Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32322d3232203d3e203238323936.roa
File:                     3138392e33362e3231362e302f32322d3232203d3e203238323936.roa (raw, json)
Hash identifier:          DdDM4lhMwaSMomv41l/tkF6XRDXP/M449KojE0JKG28=
Subject key identifier:   BB:67:77:AF:00:54:47:F6:88:AC:AB:F5:14:51:4F:B0:8D:CF:F5:3C
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       554B1D92BAE67273DB8CCA7067F1E03D733CB392
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32322d3232203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:43:21 +0000
ROA not before:           Sun 01 Dec 2024 22:38:21 +0000
ROA not after:            Sun 30 Nov 2025 22:43:21 +0000
asID:                     28296
IP address blocks:        189.36.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:1d:92:ba:e6:72:73:db:8c:ca:70:67:f1:e0:3d:73:3c:b3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:38:21 2024 GMT
            Not After : Nov 30 22:43:21 2025 GMT
        Subject: CN=BB6777AF005447F688ACABF514514FB08DCFF53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:5b:ee:c1:9c:29:c9:6f:4b:47:22:2c:40:
                    fd:2f:ef:a0:40:2b:63:35:a5:03:97:2a:47:8a:15:
                    86:bd:19:f8:71:e8:5a:d1:18:68:d6:15:9c:f5:f0:
                    3c:89:4b:ea:0d:5e:0d:a3:bc:96:57:ff:2b:3e:5e:
                    ff:22:ff:57:ac:61:69:6a:71:48:e0:b3:f3:d2:bd:
                    d7:62:26:02:78:3a:13:af:51:40:09:44:53:b1:9f:
                    0e:e8:fa:3c:cb:1e:65:eb:88:1b:6b:da:02:42:0e:
                    85:c3:29:47:d2:57:0d:2f:bf:cc:5d:4c:91:15:bf:
                    e5:4c:27:9d:45:4c:55:44:e6:b8:7a:84:16:a2:41:
                    04:3a:19:b6:35:b7:04:af:07:00:5c:2e:8b:3f:7d:
                    e0:a6:3f:d4:1a:df:c0:f5:6f:9e:02:ac:f0:12:63:
                    99:91:d8:dd:c4:79:f2:1e:ad:32:c7:54:90:a1:d2:
                    74:09:40:01:47:e7:4c:2e:ac:d8:8b:a7:d1:35:82:
                    0d:d0:c6:dd:9d:41:c4:c6:94:1b:ff:bb:3d:8a:79:
                    d5:7f:f6:4f:d0:61:33:fd:ee:08:5a:83:31:f9:cd:
                    de:93:cf:27:b6:6f:d1:90:11:b4:4c:d5:bc:1c:e5:
                    1c:b9:ae:68:88:ec:49:c9:a9:50:9a:d9:b3:00:f8:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:77:AF:00:54:47:F6:88:AC:AB:F5:14:51:4F:B0:8D:CF:F5:3C
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32322d3232203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:7b:af:0a:d1:0f:3b:48:fe:bc:91:e4:e2:bd:e3:2f:af:
         b5:24:b9:9b:2e:ec:6b:b1:89:e0:41:82:30:38:f5:74:76:fd:
         45:d2:0a:af:15:ba:85:c6:6b:a0:7b:95:34:0d:45:f3:f0:f9:
         bf:7a:81:36:82:db:71:3d:f8:63:58:40:3b:20:a2:6d:f8:9f:
         22:b9:98:6c:14:43:0e:1a:8f:9e:be:e6:88:74:15:c4:b0:40:
         df:a7:bd:09:e5:17:1d:9e:07:d7:80:c9:70:f4:e2:82:b3:59:
         ca:4b:ca:8d:ce:76:c9:1b:28:91:b7:ee:97:73:08:40:ef:3d:
         d4:56:5f:7b:19:dc:bf:1a:0b:3f:a4:2c:ac:78:b5:bd:e5:b2:
         e7:44:7a:32:54:27:92:4a:e7:aa:87:42:bf:9a:e8:90:fe:77:
         01:73:15:f3:f4:fa:16:b3:4c:5f:61:89:c7:2d:b3:86:36:27:
         db:9f:a2:36:01:a4:3c:39:59:41:e5:f8:4b:d4:b8:f9:21:96:
         7e:20:12:b2:a9:35:d2:3d:4d:9d:db:a3:af:df:d1:e5:fe:7c:
         00:f8:ee:0e:2d:15:16:c1:23:af:85:e5:54:65:ed:55:ac:34:
         27:43:f8:ca:91:2e:ff:8f:37:45:35:59:a7:c3:d7:0f:b0:f6:
         18:99:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:05 2025 by rpki-client