Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/3138392e3131332e3137362e302f32322d3234203d3e20323730333333.roa
File:                     3138392e3131332e3137362e302f32322d3234203d3e20323730333333.roa (raw, json)
Hash identifier:          i9l5EKDSW2RHHFFcn/FCopecQEARSK2CiRFdxe/mgp0=
Subject key identifier:   95:DA:EC:E2:69:A3:5C:06:1A:C1:53:32:8F:96:84:58:C2:FA:E6:D9
Certificate issuer:       /CN=A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C
Certificate serial:       522D81A048FF87FC16FF196D96D7DF474CC592DF
Authority key identifier: A8:DA:D5:28:91:C0:8C:4B:3C:39:6B:A1:CC:EB:67:B1:62:C3:6F:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/3138392e3131332e3137362e302f32322d3234203d3e20323730333333.roa
Signing time:             Wed 01 Nov 2023 17:59:34 +0000
ROA not before:           Wed 01 Nov 2023 17:54:34 +0000
ROA not after:            Wed 30 Oct 2024 17:59:34 +0000
asID:                     270333
IP address blocks:        189.113.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2d:81:a0:48:ff:87:fc:16:ff:19:6d:96:d7:df:47:4c:c5:92:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C
        Validity
            Not Before: Nov  1 17:54:34 2023 GMT
            Not After : Oct 30 17:59:34 2024 GMT
        Subject: CN=95DAECE269A35C061AC153328F968458C2FAE6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:34:83:b9:2c:2f:78:1d:05:34:e9:20:a9:
                    2b:ac:75:95:11:1c:80:43:85:6b:59:dc:cc:2c:a9:
                    71:bc:cf:5e:97:38:06:c6:2c:f9:1e:c5:34:59:7d:
                    cc:9c:eb:4c:6c:9e:b8:5b:b0:b7:e1:a5:21:87:83:
                    89:cc:5b:b6:25:32:b2:48:1b:73:d1:75:24:fe:f9:
                    35:f4:e5:5d:29:27:52:4f:d9:98:8b:c2:9f:24:cd:
                    92:ff:90:8d:7e:b8:c0:43:86:8d:ea:54:55:52:ca:
                    eb:58:07:8d:50:dc:a7:66:05:9e:80:f6:48:ed:78:
                    9b:62:dc:65:72:7c:14:f2:c3:9f:e8:6c:71:aa:c1:
                    86:00:b2:e5:b6:68:49:d9:db:b8:24:ff:58:81:cc:
                    40:e2:ef:dd:ec:ce:a2:52:ee:d3:07:1d:4e:22:1e:
                    42:87:d2:de:12:2f:a8:85:c6:b3:05:02:7e:33:c8:
                    26:c6:ea:4f:c7:0b:33:cc:9a:b7:91:50:19:2a:92:
                    c2:82:83:8f:d5:9f:e5:d2:73:9b:31:26:73:b1:f0:
                    08:96:3f:bc:86:39:6f:9f:ab:a9:90:61:6d:a5:49:
                    fe:df:d3:f8:3a:06:f2:6d:e9:ab:dd:f1:68:65:bb:
                    6f:61:15:e8:3a:7c:74:da:13:eb:4a:b6:9d:ce:6c:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:EC:E2:69:A3:5C:06:1A:C1:53:32:8F:96:84:58:C2:FA:E6:D9
            X509v3 Authority Key Identifier:
                keyid:A8:DA:D5:28:91:C0:8C:4B:3C:39:6B:A1:CC:EB:67:B1:62:C3:6F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8DAD52891C08C4B3C396BA1CCEB67B162C36F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/3138392e3131332e3137362e302f32322d3234203d3e20323730333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:02:81:1e:c7:0d:29:eb:15:ea:f8:7a:b8:6e:49:74:97:aa:
         4a:81:10:8f:b8:b5:05:ad:e8:13:1d:83:2f:c9:0b:5c:b8:ce:
         d0:85:63:5d:5c:89:c0:30:47:6c:84:a5:bc:71:4f:7f:be:71:
         86:d3:67:09:cc:9f:a5:2c:66:dc:05:07:5e:3d:c8:b6:46:41:
         e7:68:18:a1:a5:4b:22:97:af:b2:52:63:48:21:6a:bd:15:55:
         7c:ef:7f:7e:e4:68:e0:c0:36:bc:2d:b2:d4:2a:b3:60:91:da:
         58:51:14:b9:d1:e6:da:3b:87:aa:a7:2d:f4:1e:df:e9:88:02:
         e1:2d:b5:a2:27:42:f0:e8:68:f7:53:41:22:02:9c:01:10:46:
         c8:5b:45:b6:1c:06:dd:2a:4c:e0:69:ce:7d:21:78:73:81:9d:
         35:8f:34:eb:69:4c:bf:6d:f3:da:6e:37:cd:9c:29:16:9d:98:
         d9:3d:97:e4:c5:da:06:1a:a6:04:83:93:ce:89:a2:00:94:c7:
         ac:f3:5f:69:97:c1:1c:75:56:ba:a3:6b:c9:68:5d:95:6e:72:
         7a:1a:ae:75:b2:00:7e:98:bb:60:68:33:61:c8:b3:95:b7:10:
         05:46:f8:d4:63:00:67:8b:0e:36:74:49:48:f5:40:f4:eb:54:
         4f:02:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:05 2025 by rpki-client