Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3131302e302f32342d3234203d3e20323730353533.roa
File:                     3138392e38352e3131302e302f32342d3234203d3e20323730353533.roa (raw, json)
Hash identifier:          OE8D+awUcJOj0fEltzHNcchiGeRGuIm2eifqGxT0yQc=
Subject key identifier:   27:C9:9D:1D:EB:98:B9:8B:F2:60:BE:6D:48:11:9F:63:2C:C2:91:2C
Certificate issuer:       /CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
Certificate serial:       5F627DD20DAA7B8A40A4388271590D1A273068C5
Authority key identifier: 15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3131302e302f32342d3234203d3e20323730353533.roa
Signing time:             Tue 11 Jul 2023 14:54:02 +0000
ROA not before:           Tue 11 Jul 2023 14:49:02 +0000
ROA not after:            Tue 09 Jul 2024 14:54:02 +0000
asID:                     270553
IP address blocks:        189.85.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:7d:d2:0d:aa:7b:8a:40:a4:38:82:71:59:0d:1a:27:30:68:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
        Validity
            Not Before: Jul 11 14:49:02 2023 GMT
            Not After : Jul  9 14:54:02 2024 GMT
        Subject: CN=27C99D1DEB98B98BF260BE6D48119F632CC2912C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:c3:c0:8f:c3:a6:f6:04:16:15:d9:de:ab:
                    2e:dc:ba:81:63:6f:98:7b:8b:8d:36:f2:90:8c:21:
                    b3:d4:30:d6:0a:0a:f3:ca:51:87:a2:c1:0c:e7:cd:
                    e0:bc:55:9a:ef:55:d7:cc:37:33:19:a1:77:eb:b3:
                    d1:a0:b1:3c:f6:7d:f8:80:eb:2c:e5:ea:16:e9:57:
                    9a:5c:fd:6f:a3:a9:ab:87:df:68:08:2a:af:92:03:
                    78:7a:83:8d:ff:2b:6c:aa:46:40:c3:23:88:05:07:
                    04:3f:5c:21:ae:d6:7e:88:b2:b1:ef:82:99:cc:c0:
                    37:49:c8:6d:23:b3:67:3b:6a:cf:63:f1:6a:3c:1d:
                    02:ab:f9:22:6a:2d:56:eb:d4:7f:3b:f5:c4:20:59:
                    ba:44:fb:09:9d:e7:d7:87:ec:ae:cd:47:28:04:88:
                    23:7a:65:9f:17:9e:b7:8e:28:e8:71:e2:1f:cf:18:
                    5b:94:cc:66:d5:2a:23:b0:f9:9e:4e:68:80:2d:4d:
                    b1:56:78:6e:e0:1d:7f:3b:68:e1:d5:9f:c3:57:e6:
                    2a:1b:db:d3:43:cb:86:54:d2:8e:95:5f:08:3d:25:
                    f8:35:72:13:cc:e0:af:81:c7:27:8e:bf:91:04:d9:
                    01:62:15:71:0b:56:ec:ad:31:84:03:a7:2d:a0:01:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C9:9D:1D:EB:98:B9:8B:F2:60:BE:6D:48:11:9F:63:2C:C2:91:2C
            X509v3 Authority Key Identifier:
                keyid:15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/3138392e38352e3131302e302f32342d3234203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:5d:ef:aa:17:99:ab:a6:67:99:5f:ef:00:fd:15:a6:15:
         6b:0f:75:ce:76:14:51:8c:03:ca:7a:2c:2e:b9:0f:ab:45:65:
         73:a4:a7:dd:23:9c:bd:89:fe:10:25:2c:d7:6a:cd:3c:9d:e1:
         62:3c:93:15:99:2a:d9:25:0c:a8:06:e4:fe:da:9f:64:9a:98:
         a2:f5:55:32:77:3d:03:57:63:f1:31:ac:25:75:d7:5d:11:dc:
         96:68:61:33:46:00:1b:c1:7d:a0:5e:3e:31:00:51:da:8d:e6:
         8e:0d:dc:40:6b:c0:17:e1:49:e4:1f:cf:b4:67:61:62:dd:a9:
         d5:17:50:21:60:12:b0:96:7b:b7:e3:6c:bf:4a:38:4c:07:e1:
         5c:ed:47:43:32:cc:e1:37:d1:23:61:14:a5:a2:37:5a:80:84:
         be:38:21:22:33:9f:16:eb:ce:aa:8c:41:5f:fa:8f:4f:84:83:
         a4:bd:37:bc:95:0f:45:a8:e8:ab:d9:bf:9b:41:d3:4b:e9:ea:
         58:50:8f:87:ab:62:74:d5:f5:f0:57:2f:df:b2:d9:e0:fc:4d:
         05:48:02:8c:e3:5c:65:b2:52:f3:29:0b:49:64:db:6f:6a:3d:
         f0:4e:87:ce:5d:ec:ad:df:9b:68:bc:84:30:1e:43:61:a0:24:
         42:fc:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:44 2025 by rpki-client