Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/3138392e38342e3130342e302f32322d3234203d3e20323730393034.roa
File:                     3138392e38342e3130342e302f32322d3234203d3e20323730393034.roa (raw, json)
Hash identifier:          p0O7BcOKwSFVuajdvbQz0Rpxmx1ZD2L0z1Rg7ICXF+Q=
Subject key identifier:   15:A9:C1:E9:E3:9B:C2:6C:50:29:5B:DB:FF:B5:93:4B:FA:2A:53:9C
Certificate issuer:       /CN=A45D3989DF644CDEF7512BADAAAB0091F844EA06
Certificate serial:       71D498BFFBD1501221B134D721F127302AC541
Authority key identifier: A4:5D:39:89:DF:64:4C:DE:F7:51:2B:AD:AA:AB:00:91:F8:44:EA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45D3989DF644CDEF7512BADAAAB0091F844EA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/3138392e38342e3130342e302f32322d3234203d3e20323730393034.roa
Signing time:             Wed 23 Feb 2022 12:37:36 +0000
ROA not before:           Wed 23 Feb 2022 12:32:36 +0000
ROA not after:            Thu 23 Feb 2023 12:37:36 +0000
asID:                     270904
IP address blocks:        189.84.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d4:98:bf:fb:d1:50:12:21:b1:34:d7:21:f1:27:30:2a:c5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45D3989DF644CDEF7512BADAAAB0091F844EA06
        Validity
            Not Before: Feb 23 12:32:36 2022 GMT
            Not After : Feb 23 12:37:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:50:8f:b6:5f:c7:2c:a7:39:78:73:7d:da:
                    85:0e:9f:8f:3c:f4:ed:f1:d5:2d:1b:66:3c:d9:a8:
                    d6:55:e0:39:33:7d:30:37:37:de:4d:41:63:a5:7a:
                    17:41:6a:f8:2b:7a:09:0d:85:39:d6:6d:9d:27:72:
                    1f:48:9c:cc:38:0b:93:2d:87:92:54:02:43:b8:ff:
                    96:b9:e1:e5:8b:13:d2:0f:f0:04:f3:ff:a6:c8:76:
                    44:e4:b7:80:2a:5f:a2:c1:5c:95:63:3d:af:ea:e9:
                    45:6d:e9:3a:d5:96:9c:12:39:1d:07:bf:23:f7:f7:
                    32:da:2c:54:c6:65:a3:60:ac:0f:6a:89:3a:fb:41:
                    33:af:06:05:29:90:e2:5a:8d:df:42:62:17:b5:ba:
                    9e:05:f8:69:6d:53:8f:51:7c:e8:65:4f:ac:74:b6:
                    5d:e5:36:60:4c:17:1b:4a:89:ad:87:34:e8:19:8c:
                    de:71:81:6c:54:0a:9b:f0:bc:c5:12:92:63:72:77:
                    cd:1b:67:c1:79:87:5d:38:9a:81:6d:1a:ef:a0:fd:
                    46:21:84:ec:a9:20:be:a7:9f:bd:f8:86:2d:ad:56:
                    59:28:73:9d:e7:3d:21:05:a8:ab:db:02:d7:75:a3:
                    6b:07:26:51:c7:e4:02:9b:f6:95:a0:f0:a3:18:96:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:C1:E9:E3:9B:C2:6C:50:29:5B:DB:FF:B5:93:4B:FA:2A:53:9C
            X509v3 Authority Key Identifier:
                keyid:A4:5D:39:89:DF:64:4C:DE:F7:51:2B:AD:AA:AB:00:91:F8:44:EA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/A45D3989DF644CDEF7512BADAAAB0091F844EA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45D3989DF644CDEF7512BADAAAB0091F844EA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/3138392e38342e3130342e302f32322d3234203d3e20323730393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:fc:c6:cd:2a:94:18:09:5e:44:f4:aa:8a:85:dc:57:3e:
         cb:31:a0:29:e1:c3:a0:23:c4:e8:0e:35:c8:23:f2:57:7b:44:
         e6:97:da:80:a6:ea:87:da:f8:35:c9:b1:c5:f4:6a:14:f3:3f:
         55:7c:4d:1c:01:70:db:bb:79:39:d0:74:41:c7:4c:00:74:a0:
         e8:4b:bd:b9:bd:5c:84:d7:d1:b2:e7:91:1e:8d:fb:08:73:5f:
         b3:6c:0d:7e:84:43:ef:3b:e6:c2:12:8f:fa:0e:4f:9a:e6:7b:
         22:16:7e:6a:61:72:2f:68:f7:f3:b0:ed:34:20:36:9d:36:c0:
         e9:10:9a:8a:bb:0b:1f:01:58:a7:d6:3f:71:86:0d:61:57:6f:
         5d:23:ba:7a:cc:95:8f:2f:7c:ee:ff:39:72:61:12:8c:85:a6:
         81:40:d3:2f:8c:4c:3f:2a:3d:f6:b8:5a:da:78:1c:da:1b:74:
         f7:e5:2c:98:61:d8:d8:3d:08:41:43:ca:80:46:ac:8e:71:a8:
         a8:88:ca:d0:c0:1e:e8:38:5c:4d:56:cd:aa:1c:84:b0:4b:9f:
         30:b2:ec:c9:1d:43:24:de:8e:ac:58:ff:bf:f0:81:47:f0:7c:
         78:af:25:d0:62:e8:c0:87:2f:fa:17:10:97:bf:ce:b5:1c:16:
         df:3e:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:54 2025 by rpki-client