Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132352e302f32342d3234203d3e20323632383038.roa
File:                     3138392e39302e3132352e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          WSMxZ4pESZJMqiIoMvcxyjVxVVS6J44ZadkPsDIiaoQ=
Subject key identifier:   93:F7:41:75:4A:D1:2A:AE:89:AF:DA:25:91:3D:53:A3:8D:7A:00:6C
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       7AD13A270A926EE13A612DE274D49346A63EAC69
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132352e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:31 +0000
ROA not before:           Tue 10 Oct 2023 13:52:31 +0000
ROA not after:            Tue 08 Oct 2024 13:57:31 +0000
asID:                     262808
IP address blocks:        189.90.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d1:3a:27:0a:92:6e:e1:3a:61:2d:e2:74:d4:93:46:a6:3e:ac:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:31 2023 GMT
            Not After : Oct  8 13:57:31 2024 GMT
        Subject: CN=93F741754AD12AAE89AFDA25913D53A38D7A006C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:ce:bb:be:53:f4:18:20:ef:b5:72:ac:85:
                    1a:5b:29:9b:a7:ba:0c:8e:14:8f:59:f1:fb:c9:cc:
                    3e:d4:86:3b:2e:95:66:27:7e:d8:d8:25:de:d3:3b:
                    b7:e1:66:72:25:82:93:c3:a3:dc:49:64:d2:76:57:
                    4a:06:6d:6e:b6:af:5b:30:12:e7:4d:f6:dc:27:fd:
                    ae:41:9a:67:80:19:f2:13:e5:b1:5b:3e:fe:c5:3e:
                    95:c7:5f:0a:76:ca:ca:d6:e3:ea:1c:38:b4:0f:80:
                    f5:4e:09:aa:41:c7:c0:a0:37:15:6d:12:8f:eb:dc:
                    43:c3:08:e1:db:f3:8c:fe:32:b2:e9:d2:a2:b3:eb:
                    3c:a5:6f:57:e8:b7:3f:8f:ea:8f:3b:2e:65:e4:bf:
                    52:47:1a:2b:1a:d7:9c:5a:ad:cf:58:67:32:8e:07:
                    ce:0a:53:67:60:cb:21:17:4f:c0:98:cf:c0:8f:a4:
                    e6:fc:64:d2:5c:72:ed:a7:a9:db:d8:69:38:a8:e4:
                    37:24:a6:5d:33:5b:7e:e6:e1:80:e9:8c:bd:30:5f:
                    ac:86:b7:05:89:bd:cc:de:33:06:a0:6a:46:c0:23:
                    a1:58:5a:03:12:e5:ea:4b:92:b3:ef:d1:b0:5e:85:
                    ac:13:fc:02:a5:dd:ec:f6:75:e3:2d:2b:fb:0b:34:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F7:41:75:4A:D1:2A:AE:89:AF:DA:25:91:3D:53:A3:8D:7A:00:6C
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3138392e39302e3132352e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:47:01:de:9e:fa:ad:d5:1e:59:24:fc:72:e3:fa:85:fe:03:
         c4:93:a2:a2:ab:cb:22:fc:59:57:15:47:72:bc:cb:bf:6e:e8:
         27:ee:c3:4a:b4:7a:a7:6f:8d:e1:19:bf:13:77:63:b2:4f:cb:
         d3:00:5b:2c:3e:89:e5:50:fa:c2:ac:73:a4:c4:93:14:c5:bd:
         7d:13:fe:88:f2:4e:df:fe:09:d1:97:4e:22:fc:97:13:8e:16:
         1a:50:8f:37:dc:d4:3a:ae:b6:d8:71:5a:a7:d5:06:6a:ea:79:
         b3:85:fe:bc:dc:9c:48:f5:5e:9a:a1:87:be:1c:ce:10:cc:5c:
         e4:5d:ad:c7:e7:aa:7d:f9:fc:de:cc:9a:fd:38:5e:d6:29:52:
         65:6a:f6:e5:49:14:aa:72:af:4d:38:c9:d8:5d:70:0b:f4:49:
         8e:a9:0a:1f:90:36:65:b6:7f:a3:14:3f:7c:e8:44:be:81:70:
         bb:96:39:61:6b:0b:8f:1c:7f:1e:0b:41:e6:eb:df:c1:cc:fa:
         3b:0a:b8:14:19:31:9a:da:37:0e:f8:1b:fc:30:37:ac:f7:36:
         8b:74:40:8c:e0:c1:7f:3c:91:bf:f9:81:b5:0a:c8:65:c6:7d:
         06:f9:ba:5c:8f:7d:e2:36:cf:4a:62:4c:fd:99:ae:cd:45:0c:
         55:9a:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:50:45 2025 by rpki-client