Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e372e32382e302f32322d3234203d3e203532393430.roa
File:                     3139312e372e32382e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          v3KaBxf4zX2neSjcyUbq+aXkgncp6zASsniywJ16DUY=
Subject key identifier:   A8:D1:B6:98:8F:22:23:9E:08:07:55:1F:D3:B1:6D:73:6F:9A:D3:93
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       0500B193FFC36D82B08D3046A71421C4D2AB888E
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e372e32382e302f32322d3234203d3e203532393430.roa
Signing time:             Thu 31 Oct 2024 16:59:41 +0000
ROA not before:           Thu 31 Oct 2024 16:54:41 +0000
ROA not after:            Thu 30 Oct 2025 16:59:41 +0000
asID:                     52940
IP address blocks:        191.7.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:00:b1:93:ff:c3:6d:82:b0:8d:30:46:a7:14:21:c4:d2:ab:88:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:41 2024 GMT
            Not After : Oct 30 16:59:41 2025 GMT
        Subject: CN=A8D1B6988F22239E0807551FD3B16D736F9AD393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:98:45:db:7e:3d:a6:94:67:7e:de:79:9b:
                    ac:fa:94:c0:71:e9:a6:5b:6f:b1:87:16:2b:75:54:
                    96:2b:45:04:6c:78:90:8a:16:4e:c7:6a:4b:8e:29:
                    be:4c:3d:9a:52:69:47:9f:90:7e:43:f9:42:b1:0d:
                    be:e4:a8:61:e9:c7:e8:b8:7e:5e:22:78:0a:04:f9:
                    c9:44:19:a6:8e:62:2f:cc:bf:7c:38:34:cd:da:21:
                    1c:8f:04:26:d6:c7:f5:6c:94:89:ad:55:08:9e:72:
                    db:b1:a5:11:a0:b0:06:75:b8:3d:c8:bb:cf:dd:0a:
                    1a:58:a9:ba:0c:fb:b7:71:f3:27:a1:ee:e2:d9:8f:
                    dc:6b:c9:be:94:93:6c:2f:ae:d6:5b:71:62:ac:1a:
                    ac:7d:12:c9:c1:56:a3:e6:6c:55:65:5d:9f:a8:ca:
                    65:ed:07:dc:3f:e5:b8:2c:88:7e:12:71:81:e9:b5:
                    0c:2c:49:0e:32:09:70:7e:0b:f4:de:d2:8b:3a:0c:
                    24:af:dc:57:25:8d:c1:28:8a:1d:91:1a:ba:4d:c5:
                    f6:49:6c:0b:81:4b:0a:ee:1e:1b:80:b9:eb:8d:03:
                    58:f5:32:fd:ee:57:cf:54:92:14:e4:d3:19:1b:6e:
                    a9:c9:9c:27:c4:28:35:c6:f0:1d:31:fc:c5:9e:e6:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D1:B6:98:8F:22:23:9E:08:07:55:1F:D3:B1:6D:73:6F:9A:D3:93
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3139312e372e32382e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:c3:75:03:97:72:ad:0b:27:94:b1:35:70:bc:36:1c:94:
         88:dd:f5:9b:3d:84:17:51:0b:7e:cc:ad:3a:b2:84:a9:34:b9:
         ad:a6:62:ea:01:00:66:fe:e0:f4:6e:1a:1e:d3:64:a8:46:4a:
         22:ab:38:28:d3:6a:8a:e4:85:36:ec:ce:8b:bc:15:96:6b:4a:
         87:6a:c0:5a:c3:e9:4d:79:04:9a:20:48:eb:bb:a4:f3:eb:bb:
         45:26:1d:d2:9e:b0:9c:51:c4:c8:d9:e0:9d:71:27:b4:be:3b:
         67:8f:ed:f1:d1:0d:7a:c9:53:53:72:23:25:46:41:dc:d8:b9:
         ac:8c:b8:42:0c:47:32:a4:13:cf:28:0f:b0:48:7a:65:a3:e8:
         98:d7:4a:26:73:03:29:f7:df:39:88:bd:fe:20:20:ce:6a:fc:
         6c:d7:e5:5e:67:1c:aa:6f:d7:09:53:59:20:aa:33:42:76:9a:
         09:33:16:e5:15:05:2b:08:d1:89:28:5c:97:c6:ce:a3:60:f0:
         a3:be:ce:2e:cf:ac:79:fc:85:9e:b7:15:08:40:bb:ae:e7:9c:
         14:85:56:67:30:2c:2e:c1:fd:08:c8:2a:de:ce:69:82:a5:fb:
         93:c3:4e:22:ac:f6:69:c0:e2:4f:49:01:24:31:78:5f:0e:bf:
         95:c9:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:33 2025 by rpki-client