Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3138392e3131332e31362e302f32302d3234203d3e203232343331.roa
File:                     3138392e3131332e31362e302f32302d3234203d3e203232343331.roa (raw, json)
Hash identifier:          shjA0HsxgcWFYK5BbeSYIC+se7se81jTwxed5ls5oa4=
Subject key identifier:   79:84:BD:B7:54:95:1D:D3:F0:2A:87:58:4A:15:03:D9:F9:D9:4D:A6
Certificate issuer:       /CN=3B37043581C63D12F9F834F7AAA8A5CCAB61A786
Certificate serial:       59434F39FB31A8AB79F72FD41CEF88A8E8BBFB91
Authority key identifier: 3B:37:04:35:81:C6:3D:12:F9:F8:34:F7:AA:A8:A5:CC:AB:61:A7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3138392e3131332e31362e302f32302d3234203d3e203232343331.roa
Signing time:             Tue 26 Dec 2023 14:31:28 +0000
ROA not before:           Tue 26 Dec 2023 14:26:28 +0000
ROA not after:            Tue 24 Dec 2024 14:31:28 +0000
asID:                     22431
IP address blocks:        189.113.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:43:4f:39:fb:31:a8:ab:79:f7:2f:d4:1c:ef:88:a8:e8:bb:fb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B37043581C63D12F9F834F7AAA8A5CCAB61A786
        Validity
            Not Before: Dec 26 14:26:28 2023 GMT
            Not After : Dec 24 14:31:28 2024 GMT
        Subject: CN=7984BDB754951DD3F02A87584A1503D9F9D94DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:a4:30:de:49:65:68:e1:59:cc:e0:80:c8:
                    40:10:f2:1e:40:d9:15:84:43:cc:3e:e1:21:64:78:
                    9b:f7:94:48:19:0e:d9:1b:ae:0c:b5:91:66:c7:4c:
                    2a:bd:0e:c0:7b:b5:a8:9f:41:6b:c8:f6:eb:47:8a:
                    3a:3c:ff:a9:50:48:f2:4b:c8:e9:da:a8:a3:21:93:
                    6c:9d:cd:b2:33:c0:4b:18:0e:76:1c:aa:6a:a5:dd:
                    7a:f0:ac:8c:d0:8b:f2:84:f0:a6:1e:9b:ce:75:3a:
                    8e:9d:74:a7:77:2d:00:73:60:55:18:ac:00:ff:e6:
                    39:65:39:96:f6:0e:cf:d5:88:09:2e:27:ec:b8:b6:
                    8e:ac:69:4e:b2:b5:81:d1:fe:ce:e5:07:10:27:df:
                    b8:b9:f1:9c:78:39:c0:48:85:8d:11:fe:8c:b4:6d:
                    19:8a:88:c1:a5:90:f8:75:07:f2:29:60:c2:6c:f7:
                    5d:9e:a1:42:b0:d6:e3:ba:71:13:a6:d2:98:42:e2:
                    70:8c:f2:ee:ae:fa:6b:5f:3f:1d:d1:20:67:a3:de:
                    d2:69:0a:15:1a:d3:8d:e6:54:39:46:32:65:5b:b2:
                    96:14:30:92:b7:ff:72:a0:4e:4c:7f:55:6c:96:b5:
                    65:b9:c3:a7:ad:66:f4:89:1e:68:eb:b8:f9:bd:c9:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:BD:B7:54:95:1D:D3:F0:2A:87:58:4A:15:03:D9:F9:D9:4D:A6
            X509v3 Authority Key Identifier:
                keyid:3B:37:04:35:81:C6:3D:12:F9:F8:34:F7:AA:A8:A5:CC:AB:61:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3138392e3131332e31362e302f32302d3234203d3e203232343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:4a:0d:24:e9:05:14:e2:c6:61:64:89:4b:5f:c0:10:42:06:
         6f:15:d3:0d:33:d1:8b:4d:82:ea:46:9b:c6:6c:12:64:9c:aa:
         d8:fd:47:ab:b2:82:4a:48:1b:25:23:56:98:04:f7:59:70:b3:
         38:6b:d8:a7:ff:f3:da:0e:32:fe:74:58:84:9a:0f:e7:81:dc:
         d6:e3:9e:ac:63:4c:e8:28:7c:87:16:b0:d8:c9:57:25:7a:d7:
         7d:dd:1c:c1:1a:51:5a:eb:47:bc:f8:66:1a:7e:a9:98:b3:03:
         b6:12:9d:39:7f:e0:2e:7d:30:d4:4a:b6:17:8d:77:a8:7e:04:
         ca:d5:7c:e4:4b:16:4f:b6:cd:79:38:40:6b:f6:cb:cc:97:dc:
         c1:bf:d2:23:89:90:7d:c9:46:93:bd:2b:24:48:8b:2d:b3:93:
         6a:0d:51:8f:df:81:e4:cc:e0:0d:bf:0b:5a:57:73:d0:09:b3:
         ea:9b:b7:ec:71:0e:6d:a6:61:4e:0d:e7:de:c6:1f:05:28:50:
         93:10:86:6e:75:95:e8:ea:89:c3:81:a5:31:f6:44:bc:c1:3b:
         7b:44:3e:6f:72:e8:6f:3d:95:d5:97:83:1c:68:a3:43:0b:fb:
         f4:7e:8b:e4:8a:eb:c0:86:73:3f:5c:e4:e3:a0:62:31:c5:a2:
         95:be:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:07 2025 by rpki-client