Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138392e34352e3132382e302f31392d3234203d3e203137323232.roa
File:                     3138392e34352e3132382e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          Ph2hJry9ut4swvPNMT6I3YrAgU1n8iLgx0V5+q46hww=
Subject key identifier:   BA:3C:5E:7C:50:28:F5:C0:D3:34:B9:56:1F:D5:5D:18:83:E9:86:09
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       2D5C32E7B57F225714F1940DA90495ABC60725AB
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138392e34352e3132382e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        189.45.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5c:32:e7:b5:7f:22:57:14:f1:94:0d:a9:04:95:ab:c6:07:25:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=BA3C5E7C5028F5C0D334B9561FD55D1883E98609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:be:ba:b6:48:e8:09:58:e6:fe:93:29:3a:
                    16:a9:4c:01:71:10:0d:20:a3:11:68:b8:3a:17:63:
                    81:48:d0:b3:8e:c4:ae:35:6c:ef:d5:dd:78:15:e0:
                    4d:a6:8d:6c:94:5e:44:43:d2:aa:8f:f8:e8:ec:8e:
                    90:ef:81:0b:73:f4:2b:78:6a:85:6d:bd:98:be:2c:
                    d5:40:ec:af:55:9d:12:2a:e9:d0:31:8a:e2:ec:84:
                    6e:50:b0:62:62:fd:41:8a:07:35:79:fd:b0:15:25:
                    e8:0a:1f:a6:56:75:54:8a:94:e9:cb:27:36:ce:02:
                    14:d9:33:0d:0f:4a:17:26:25:69:c2:08:4e:d4:27:
                    7e:c0:de:f6:bb:41:d0:c4:0c:7c:ec:b6:44:48:92:
                    c4:46:c0:e1:e6:4f:e4:9b:93:f2:b1:53:30:96:20:
                    79:4c:39:c5:cc:5a:85:98:52:c4:f0:8f:ec:5e:1a:
                    25:d9:95:ca:20:53:82:ff:20:f9:06:93:4a:9f:b9:
                    a9:0f:9c:e1:06:2e:b5:c8:6a:55:c8:99:a2:03:2f:
                    5e:da:05:aa:f4:65:2c:6a:f3:be:69:3c:76:14:e2:
                    36:27:39:5e:56:08:fe:e7:d5:cf:7b:b1:33:e5:48:
                    4a:81:9b:48:58:28:d5:54:c7:14:8c:ff:68:3e:95:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3C:5E:7C:50:28:F5:C0:D3:34:B9:56:1F:D5:5D:18:83:E9:86:09
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3138392e34352e3132382e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:67:1e:69:62:41:dc:ab:13:99:52:fb:bc:c5:7a:85:d6:
         4a:2e:84:43:b0:80:38:c0:27:3e:4a:8d:17:a9:f8:24:7d:3e:
         7c:bf:b4:d0:5c:7b:75:7e:63:62:64:0c:ea:e2:35:2e:8b:86:
         02:c4:c2:11:d8:30:3e:61:f4:6d:a9:c5:92:47:1c:0a:81:fc:
         a2:77:1b:2d:d9:a5:64:66:f7:b6:a3:87:f4:7d:6f:90:b1:3b:
         2c:de:70:a8:25:1d:ab:d7:56:db:8e:a0:44:e5:4e:aa:95:aa:
         7e:cc:8b:60:98:03:da:e5:cb:c9:b6:90:e4:37:79:41:54:40:
         33:fa:b5:4a:61:a3:f4:19:67:09:12:2a:47:7c:a2:b1:cd:b3:
         17:0a:90:ac:8a:3d:89:59:5d:a5:18:f6:95:98:ba:90:73:90:
         c0:e1:35:dc:4f:c1:99:7c:5b:78:be:ce:bf:38:e3:62:b8:98:
         75:c5:f2:08:a3:a3:26:a8:4e:ad:10:73:20:65:b7:8a:8f:9b:
         af:e3:75:8c:ec:76:de:1a:a8:df:42:8b:8d:2a:31:fe:af:e0:
         f4:cc:5a:8b:25:56:a9:df:54:fe:38:36:38:41:a7:9f:b2:00:
         c7:d3:65:cb:97:94:22:fe:72:9b:c3:79:9d:76:38:f4:f2:e5:
         82:66:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:33 2025 by rpki-client