Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
File:                     3138392e34352e31362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          BoCZgozoDt6Bu6SMmsHoruSmD79OsebUBH1dDgj9HUE=
Subject key identifier:   BE:0E:6E:AF:38:58:5C:C1:5B:86:54:0F:AE:9A:3D:8F:5F:DD:65:28
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       495DA8F369C60C8842EADCAF077588F7D8FD411E
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 21:55:28 +0000
ROA not before:           Mon 23 Jan 2023 21:50:28 +0000
ROA not after:            Mon 22 Jan 2024 21:55:28 +0000
asID:                     53059
IP address blocks:        189.45.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5d:a8:f3:69:c6:0c:88:42:ea:dc:af:07:75:88:f7:d8:fd:41:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 21:50:28 2023 GMT
            Not After : Jan 22 21:55:28 2024 GMT
        Subject: CN=BE0E6EAF38585CC15B86540FAE9A3D8F5FDD6528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:9d:74:01:30:49:45:35:3a:de:ae:77:61:
                    d2:a8:4d:0f:fe:b8:c1:dc:b5:8e:25:22:13:dd:22:
                    7c:5b:3d:4f:d7:6a:a1:9f:45:e2:5f:cc:3b:03:d3:
                    fa:26:cf:12:f1:00:6b:22:ce:e3:69:13:d2:f3:22:
                    8d:6c:c9:8f:a5:e5:02:28:c5:36:24:6b:90:ee:87:
                    1e:6b:0b:95:96:c0:af:f7:e0:83:58:35:6c:56:79:
                    23:08:65:b4:12:36:8e:50:5d:1e:b8:d0:b3:ed:bf:
                    c8:4d:2f:5a:13:9e:8d:9d:0b:6d:9e:76:8f:5e:e2:
                    33:3e:8d:bf:34:0c:54:cf:86:31:bd:05:97:a1:e6:
                    c3:80:19:cc:6c:09:42:34:05:40:84:d1:15:bc:9b:
                    ab:50:fd:76:95:ce:05:af:50:ee:24:1b:9f:7c:fa:
                    ac:d0:54:1c:a4:84:a9:ff:7b:b4:89:af:0c:09:9f:
                    70:d1:92:20:37:51:ec:ce:3e:3e:2a:a8:61:d0:e0:
                    47:88:9a:1d:aa:00:31:4d:90:74:ef:c7:cc:bf:84:
                    57:16:d6:ae:3f:b7:0c:68:92:59:dd:5e:eb:c4:0f:
                    c6:74:79:3b:2f:18:73:c7:b4:e8:8c:41:e1:b8:e7:
                    e7:ea:4a:75:f9:2b:50:d8:77:68:48:28:7d:02:b0:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:6E:AF:38:58:5C:C1:5B:86:54:0F:AE:9A:3D:8F:5F:DD:65:28
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e31362e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:cf:b5:b1:c6:d5:7a:42:a4:50:40:80:7b:22:72:78:f3:27:
         80:c1:c9:de:d4:9d:b7:2d:8d:34:45:3a:b8:9b:76:36:b0:7f:
         d3:6c:fa:bb:22:00:60:1e:e1:53:5d:06:e5:fc:fd:fd:ff:28:
         c0:fb:e9:9d:7b:60:88:2d:f6:e9:29:2f:b4:c6:72:a5:b8:c2:
         2f:be:99:d2:6f:3c:95:33:62:9f:c7:a4:a7:b8:94:5d:56:05:
         d7:0a:ce:79:69:cc:51:6f:05:d7:cf:b1:4c:5d:d7:08:a0:29:
         aa:29:03:5f:e6:b3:d8:f0:c0:fd:fc:8f:ea:48:e7:4e:8b:ab:
         54:02:51:73:42:b0:76:7f:60:4e:06:51:c1:a1:8b:b0:a6:91:
         ad:ea:c0:25:4e:5e:71:d8:f2:f2:a5:37:b8:19:6b:6d:fe:f8:
         8d:0c:e4:2b:06:43:75:34:6e:07:ae:0a:c9:88:34:9f:51:2b:
         b4:58:bd:23:b7:01:3d:6b:e4:b7:f5:49:46:b9:af:d7:fa:b0:
         c7:bd:4e:9b:99:92:23:c6:99:f3:47:57:74:78:0f:5c:90:aa:
         0e:40:d5:20:d4:72:ff:86:b6:df:bf:b1:a6:e1:23:68:71:ac:
         eb:6c:0f:55:5b:24:22:03:a3:7f:3b:19:f7:dc:03:39:dc:dd:
         2c:b5:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:40:01 2025 by rpki-client