Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
File:                     3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          sBFrFz97hZMzN+fOYcUcpFfLgnafGhkmGXjeUhLdMgo=
Subject key identifier:   23:AB:6E:6E:F3:36:3D:B2:AA:FB:D3:EF:AD:C6:20:DF:C9:B4:5A:E6
Certificate issuer:       /CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
Certificate serial:       6508E9221C38DC9D5834C524A13A803381108308
Authority key identifier: 7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
Signing time:             Thu 03 Aug 2023 14:00:01 +0000
ROA not before:           Thu 03 Aug 2023 13:55:01 +0000
ROA not after:            Sat 03 Aug 2024 14:00:01 +0000
asID:                     28292
IP address blocks:        189.28.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:08:e9:22:1c:38:dc:9d:58:34:c5:24:a1:3a:80:33:81:10:83:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A
        Validity
            Not Before: Aug  3 13:55:01 2023 GMT
            Not After : Aug  3 14:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:9d:fe:ea:1b:e3:43:ee:08:41:51:ef:df:
                    1c:40:a0:83:4a:7b:05:6f:39:b3:4b:fb:4c:d7:03:
                    8a:ac:be:24:90:9d:d9:4f:d0:91:ff:3d:d0:74:ae:
                    df:68:d9:12:20:07:fb:6a:8f:13:60:95:88:66:e4:
                    30:24:82:05:82:bc:10:42:42:3d:23:ea:8e:ce:cf:
                    40:9b:a4:7c:8a:0f:63:2b:31:27:36:58:73:05:40:
                    91:29:82:ba:5f:60:d4:6f:27:0a:27:70:9c:21:6d:
                    99:e3:b3:54:b2:db:79:cb:d9:16:7c:6c:c6:8c:5b:
                    59:80:c7:06:69:24:cf:36:6c:06:5f:0e:d3:f3:39:
                    2a:bb:d3:ea:3a:e7:5b:a8:0a:1f:22:f4:5a:38:ee:
                    45:aa:40:f9:95:c9:71:27:88:79:09:0d:4d:a1:62:
                    c6:46:c9:88:09:2e:61:63:cf:bc:b2:02:b4:61:fc:
                    fc:61:cd:af:c3:17:01:80:95:5b:8f:fa:78:6b:26:
                    f4:27:8d:2f:a9:8a:04:ca:5d:4f:74:f5:ec:58:a7:
                    9c:8c:eb:bc:e5:2e:df:f7:db:56:47:b1:6b:77:0d:
                    1f:4c:4a:c6:29:30:ff:c0:c4:3c:31:52:6d:63:8e:
                    c0:57:54:67:16:3b:1c:bf:f6:23:0e:cd:bb:00:84:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AB:6E:6E:F3:36:3D:B2:AA:FB:D3:EF:AD:C6:20:DF:C9:B4:5A:E6
            X509v3 Authority Key Identifier:
                keyid:7A:2D:15:9B:5A:87:EF:DC:2D:93:1E:E9:F5:88:A9:32:E1:C9:DE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2D159B5A87EFDC2D931EE9F588A932E1C9DE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/3/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c9:ed:ce:cb:9e:5b:d8:f8:8e:f4:ae:f7:b2:2b:05:d8:8f:fe:
         3e:90:78:5c:14:f0:be:6b:e2:b8:71:da:ba:ef:8b:a0:34:9a:
         21:86:11:48:b0:0f:bc:67:b4:e5:b9:28:05:b0:df:0f:9b:2e:
         4f:cd:bf:39:23:de:58:72:f8:d6:d1:1a:ba:b5:86:55:73:cc:
         78:9f:05:e9:58:24:f6:1f:eb:30:16:7a:c8:44:31:d8:5c:7e:
         47:d7:15:df:e7:e3:ea:1c:70:e0:4b:42:0d:5c:17:41:de:95:
         d3:df:8f:51:cd:95:0d:35:7c:cc:40:ee:5c:ef:89:98:cf:8e:
         ae:98:2c:7d:32:f5:39:0e:93:7d:9a:64:67:c6:a4:3c:12:95:
         16:ae:cc:0f:fb:73:fe:b0:c9:43:21:f1:aa:7b:88:3f:85:42:
         e5:9b:1e:2a:c3:4f:d6:cb:d6:fb:3f:cb:af:da:e5:83:98:43:
         aa:ec:dc:12:11:81:f0:b7:6d:7d:23:bf:46:fb:fd:82:04:a8:
         06:d4:19:b5:cb:e2:09:5e:c3:75:e4:e2:90:cd:65:cf:e4:b6:
         98:87:5c:6f:52:97:29:7c:6e:e5:b0:68:65:98:79:a8:0f:35:
         7f:80:ee:ed:04:28:f4:b2:e4:38:ad:1f:55:e6:56:f9:35:4d:
         5f:64:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:31:11 2025 by rpki-client