1:d9:d4:44:c2:c3:4e:f1:66:2f:e0:42:be:
                    c2:1f:56:0e:b5:08:8d:8c:f6:df:bf:49:a4:93:eb:
                    24:5b:b3:12:71:d3:0c:cb:71:9f:31:16:0d:be:4b:
                    94:fa:c8:24:db:c3:f4:90:54:91:b0:a7:19:c5:f4:
                    f8:d7:c0:65:5c:55:9f:81:f2:a4:24:fe:80:68:42:
                    4a:b6:a5:62:cc:b4:31:99:f2:6d:6d:f6:75:05:6f:
                    2e:39:c7:56:84:f0:7d:f7:e3:8d:5b:7b:4d:59:e9:
                    03:63:82:a3:86:45:b4:3f:44:c3:d1:ee:b8:09:bc:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1F:35:A0:AE:D6:1F:FF:99:1C:83:1E:C4:7C:AE:88:6B:59:C5:48
            X509v3 Authority Key Identifier:
                keyid:7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:8d:86:35:8c:cb:96:e8:90:89:8b:eb:28:cd:43:f2:24:7b:
         65:5a:8f:c7:cd:19:29:e6:b7:78:1a:6a:96:1d:9e:ef:a0:f9:
         21:e1:8e:a2:2b:16:bd:b9:c2:49:cc:06:c9:25:6d:c5:e4:69:
         5f:ce:07:36:39:59:d7:10:f7:aa:9e:a7:e4:7e:18:e0:20:97:
         b8:d2:b2:d8:ef:d7:2a:35:1f:4b:4d:2b:4e:6b:65:e8:ae:6d:
         5d:3e:7f:e3:34:32:53:89:64:47:67:36:75:ea:8c:17:43:5a:
         41:3d:6f:5b:2f:90:2b:c6:a3:1b:a1:ce:10:c9:78:e3:c0:9a:
         ff:ff:30:0b:c0:f8:0c:73:db:c9:70:e2:25:17:aa:56:1c:15:
         56:6c:0f:6b:a1:57:b3:19:e1:4c:50:93:fd:40:b8:28:6b:ec:
         bc:f9:dc:4c:80:d5:09:2c:26:e2:26:55:f2:bb:ce:39:d5:d8:
         b9:d3:bd:64:a1:3d:1d:88:ec:77:fd:6c:7a:24:4b:62:d7:27:
         d3:10:c0:37:c1:01:4a:43:48:9b:ab:66:48:8b:4a:d5:72:f5:
         c4:3b:a0:e3:e7:75:71:54:89:e6:df:63:08:93:c9:91:61:21:
         3c:fd:4c:16:a0:44:0f:44:30:ae:06:e7:fc:da:b6:84:5e:8a:
         2e:dd:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:03:21 2025 by rpki-client