Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa
File:                     3138392e37362e3139322e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          xfyX+5eIMozsmlHTO4Bgmbq/rdrTihR4/ZWzSIFKf7s=
Subject key identifier:   63:DB:D0:86:08:A0:FC:B0:F1:DE:D5:11:C8:5B:4C:3F:E1:52:3B:D5
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       5AF5EF0BAAA1D0A7A72560B80F0B411A80B4DFA5
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 09 Aug 2024 17:18:18 +0000
ROA not before:           Fri 09 Aug 2024 17:13:18 +0000
ROA not after:            Fri 08 Aug 2025 17:18:18 +0000
asID:                     28359
IP address blocks:        189.76.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f5:ef:0b:aa:a1:d0:a7:a7:25:60:b8:0f:0b:41:1a:80:b4:df:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:13:18 2024 GMT
            Not After : Aug  8 17:18:18 2025 GMT
        Subject: CN=63DBD08608A0FCB0F1DED511C85B4C3FE1523BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:98:47:0a:55:43:ce:10:e9:b6:5c:c3:b3:
                    26:65:3c:27:c0:da:38:ab:bf:f6:f4:55:ba:d0:50:
                    a8:99:c5:09:c1:10:27:c7:c9:71:97:7b:d9:11:d8:
                    28:51:a6:b0:24:4e:ca:ce:00:82:dc:ed:62:cb:9d:
                    74:2a:0b:34:f1:c2:09:c2:4c:98:a0:8d:8f:e4:d1:
                    05:1e:0e:1b:91:e5:ad:c7:f6:40:a7:fc:10:8d:0a:
                    b4:56:16:d9:ad:88:35:e4:50:32:ce:6d:0c:7e:48:
                    13:d8:cf:f4:cc:e0:26:dd:50:e1:8e:d5:d3:0e:aa:
                    94:4b:c4:03:75:4f:3f:46:eb:30:ba:66:95:49:61:
                    cd:e5:85:f9:7a:9c:b3:ad:73:ab:6c:a4:4b:49:46:
                    2a:70:92:20:60:25:2d:62:55:76:77:61:08:25:5a:
                    ef:c9:b6:4c:0b:6b:3e:20:dc:1a:84:99:ae:bd:6a:
                    69:e0:44:73:5e:0d:b5:38:2c:bc:6d:83:33:8f:61:
                    0f:c6:91:5d:7a:80:a4:0e:4c:3e:6f:e3:98:f4:eb:
                    11:d9:65:b7:4b:97:bf:d4:78:9d:90:e6:a3:f5:80:
                    ba:6e:ae:f7:30:ad:45:86:bb:37:40:4f:d7:15:0a:
                    2e:37:da:f1:0d:ba:ba:2c:f1:e6:91:e8:4c:83:f1:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:D0:86:08:A0:FC:B0:F1:DE:D5:11:C8:5B:4C:3F:E1:52:3B:D5
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:1d:a0:e2:07:a8:8c:e5:51:1c:b6:a8:79:bc:f1:98:6f:
         2d:7e:e6:aa:22:0d:74:1f:d7:21:c3:ff:1c:ad:a6:f2:5f:0d:
         f5:74:77:7f:ac:ee:1c:bf:9c:6b:d9:f6:1d:92:70:f2:22:36:
         cc:f8:e8:34:e8:eb:2c:7f:39:f3:61:d0:24:b7:e5:03:be:b0:
         54:c7:d1:e9:bd:6f:93:84:9d:3a:a0:5a:e3:97:2d:e5:23:df:
         36:53:b6:3b:c5:c4:ae:15:a4:28:7e:26:78:93:ba:b3:da:3a:
         96:55:4b:90:3e:1a:f1:54:0e:ef:c2:60:6f:9d:61:8c:b4:b7:
         b7:6e:0f:ea:3d:0c:06:65:9d:8d:44:3d:f6:1c:98:4a:f7:12:
         25:58:c1:f8:bc:0a:de:39:e8:c1:a6:a3:eb:a4:80:d8:21:d8:
         e6:34:3a:81:92:30:ad:ad:b5:5f:ed:0e:56:90:0e:c8:e3:5d:
         85:f3:c5:87:8f:bb:54:e4:e0:5b:57:ce:ee:92:b1:b4:ce:b7:
         31:3a:b5:7c:32:1d:94:ca:c8:62:9b:03:c1:e7:4c:b1:c6:87:
         d2:a0:83:a3:2e:d4:86:85:4f:b4:16:7c:90:39:e8:de:73:dd:
         cc:73:b6:64:45:20:72:aa:d7:09:c7:63:4a:8c:62:8f:e5:00:
         bc:b4:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:32:59 2025 by rpki-client