Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3131332e36342e302f32302d3234203d3e203238323130.roa
File:                     3138392e3131332e36342e302f32302d3234203d3e203238323130.roa (raw, json)
Hash identifier:          qvj7mwMiDY/BscGzF6OdobHPIaozM4Pqn58s++C76Gg=
Subject key identifier:   50:EB:5D:2F:94:E0:73:56:C7:59:64:07:91:E2:53:3E:A6:4E:9B:8A
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       37734C87717B2FBBB52C74E4617B0C627645DB59
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3131332e36342e302f32302d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:09:20 +0000
ROA not before:           Sat 04 Mar 2023 16:04:20 +0000
ROA not after:            Sat 02 Mar 2024 16:09:20 +0000
asID:                     28210
IP address blocks:        189.113.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:4c:87:71:7b:2f:bb:b5:2c:74:e4:61:7b:0c:62:76:45:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:04:20 2023 GMT
            Not After : Mar  2 16:09:20 2024 GMT
        Subject: CN=50EB5D2F94E07356C759640791E2533EA64E9B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:f9:f4:0c:0e:c6:8a:09:05:5f:ac:80:4c:
                    d2:9d:9f:3b:31:e2:8e:9a:59:1c:59:75:f6:5c:3f:
                    46:8b:67:49:9e:67:64:8c:aa:78:23:07:2e:f2:eb:
                    90:f8:13:24:1b:5a:67:55:47:82:a7:b0:af:8a:07:
                    50:9d:e5:70:97:61:6a:c9:9b:36:26:94:de:6e:16:
                    da:05:37:b7:e7:68:a6:94:22:5d:09:d1:e3:b1:e3:
                    89:df:35:fe:84:cf:0e:a8:be:33:f1:9a:94:bf:9e:
                    d3:7c:d7:65:b2:28:3f:51:7e:84:13:bf:f5:ff:40:
                    3b:af:8e:08:b7:d6:4a:47:73:f8:c9:00:3f:4c:b2:
                    50:a4:34:71:6d:26:5b:ef:8b:06:28:59:86:dc:d5:
                    40:37:a0:8b:e7:9f:f0:97:a0:2e:22:6a:33:18:94:
                    8e:03:8b:90:b0:32:f7:fd:0c:12:cf:c6:d1:d5:5d:
                    04:7d:ca:9f:1e:24:aa:7c:23:8b:8d:a6:5c:6f:d5:
                    27:40:6b:c6:20:7a:76:0d:97:a1:3a:8f:02:80:d9:
                    f1:25:f0:d2:cf:3d:87:50:12:9b:61:ca:ca:0a:42:
                    c1:33:61:a3:d9:c8:60:b0:ee:95:5a:4b:4f:8c:f2:
                    ac:4c:0b:ca:4f:fd:fa:ca:d7:f5:57:df:2f:2d:09:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:5D:2F:94:E0:73:56:C7:59:64:07:91:E2:53:3E:A6:4E:9B:8A
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3131332e36342e302f32302d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:c1:8a:c4:53:a4:68:c2:ef:3c:bc:33:de:09:4a:c4:a4:64:
         7f:6a:10:cf:d0:f3:4b:55:29:38:8f:90:87:e1:3a:3b:25:30:
         57:77:5e:5d:24:e5:01:93:9d:9b:e9:72:63:9e:f3:d0:5c:ef:
         c5:69:04:97:c7:95:cb:6b:05:e7:94:cd:69:93:76:22:16:17:
         bd:13:fe:52:71:c4:fa:df:ff:32:23:ec:83:69:1c:51:3b:fe:
         83:a5:3d:57:df:26:9e:e2:d8:67:c6:91:25:bf:f1:b5:0b:51:
         2b:39:15:95:a2:3d:91:8c:37:f4:9b:ba:14:1c:3b:20:95:13:
         5e:1d:49:13:94:00:0f:03:7b:6f:3e:10:1d:57:f8:39:d8:80:
         e1:a2:16:8c:85:48:33:d2:94:f2:cf:b2:4c:e6:f5:b3:84:a2:
         fc:c5:ec:ed:a3:43:9a:65:6f:3c:53:43:bf:d3:41:dd:95:a1:
         d5:44:b0:9a:77:3e:f5:08:0b:00:84:aa:8b:e0:26:69:47:5c:
         70:e8:f5:01:a3:9c:08:06:3d:2e:79:26:b1:24:85:54:2d:e0:
         44:43:48:ef:9d:d7:54:25:28:23:1e:b1:27:26:cd:03:53:16:
         31:70:87:33:8c:4e:13:6a:f4:0e:49:81:e4:84:22:ed:88:73:
         d1:6f:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:01 2025 by rpki-client