Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e32342e302f32312d3231203d3e203533303539.roa
File:                     3138392e34352e32342e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          5Q5mIxtWqSQ8GiN/ABJMLvCe7HyH9TSjStuMCzZgiaI=
Subject key identifier:   7B:0C:47:F4:71:31:89:3A:64:67:67:29:B8:65:26:1A:D1:10:C3:9F
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       3D5A7F6DA6C80D2B310C8A81E088A0BDFAF30220
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e32342e302f32312d3231203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 22:14:36 +0000
ROA not before:           Mon 23 Jan 2023 22:09:36 +0000
ROA not after:            Mon 22 Jan 2024 22:14:36 +0000
asID:                     53059
IP address blocks:        189.45.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5a:7f:6d:a6:c8:0d:2b:31:0c:8a:81:e0:88:a0:bd:fa:f3:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 22:09:36 2023 GMT
            Not After : Jan 22 22:14:36 2024 GMT
        Subject: CN=7B0C47F47131893A64676729B865261AD110C39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:2c:6b:14:d9:99:62:08:ef:04:59:2f:65:
                    38:d9:4a:7c:0e:f0:26:01:d1:f4:86:77:8f:04:2f:
                    8b:48:34:56:d7:60:28:bf:fd:21:62:4b:62:0a:84:
                    46:b0:68:a7:02:aa:0f:0f:85:04:5b:90:67:81:62:
                    59:4c:9b:eb:82:7b:30:31:a1:4e:a4:e4:05:a3:44:
                    79:96:b2:96:52:89:1d:c8:6d:a6:47:b1:8f:2d:22:
                    8b:52:d8:13:b2:ff:d6:69:87:c6:b6:d6:c8:d9:4e:
                    10:66:81:19:ef:ac:1c:8f:92:61:8d:e0:b5:43:09:
                    dd:77:e3:77:2c:e6:93:51:1f:0b:30:e0:30:5d:86:
                    1f:4c:41:05:e2:1c:0e:70:82:86:4b:e5:67:1a:1d:
                    e2:b8:69:2d:ba:5d:b6:97:09:5c:28:af:a3:f9:1e:
                    99:3c:68:ee:4f:83:b4:f1:19:3a:a8:e3:e5:c5:c4:
                    b0:16:25:38:06:76:a3:a5:45:7a:e3:97:c3:31:44:
                    70:6c:82:fe:5a:63:cc:54:d5:23:e8:26:3b:93:06:
                    cf:f5:ea:c7:a2:bc:d6:f8:55:9c:96:a4:9e:c3:d4:
                    dd:f8:27:62:2f:ca:f0:da:ff:48:bd:4f:bd:14:1b:
                    7f:5c:97:d9:4d:0a:20:76:d5:a9:9b:fa:12:ca:3b:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0C:47:F4:71:31:89:3A:64:67:67:29:B8:65:26:1A:D1:10:C3:9F
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138392e34352e32342e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:61:7d:05:95:4f:d4:ee:41:30:14:e3:7a:d7:c3:80:71:52:
         82:5a:8e:fd:8c:bb:88:62:1b:57:e9:cf:fb:e1:77:01:e1:7e:
         65:2d:e1:03:ef:27:66:55:2d:06:16:61:a4:b8:c0:fa:57:27:
         e5:39:da:27:c2:8e:8c:a1:af:bc:e8:78:68:3a:4a:32:f0:34:
         d6:a1:85:d1:5e:1c:d4:34:6c:a3:5e:85:38:39:9d:1a:71:09:
         be:97:c5:62:8c:ec:6c:72:7d:d2:74:7b:a3:b9:9b:03:df:79:
         3b:c3:bb:a9:7e:72:c1:78:40:d9:b3:bf:88:ee:3a:d0:40:d9:
         23:68:7b:9f:21:d5:00:ed:b0:08:f9:cf:36:71:17:0d:c5:54:
         75:c1:04:f7:a4:bc:b3:b1:71:bd:fe:90:f0:d5:09:40:62:16:
         02:93:5d:96:f4:fc:20:56:c8:66:12:e2:46:bb:51:58:c5:11:
         fa:64:18:3d:6b:41:8e:fe:67:4a:53:b0:3b:6f:e8:67:0a:c0:
         90:fe:8d:35:72:c2:0a:38:08:57:20:0a:1d:1c:66:27:f6:85:
         c0:53:8d:7f:2c:2b:71:67:b2:f7:2d:d2:3e:40:79:11:c1:f2:
         7b:42:1c:fd:70:a5:bf:38:30:05:10:c9:3b:06:7d:2d:56:cc:
         ca:cd:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:36 2025 by rpki-client