Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34352e302f32342d3234203d3e203238333236.roa
File:                     3138392e35302e34352e302f32342d3234203d3e203238333236.roa (raw, json)
Hash identifier:          +yRBD9Jf6TyBdStWOMk6lneHdq89wPT3KDktSQ0zsxs=
Subject key identifier:   71:E1:CD:14:37:58:E7:72:58:24:9F:FF:BD:39:74:44:5B:80:F4:1D
Certificate issuer:       /CN=D48B6B74510F8F61705D671F9A8DDD6DB21C55B1
Certificate serial:       6AA72382EEC34E87226F5FBCABA5033DB1388847
Authority key identifier: D4:8B:6B:74:51:0F:8F:61:70:5D:67:1F:9A:8D:DD:6D:B2:1C:55:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34352e302f32342d3234203d3e203238333236.roa
Signing time:             Tue 19 Jul 2022 18:34:44 +0000
ROA not before:           Tue 19 Jul 2022 18:29:44 +0000
ROA not after:            Tue 18 Jul 2023 18:34:44 +0000
asID:                     28326
IP address blocks:        189.50.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a7:23:82:ee:c3:4e:87:22:6f:5f:bc:ab:a5:03:3d:b1:38:88:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48B6B74510F8F61705D671F9A8DDD6DB21C55B1
        Validity
            Not Before: Jul 19 18:29:44 2022 GMT
            Not After : Jul 18 18:34:44 2023 GMT
        Subject: CN=71E1CD143758E77258249FFFBD3974445B80F41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:06:9f:af:b5:d2:03:d0:14:95:30:7d:75:d3:
                    4a:6d:80:ee:5c:05:e1:96:b4:9f:80:d1:4c:46:31:
                    9e:a6:13:b7:0d:d4:c0:a8:d2:7c:1e:2a:e4:68:a5:
                    e4:52:2c:03:3c:d8:40:e1:54:d8:40:76:84:b7:c1:
                    99:fb:09:71:36:ee:63:d5:0f:d3:e6:4c:a1:c1:7e:
                    8f:78:f9:a1:07:3e:4e:3f:c8:a5:eb:7e:22:e7:e5:
                    96:50:74:aa:3b:03:a3:5d:d4:d4:bf:3e:03:0d:ec:
                    f5:56:e3:7d:de:f0:5c:b0:4d:ed:64:93:41:a2:ab:
                    69:14:b1:1f:74:58:cc:e9:6f:94:6e:c2:72:81:51:
                    ff:db:68:db:b2:88:9b:1d:84:71:b6:44:1e:92:0e:
                    7c:81:5a:dc:d9:5f:92:0b:86:43:cb:ec:87:1e:92:
                    fa:75:4e:13:27:3f:2b:4d:ed:5f:b7:16:ea:90:72:
                    82:51:06:76:ba:a2:53:8a:df:81:3c:e6:c8:45:df:
                    fb:66:41:50:14:b8:dc:53:05:a6:2c:f3:47:b6:98:
                    31:8c:fb:27:e2:a6:65:56:3f:c0:53:75:b3:52:32:
                    8a:13:c9:c0:ad:8d:d3:c6:ad:ee:9c:c8:2c:2c:82:
                    12:e4:03:af:0b:1c:29:3d:c3:fd:6b:d3:ca:06:77:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:CD:14:37:58:E7:72:58:24:9F:FF:BD:39:74:44:5B:80:F4:1D
            X509v3 Authority Key Identifier:
                keyid:D4:8B:6B:74:51:0F:8F:61:70:5D:67:1F:9A:8D:DD:6D:B2:1C:55:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34352e302f32342d3234203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:dd:ec:a5:8c:1d:e0:b1:0b:7d:46:74:25:97:a9:02:c7:
         4c:ff:29:83:00:be:5b:9c:bb:23:f0:68:2b:a3:b2:5c:c9:60:
         54:68:97:20:55:fe:47:aa:3e:22:0e:fc:a8:ec:9c:7b:4d:08:
         62:13:de:1c:f3:72:23:0c:a3:5b:3f:31:a5:56:a8:ec:0c:4e:
         65:49:e8:17:de:c0:d1:4e:82:61:dd:d2:61:04:ba:a1:97:e8:
         26:e9:f9:3b:6a:8f:b8:84:26:47:72:05:54:e7:85:36:0a:12:
         0a:e0:af:ff:a3:21:67:a5:b1:b2:d3:56:81:39:97:1a:80:33:
         91:c7:ae:4b:f8:cc:b8:fe:1e:2c:96:54:2e:df:44:9a:f9:91:
         b6:51:3e:af:af:6c:44:dc:b0:fe:fa:89:21:4c:9b:1d:8b:ec:
         7b:37:99:e9:cd:b4:c1:de:88:35:f9:34:bd:23:67:3b:04:fc:
         56:de:a0:a6:d3:b6:8b:c5:11:0b:f2:8e:3a:89:30:a5:a7:80:
         31:60:fa:dc:f1:86:02:94:86:cc:bb:9c:04:95:cf:af:d8:50:
         a5:10:5e:a3:1b:60:db:77:95:ae:be:fa:2c:cc:9a:47:67:66:
         78:33:9d:44:15:8a:e2:f1:bf:65:5d:9a:d0:c9:99:2d:34:76:
         8b:59:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:02:30 2025 by rpki-client