Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/3138392e33392e39362e302f32302d3234203d3e203238333035.roa
File:                     3138392e33392e39362e302f32302d3234203d3e203238333035.roa (raw, json)
Hash identifier:          RxP9tLr565TIAKkKIJLxZkpUYh3Z18W9g7+eY7x1APc=
Subject key identifier:   07:28:08:06:AD:E0:15:43:90:02:7C:69:55:CC:AE:F0:ED:3B:36:B6
Certificate issuer:       /CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
Certificate serial:       122A3C6622297F59253514BD7FA0ED264BA12BAF
Authority key identifier: 9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/3138392e33392e39362e302f32302d3234203d3e203238333035.roa
Signing time:             Wed 01 Feb 2023 21:00:00 +0000
ROA not before:           Wed 01 Feb 2023 20:55:00 +0000
ROA not after:            Wed 31 Jan 2024 21:00:00 +0000
asID:                     28305
IP address blocks:        189.39.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2a:3c:66:22:29:7f:59:25:35:14:bd:7f:a0:ed:26:4b:a1:2b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
        Validity
            Not Before: Feb  1 20:55:00 2023 GMT
            Not After : Jan 31 21:00:00 2024 GMT
        Subject: CN=07280806ADE0154390027C6955CCAEF0ED3B36B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:16:16:3e:98:8a:3d:83:df:ce:32:3d:6c:
                    f5:ad:0c:ce:55:07:68:00:7c:ba:ef:6e:a1:24:e0:
                    6f:27:e1:2e:e2:25:45:96:ca:a2:68:08:9e:66:1c:
                    de:37:cf:b5:7a:97:25:de:35:84:ae:b6:cc:34:92:
                    3e:c7:7d:a4:ff:59:39:6c:b8:45:87:29:5c:28:e0:
                    ef:07:bd:87:72:6f:6f:f6:73:4e:d4:a9:7c:bb:7f:
                    27:8c:dc:b2:d3:87:cb:bd:93:76:ea:2a:bb:84:d4:
                    a1:7d:e1:05:ef:e1:8d:43:c7:e3:22:43:36:f0:56:
                    72:5c:d6:2f:6c:b8:bd:34:b6:d0:24:fd:97:68:43:
                    21:41:19:15:b9:03:7e:2d:35:a8:d8:97:2a:7c:d0:
                    ee:f5:4b:4c:cc:c1:9d:ff:41:58:ce:5b:0c:d4:ea:
                    0b:a1:9b:59:ef:53:ee:1b:26:0c:5a:c8:4e:90:b2:
                    f5:60:ea:65:af:bd:48:7c:55:50:81:21:0e:fa:f5:
                    20:63:87:f3:55:33:67:92:3b:d3:4a:d3:f2:ee:d6:
                    06:38:d7:15:0f:3a:97:c7:a8:68:1c:d4:33:26:9c:
                    39:02:32:85:7b:44:d1:28:d2:50:a1:04:15:62:d5:
                    bf:8d:65:04:3f:d4:d8:4a:d0:bc:15:25:86:9f:4e:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:08:06:AD:E0:15:43:90:02:7C:69:55:CC:AE:F0:ED:3B:36:B6
            X509v3 Authority Key Identifier:
                keyid:9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/3138392e33392e39362e302f32302d3234203d3e203238333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:55:1e:55:aa:e5:b0:86:77:6f:23:45:56:1c:c4:a4:13:20:
         06:40:9e:65:07:27:96:35:02:c0:aa:68:25:81:3b:e0:38:c3:
         85:b6:3f:9c:26:d8:9f:5c:71:2d:11:bc:a5:2c:17:42:2f:6b:
         14:f3:73:d5:a4:dc:19:7f:2e:59:37:4c:8c:ac:d2:fb:93:e2:
         78:11:58:92:98:cd:3b:7b:d0:32:54:7e:cc:36:b9:e7:aa:0c:
         af:c8:ec:4e:61:8f:35:d3:53:31:31:7e:bc:52:4a:38:cd:85:
         37:bf:4d:98:cd:fb:18:e8:96:d7:07:1f:27:c4:77:82:b1:e4:
         e0:c9:40:10:cf:f8:79:8f:36:6d:3e:41:3a:00:a1:6c:b6:1a:
         1b:7a:3d:a8:bc:4b:b1:52:38:05:c0:50:6e:28:67:40:98:59:
         4e:eb:25:3f:06:60:01:c4:d0:ed:ae:1c:85:2e:3c:d5:8f:0c:
         fb:a3:90:63:a7:2a:99:c0:65:9a:98:d1:37:b5:9a:17:1a:c5:
         7f:df:fd:6b:15:b2:4f:ad:4e:cd:55:41:bd:cc:1d:5a:56:0f:
         42:cf:cc:50:81:04:13:99:20:a7:19:c8:88:78:fe:28:d7:65:
         1d:ed:62:e4:bc:ad:a6:f6:12:dc:09:fe:a6:1b:76:c1:da:c5:
         95:60:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:28 2025 by rpki-client