Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34372e302f32342d3234203d3e203238333236.roa
File:                     3138392e35302e34372e302f32342d3234203d3e203238333236.roa (raw, json)
Hash identifier:          Oj5o8is5LIT1Os7Irvi9kgu7VhywKcHQeT4Y7+RaJ4I=
Subject key identifier:   1D:7F:AC:CC:29:DC:B2:39:1F:05:9C:92:A2:DF:01:EF:8F:A7:57:A6
Certificate issuer:       /CN=D48B6B74510F8F61705D671F9A8DDD6DB21C55B1
Certificate serial:       36A4EFE003F4ADCFA2E1354C89DA6C49994760AE
Authority key identifier: D4:8B:6B:74:51:0F:8F:61:70:5D:67:1F:9A:8D:DD:6D:B2:1C:55:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34372e302f32342d3234203d3e203238333236.roa
Signing time:             Tue 19 Jul 2022 18:34:44 +0000
ROA not before:           Tue 19 Jul 2022 18:29:44 +0000
ROA not after:            Tue 18 Jul 2023 18:34:44 +0000
asID:                     28326
IP address blocks:        189.50.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a4:ef:e0:03:f4:ad:cf:a2:e1:35:4c:89:da:6c:49:99:47:60:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48B6B74510F8F61705D671F9A8DDD6DB21C55B1
        Validity
            Not Before: Jul 19 18:29:44 2022 GMT
            Not After : Jul 18 18:34:44 2023 GMT
        Subject: CN=1D7FACCC29DCB2391F059C92A2DF01EF8FA757A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:94:71:19:ac:0e:c8:c9:d6:23:84:a7:83:
                    0b:16:06:04:e0:98:d9:1d:e2:27:c1:10:65:4a:b6:
                    5b:3d:f2:6e:ac:1f:f3:39:a3:92:3f:55:4b:91:0a:
                    1b:34:48:3a:ee:0f:d0:17:97:b1:ed:03:e5:a7:28:
                    3d:51:77:ca:1d:3a:d2:fe:0e:1f:b8:2e:a9:ae:6b:
                    e9:c3:e7:da:7e:14:c1:ee:de:c0:d2:46:d6:41:d8:
                    a4:5f:18:72:b6:00:db:96:63:03:2f:7e:6f:fb:96:
                    5c:ea:cb:3b:2b:98:a0:e0:60:87:41:bc:0b:af:ba:
                    18:c2:df:82:aa:60:0c:8b:23:a8:44:20:6d:99:e8:
                    cb:b9:44:dd:89:94:ed:d7:e6:39:47:4b:3a:7c:d0:
                    c3:dc:dc:04:67:0c:c9:b3:ef:fa:fe:84:d9:8a:18:
                    d4:ec:11:37:6b:ad:cb:15:82:c7:3e:79:4d:8e:df:
                    9f:18:8f:b8:1f:19:f0:c1:c5:c5:d0:3d:0b:42:40:
                    63:e4:72:78:6e:4d:7b:bd:6d:f7:2d:8d:91:c0:51:
                    ee:33:09:35:87:ee:c1:fe:be:26:6c:97:5d:da:85:
                    ce:46:69:f0:f2:64:b3:a6:e0:b0:d8:2f:48:79:92:
                    6e:44:e7:12:1c:66:f9:39:15:05:f7:5d:d6:90:1f:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7F:AC:CC:29:DC:B2:39:1F:05:9C:92:A2:DF:01:EF:8F:A7:57:A6
            X509v3 Authority Key Identifier:
                keyid:D4:8B:6B:74:51:0F:8F:61:70:5D:67:1F:9A:8D:DD:6D:B2:1C:55:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D48B6B74510F8F61705D671F9A8DDD6DB21C55B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/3138392e35302e34372e302f32342d3234203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:79:04:d5:43:da:ce:3b:24:bf:28:57:8a:31:0e:34:38:
         be:52:cd:33:d2:2e:ac:17:db:b9:9b:7f:55:99:d5:49:ed:da:
         6f:1a:96:75:b1:0f:1b:81:01:e7:f5:b4:9c:fc:23:41:14:ac:
         7e:f5:47:bd:26:56:03:90:84:c5:27:48:8e:32:a9:03:92:9f:
         fc:fa:c7:c0:1e:f7:1e:1c:75:b1:43:92:a7:8b:4c:6a:59:63:
         1b:5b:af:25:e0:e5:bf:91:7d:e4:21:5f:6d:c5:ee:22:79:e1:
         bc:f5:18:8d:02:bb:c6:e5:6a:17:e8:64:31:8a:62:f8:f6:78:
         6d:63:5e:25:d7:41:50:06:57:04:c3:34:66:2e:a1:0b:ba:6d:
         e8:42:6b:6d:d8:d2:62:15:54:08:5a:fe:b2:ac:05:68:0e:72:
         20:17:32:5b:9d:69:b3:d5:16:16:5f:42:49:0e:f5:08:9e:38:
         b5:af:9d:8c:27:b6:ca:0c:cc:39:c9:00:3c:e2:d7:8d:2d:d4:
         1d:d7:45:02:7d:4a:d8:7e:f9:42:d5:f1:27:5f:e2:eb:9b:91:
         e2:c4:9d:2e:20:0b:e2:ec:82:49:26:8a:f1:8f:3d:7c:d3:ef:
         72:74:52:e1:cd:fd:04:3b:99:5d:bd:1d:f6:7d:ee:0a:81:f6:
         42:c7:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:40:29 2025 by rpki-client