Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e372e302f32342d3332203d3e20323730333434.roa
File:                     3138392e3132362e372e302f32342d3332203d3e20323730333434.roa (raw, json)
Hash identifier:          tnyYh4WKUWHW2Rd7xrl/2NdJrrY152i7NYN/pszP6+M=
Subject key identifier:   C3:FF:FA:A3:85:B7:54:9C:5C:31:99:4F:8E:40:8A:5E:A2:A6:D4:B6
Certificate issuer:       /CN=0565FB26A27D69671493074DF3B16BCDD92581AE
Certificate serial:       2EB09648CC6153F1916020336DE4A11DACBE9C2B
Authority key identifier: 05:65:FB:26:A2:7D:69:67:14:93:07:4D:F3:B1:6B:CD:D9:25:81:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0565FB26A27D69671493074DF3B16BCDD92581AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e372e302f32342d3332203d3e20323730333434.roa
Signing time:             Tue 06 Dec 2022 11:51:32 +0000
ROA not before:           Tue 06 Dec 2022 11:46:32 +0000
ROA not after:            Tue 05 Dec 2023 11:51:32 +0000
asID:                     270344
IP address blocks:        189.126.7.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b0:96:48:cc:61:53:f1:91:60:20:33:6d:e4:a1:1d:ac:be:9c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565FB26A27D69671493074DF3B16BCDD92581AE
        Validity
            Not Before: Dec  6 11:46:32 2022 GMT
            Not After : Dec  5 11:51:32 2023 GMT
        Subject: CN=C3FFFAA385B7549C5C31994F8E408A5EA2A6D4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:55:36:77:39:76:43:7a:ff:f6:fb:17:96:
                    60:a1:cd:06:5f:e1:08:79:95:1c:d4:b9:13:47:f6:
                    79:6f:4a:2c:ef:bd:61:07:97:1e:4c:ed:54:2a:da:
                    3e:77:b9:f8:56:1a:89:0e:20:1d:82:86:94:5a:ed:
                    d8:05:36:7b:7e:12:61:50:c5:4d:ac:94:51:9f:52:
                    f1:27:ed:f1:44:e8:eb:80:6c:68:10:d2:95:ae:16:
                    56:4e:e9:8b:29:ea:40:2f:ab:5d:e8:da:64:ed:a8:
                    66:b0:39:c6:ca:f5:fd:e2:99:4e:a9:a7:58:6d:ab:
                    0a:80:c4:3a:c4:9f:8e:7c:78:48:37:64:a2:a3:a3:
                    85:88:41:6b:7c:4a:b5:33:43:22:d5:02:54:25:73:
                    9d:4e:18:e4:f9:76:d8:aa:f5:24:ab:be:8a:c4:8c:
                    1c:05:6c:87:89:69:23:a2:6f:5e:41:01:94:c9:54:
                    06:4a:dd:cf:84:1b:d9:f1:c6:3d:f1:e9:cd:38:db:
                    a7:68:dc:1a:50:e7:b8:d5:e8:b2:f2:f5:1b:39:50:
                    9e:24:13:24:b2:d8:e5:09:de:fa:85:d2:d7:09:48:
                    c6:d3:77:6e:82:cc:de:47:40:d6:68:b6:8a:89:a3:
                    25:99:9d:11:5e:9e:6c:df:49:21:2f:dd:bc:05:bb:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:FA:A3:85:B7:54:9C:5C:31:99:4F:8E:40:8A:5E:A2:A6:D4:B6
            X509v3 Authority Key Identifier:
                keyid:05:65:FB:26:A2:7D:69:67:14:93:07:4D:F3:B1:6B:CD:D9:25:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/0565FB26A27D69671493074DF3B16BCDD92581AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0565FB26A27D69671493074DF3B16BCDD92581AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/3138392e3132362e372e302f32342d3332203d3e20323730333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:d2:bb:08:7c:c4:c8:9d:12:6c:95:2b:63:e6:8e:86:b8:
         f5:1e:a2:db:a5:6f:db:f5:8d:f7:31:26:49:e4:0d:54:27:21:
         5b:f5:f4:bf:32:3c:39:e4:5d:d6:b8:f2:c5:41:20:57:19:c9:
         09:96:ff:a5:7c:a5:5d:32:a0:78:fb:a7:7a:ab:5d:27:c3:cb:
         f1:04:65:5e:64:7c:81:04:26:9e:15:db:43:f8:c7:6c:64:6a:
         91:75:e9:a5:8b:79:3b:1d:5a:97:d9:f7:f6:c1:1b:c0:b0:75:
         00:c5:33:6f:78:f3:ff:58:23:cf:d4:f5:df:60:5a:a3:d2:50:
         d2:f7:c3:5b:24:f0:4f:fd:9d:18:91:f0:ae:65:08:9c:92:cc:
         42:61:07:61:f9:b7:42:33:b3:d6:9a:93:e4:97:62:a6:29:0a:
         c1:59:ba:9e:e4:dd:82:cc:c4:32:a4:2a:8c:24:aa:55:79:c2:
         c6:be:61:5e:10:3d:64:ca:ba:4e:91:b9:6e:93:78:22:9b:3d:
         03:0b:0c:3e:d0:cf:f6:c7:39:f1:0e:2e:f3:40:13:85:49:cb:
         79:d3:36:59:f3:9c:e3:87:42:b3:5c:b9:e9:3e:84:21:57:1f:
         50:0a:17:fc:4a:a6:6e:f1:82:17:03:de:79:b0:e8:21:30:a8:
         38:bb:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:55:15 2025 by rpki-client