Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32322d3234203d3e20323730333434.roa
File:                     3138392e3132362e342e302f32322d3234203d3e20323730333434.roa (raw, json)
Hash identifier:          RM/eILlGy4ifQRavqSUUa5Ms5UgLQEZ1rQ2FKJBf68Q=
Subject key identifier:   DF:40:FD:E7:C2:FC:07:2A:46:F9:67:D6:88:8A:38:70:69:AF:96:F6
Certificate issuer:       /CN=7FD1F92319586F3CA7EEEF77653A3D4218664B57
Certificate serial:       6F5EE79AF57F4AF1BB853BF9F364FFF23AE96B65
Authority key identifier: 7F:D1:F9:23:19:58:6F:3C:A7:EE:EF:77:65:3A:3D:42:18:66:4B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD1F92319586F3CA7EEEF77653A3D4218664B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32322d3234203d3e20323730333434.roa
Signing time:             Thu 29 Jul 2021 20:52:54 +0000
ROA not before:           Thu 29 Jul 2021 20:47:54 +0000
ROA not after:            Thu 28 Jul 2022 20:52:54 +0000
asID:                     270344
IP address blocks:        189.126.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5e:e7:9a:f5:7f:4a:f1:bb:85:3b:f9:f3:64:ff:f2:3a:e9:6b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD1F92319586F3CA7EEEF77653A3D4218664B57
        Validity
            Not Before: Jul 29 20:47:54 2021 GMT
            Not After : Jul 28 20:52:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:ba:09:73:5c:7e:1e:be:15:90:5c:ef:75:
                    2e:4d:fc:34:f8:44:96:82:78:33:bd:5e:ad:e4:07:
                    4c:d6:5f:62:b1:8b:1a:84:30:30:d7:eb:46:81:e3:
                    59:8c:cd:cb:79:67:0a:59:05:20:47:22:a9:24:23:
                    90:79:d8:68:30:57:80:05:f7:4e:0a:5d:b0:f5:5b:
                    84:f2:c2:2b:8c:b4:55:9b:a4:a7:03:4f:d6:b7:a1:
                    1a:d7:ea:16:74:d3:80:02:83:5f:d3:de:c9:40:e8:
                    5c:82:e7:8f:da:39:a6:4d:3a:70:f1:d2:6e:ca:20:
                    32:5a:64:86:96:e6:ca:3d:a6:3f:5d:98:95:f9:a8:
                    56:08:40:0e:df:c2:09:9f:27:d9:3f:3e:dd:08:d8:
                    80:cb:ef:0c:33:d1:af:3b:4a:62:73:85:19:53:c1:
                    ff:26:00:4c:c5:b3:f3:60:e0:aa:23:cf:ee:4f:88:
                    d1:07:17:8e:cb:82:9b:01:09:b1:9d:cd:aa:6b:c0:
                    d5:d2:22:d1:b7:58:c4:e1:44:21:eb:84:ef:01:dd:
                    35:39:0c:00:ec:aa:9b:ff:8c:8c:ab:50:5d:2a:9b:
                    ab:3d:a5:bc:b7:de:d5:c1:9d:4a:bb:83:83:48:b3:
                    23:72:65:a7:4b:9b:cb:2a:eb:11:01:ba:5e:e2:22:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:40:FD:E7:C2:FC:07:2A:46:F9:67:D6:88:8A:38:70:69:AF:96:F6
            X509v3 Authority Key Identifier:
                keyid:7F:D1:F9:23:19:58:6F:3C:A7:EE:EF:77:65:3A:3D:42:18:66:4B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/7FD1F92319586F3CA7EEEF77653A3D4218664B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD1F92319586F3CA7EEEF77653A3D4218664B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e342e302f32322d3234203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:2f:25:6e:84:1a:96:6b:c9:41:9d:43:83:fc:80:46:a1:
         76:f4:ec:10:8f:30:db:b0:9e:71:64:e6:4c:29:ce:c2:9b:e6:
         7f:44:a3:92:36:85:1a:5a:b8:04:31:86:1d:1d:2e:7a:e4:33:
         b0:80:9d:2a:4b:e3:7f:6f:55:76:c3:97:60:35:0c:96:48:51:
         1a:c4:1c:dc:c1:80:f4:20:98:12:df:ea:ca:8c:bf:d1:51:57:
         a3:34:47:c5:95:7a:5e:de:31:fe:53:93:3e:bf:4f:6e:4f:bd:
         9c:26:11:fa:10:92:77:44:59:fb:48:c5:de:a5:ba:b7:5c:81:
         19:48:11:30:76:e6:b1:84:3b:ae:e9:9a:d7:17:7a:05:a8:aa:
         f3:d3:3b:07:77:10:4e:eb:24:a1:c1:d6:cb:45:07:35:84:4d:
         54:29:a0:48:21:c0:01:fc:ba:dc:88:e7:dd:31:d9:47:9b:75:
         f6:68:4b:ea:35:fe:b2:63:1f:79:b6:d9:ac:a2:0f:b7:b3:ac:
         a9:69:c7:06:af:23:f6:64:07:30:e3:a4:b2:b7:c0:00:1d:46:
         62:56:e1:57:db:56:1b:a1:5f:16:c0:fd:03:a0:c1:4c:33:e5:
         35:ed:8d:bc:ec:15:30:db:29:d5:76:14:b3:93:11:fa:c5:af:
         06:eb:d1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:01 2025 by rpki-client