Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138392e3132362e39362e302f31392d3332203d3e203237373135.roa
File:                     3138392e3132362e39362e302f31392d3332203d3e203237373135.roa (raw, json)
Hash identifier:          ZkxNJcCP9CG17m0X4LRqDxAJI4nAXpeUSdoBglF0ptw=
Subject key identifier:   AF:8F:FC:D4:72:43:BD:BD:F3:23:31:8F:A8:F7:66:DB:7E:DB:63:E8
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       1E5794AB5EBF54D58DCE7A170AC801B0FD60A02D
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138392e3132362e39362e302f31392d3332203d3e203237373135.roa
Signing time:             Thu 06 Mar 2025 01:31:14 +0000
ROA not before:           Thu 06 Mar 2025 01:26:14 +0000
ROA not after:            Thu 05 Mar 2026 01:31:14 +0000
asID:                     27715
IP address blocks:        189.126.96.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:94:ab:5e:bf:54:d5:8d:ce:7a:17:0a:c8:01:b0:fd:60:a0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Mar  6 01:26:14 2025 GMT
            Not After : Mar  5 01:31:14 2026 GMT
        Subject: CN=AF8FFCD47243BDBDF323318FA8F766DB7EDB63E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:7e:6a:e2:58:fc:4b:7d:36:0e:ab:09:31:
                    ce:1e:80:63:1b:9d:f0:d7:3d:1c:1b:e3:4a:70:1b:
                    1a:10:a9:4c:13:9b:7a:e5:4a:70:41:b4:1e:27:02:
                    d0:dc:4c:1a:63:07:bd:34:03:61:70:c5:4e:4b:1c:
                    b8:bc:57:6c:83:45:b6:1f:d3:0c:a0:b0:ad:0b:ad:
                    f3:9e:47:9b:cb:e3:06:99:a5:ab:57:de:a1:41:4b:
                    0d:9e:e7:a6:49:c4:86:7e:9b:f6:88:4b:07:e7:e7:
                    82:03:49:08:35:21:91:9a:c7:e2:c0:ce:60:b3:e4:
                    ac:93:10:f2:b8:dc:d7:c7:22:da:ef:ea:8c:32:13:
                    2e:41:e5:74:73:ed:e9:89:88:06:72:fd:89:17:5f:
                    ea:e8:92:93:c3:bb:3a:c9:c8:9c:ff:2d:a1:86:5b:
                    52:a7:ac:24:48:fc:c0:17:72:86:52:27:00:b1:6a:
                    95:44:ec:52:0a:37:95:88:d0:df:0b:da:5e:bd:d9:
                    bd:6d:01:cc:f8:f7:1c:ce:6c:70:f8:8d:49:a5:d7:
                    af:20:29:a6:3d:55:d9:85:13:b1:ab:ae:c2:84:8b:
                    74:2a:b8:f1:1e:3a:38:03:b6:22:f0:92:ba:a6:58:
                    27:a4:c7:b8:49:05:28:1c:0c:c4:0a:01:7c:31:aa:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:FC:D4:72:43:BD:BD:F3:23:31:8F:A8:F7:66:DB:7E:DB:63:E8
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138392e3132362e39362e302f31392d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:7b:32:06:38:14:36:be:76:b7:9a:fb:16:82:54:5c:59:
         92:18:fb:85:42:f6:0c:0f:b7:dc:68:46:d7:be:00:dc:02:fc:
         ef:86:23:58:e7:95:93:79:57:b3:b3:13:9d:62:bb:bd:96:79:
         4c:6f:7d:11:06:c4:ab:d6:47:37:75:8b:8f:41:5b:64:04:f4:
         59:c3:94:f4:fc:f4:c4:a0:52:14:a7:28:d6:45:72:6d:af:e4:
         d6:27:1e:98:54:ed:ba:ac:41:9b:0e:03:54:f2:c6:57:d3:8d:
         d8:e5:fc:f4:6c:d3:9d:ef:e3:24:9f:ae:ed:3b:98:cd:b2:21:
         04:1b:b4:a9:8a:70:9b:62:44:69:8c:94:ae:c3:78:94:03:83:
         9c:42:58:d4:8e:cc:2f:c0:98:89:78:62:0b:e4:83:25:21:f9:
         e4:c8:25:af:a4:84:1b:15:a3:8e:0e:ed:9c:3b:2a:fc:34:47:
         d7:09:cd:b8:bf:bd:59:4f:12:e8:5c:b4:f9:55:1e:bc:79:da:
         69:f0:f2:b0:5a:06:61:b4:37:56:6a:21:09:01:21:1d:87:70:
         ba:aa:b7:06:23:f5:7d:87:10:34:31:ce:ea:5f:14:ae:f3:b4:
         99:85:8b:82:22:3b:46:e8:b3:14:ca:a4:8d:08:d6:e0:b9:22:
         11:50:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:19 2025 by rpki-client