Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238333232.roa
File:                     3138392e33392e3234302e302f32302d3234203d3e203238333232.roa (raw, json)
Hash identifier:          0JvYUnU1MmLD7tHlR7b+xsUnoZz3IYsVQ3GmblWs12k=
Subject key identifier:   50:46:85:B9:B9:98:1B:34:FD:47:D9:C2:29:BA:5A:13:00:7B:D0:93
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       62A50F4EBE29D50E21D73368C3545979E1F5C311
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238333232.roa
Signing time:             Fri 17 Nov 2023 12:48:27 +0000
ROA not before:           Fri 17 Nov 2023 12:43:27 +0000
ROA not after:            Fri 15 Nov 2024 12:48:27 +0000
asID:                     28322
IP address blocks:        189.39.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a5:0f:4e:be:29:d5:0e:21:d7:33:68:c3:54:59:79:e1:f5:c3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 17 12:43:27 2023 GMT
            Not After : Nov 15 12:48:27 2024 GMT
        Subject: CN=504685B9B9981B34FD47D9C229BA5A13007BD093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:46:96:49:85:f3:23:69:89:02:14:b5:55:
                    81:c3:0c:b9:d9:5f:7e:1e:ab:fd:b9:fe:05:ab:4a:
                    fe:57:c6:82:a2:30:76:8b:69:5e:44:d0:3e:d3:49:
                    b0:ac:fb:50:50:2c:89:28:45:d5:ca:f0:d7:65:b6:
                    54:50:39:f4:ab:57:90:d2:fa:74:f2:fe:58:97:1f:
                    f4:a9:0b:91:aa:d6:dc:6d:1b:31:10:de:15:3c:0e:
                    00:77:0a:ae:28:b9:08:f2:77:b7:f6:aa:68:e8:70:
                    68:31:55:0d:fc:2b:66:78:8c:24:84:ef:cd:3c:b7:
                    e1:22:d6:9f:5f:65:35:6c:2f:e2:57:e7:80:54:72:
                    23:1e:2b:7b:57:de:5f:90:d9:46:92:84:69:9b:e8:
                    04:8a:1e:63:c7:0a:63:7b:ed:f4:ba:6c:e2:f1:81:
                    75:26:3d:a3:5b:80:6b:ee:98:65:06:eb:fe:4a:41:
                    76:fd:dc:c4:73:f5:c7:b7:85:ef:06:c7:5a:1e:8c:
                    58:c3:d1:8e:52:b9:35:bc:dd:58:8f:1d:b6:6b:ef:
                    6b:d9:6c:f8:d3:14:d8:49:4b:fe:26:8b:e5:67:20:
                    73:6c:1e:5f:37:b2:e3:36:c4:23:5d:27:ef:12:4d:
                    a6:51:48:93:f2:a9:ee:77:51:de:b9:7a:50:60:67:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:85:B9:B9:98:1B:34:FD:47:D9:C2:29:BA:5A:13:00:7B:D0:93
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138392e33392e3234302e302f32302d3234203d3e203238333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:95:21:54:09:f8:6a:b0:b5:41:72:12:0b:7b:43:84:6c:60:
         05:82:58:61:05:ae:db:ca:f0:06:48:59:5b:ab:d2:6d:3f:d6:
         a2:25:a4:78:1c:1e:93:d6:25:e5:41:e6:50:82:b9:f3:46:d3:
         ef:5e:bd:50:3f:a5:fc:ec:95:fd:1b:2f:e0:fb:89:76:ee:6c:
         d7:2b:eb:ac:f5:a6:ac:97:11:de:cc:7d:b6:67:b3:6f:15:ae:
         6c:d6:47:e7:dd:d7:31:0d:0a:b3:1b:15:49:76:3d:87:13:0f:
         79:fa:95:16:21:04:aa:bc:09:ab:6b:81:9c:35:e1:52:d6:71:
         d9:58:f8:66:0b:a0:39:bb:3b:70:27:f3:61:9e:8d:79:db:5f:
         46:57:97:91:f7:44:0b:85:59:46:6f:e0:01:b2:c7:a9:b0:23:
         a4:ea:14:ae:b5:c3:98:dd:0d:c7:ee:92:d7:47:4d:36:23:ec:
         fd:1a:09:d8:1d:80:7e:6a:db:0b:a2:47:0a:1d:03:9e:63:9e:
         aa:df:62:de:3d:48:25:74:d7:7c:3f:3e:ec:11:06:3a:db:cc:
         16:2f:5b:e3:df:b6:c8:70:fe:b3:41:62:78:0e:6e:2d:ac:35:
         c1:84:90:27:3b:55:8c:a5:42:d8:a3:9e:ab:06:77:fa:c0:b2:
         39:5e:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:24 2025 by rpki-client