Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33392e302f32342d3234203d3e20323632383735.roa
File:                     3138392e3131332e33392e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          ycbYb4a8pI/chcWh1FFD/OCrEfItmGKFgwMPSQTJlaA=
Subject key identifier:   2F:BB:19:BE:8A:DA:EE:61:C6:64:56:30:21:18:A2:CF:03:57:80:24
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       6F1BC21C9B791E99F6B4D289E696B850B50DEC75
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33392e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 13:07:51 +0000
ROA not before:           Thu 02 Jan 2025 13:02:51 +0000
ROA not after:            Thu 01 Jan 2026 13:07:51 +0000
asID:                     262875
IP address blocks:        189.113.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1b:c2:1c:9b:79:1e:99:f6:b4:d2:89:e6:96:b8:50:b5:0d:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 13:02:51 2025 GMT
            Not After : Jan  1 13:07:51 2026 GMT
        Subject: CN=2FBB19BE8ADAEE61C66456302118A2CF03578024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:e7:4a:77:07:eb:66:33:e3:44:97:87:b5:
                    eb:5e:f2:87:a9:8d:84:f9:ef:a2:b8:62:8c:57:70:
                    a1:7e:33:ee:7f:af:e4:08:83:0c:df:6d:07:fe:53:
                    0e:dc:8d:ba:10:47:9f:ea:c9:8b:e9:72:61:42:21:
                    07:50:a8:40:66:d1:d2:21:05:df:f1:18:81:39:07:
                    b8:2c:d7:e5:3c:71:fd:ad:77:e7:da:29:f1:7e:8a:
                    df:b6:6c:68:27:74:9f:49:3d:08:a1:31:6e:2e:78:
                    47:0b:f8:b3:f1:ca:f4:53:5b:c8:fd:91:12:d7:b6:
                    f6:17:50:99:54:d0:2f:bd:2f:c8:f8:c7:81:19:5d:
                    f2:c3:41:4c:a7:76:98:ff:d0:ad:ab:f0:0a:f9:81:
                    50:54:70:1e:48:be:9c:62:77:af:9b:dd:ad:83:cd:
                    aa:b5:e1:1c:bc:ca:23:5d:0d:fb:77:73:fb:bc:2e:
                    33:c8:61:be:c2:89:30:61:2e:49:1a:5a:33:54:e6:
                    c7:67:48:c6:a9:d0:54:40:8b:94:bf:ad:44:8f:4a:
                    02:bf:f8:ae:f5:92:4d:f1:29:a9:2d:f1:c0:7d:fa:
                    1d:d1:2a:c9:a1:df:85:a0:34:53:2f:4f:35:63:75:
                    5a:43:6d:22:aa:fe:57:af:86:0d:c0:55:d7:bb:76:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:19:BE:8A:DA:EE:61:C6:64:56:30:21:18:A2:CF:03:57:80:24
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138392e3131332e33392e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:16:a4:2f:28:bb:bd:f4:37:b1:cf:75:21:f3:6e:78:fb:2a:
         67:22:54:7f:dd:51:94:23:c9:6b:36:ef:5d:44:6d:6f:f2:de:
         e6:1a:7a:bb:29:ff:43:26:fb:76:61:cb:8c:0a:57:42:83:1f:
         16:9a:5a:39:16:fb:ba:54:9d:cc:94:92:16:68:55:ba:b2:af:
         99:76:6f:ff:c2:87:08:30:4d:fe:76:09:17:96:aa:f5:b4:d2:
         3b:d4:d8:f2:1a:1e:48:78:6d:fe:b5:bf:39:1b:3f:de:63:3e:
         7b:b1:91:4c:4d:0b:db:1e:7f:2f:d5:06:87:c0:7a:15:fd:42:
         74:d8:cb:02:3c:6e:fa:ab:c2:93:6a:9e:47:f6:2d:8b:0c:c4:
         08:3b:77:e3:10:01:b6:8e:a7:70:e6:0a:67:4f:b7:fa:c4:36:
         22:3a:95:c3:0c:05:0d:6c:02:c8:a5:6b:25:7e:80:bc:08:2c:
         76:04:0b:05:39:a3:ef:cb:e6:6a:0f:37:18:9a:83:c9:ec:a1:
         75:ce:92:d4:6e:b1:d2:49:8e:41:18:2e:86:66:cf:b2:b3:d4:
         11:20:05:68:cd:75:d8:3c:71:ce:cd:9f:8e:c0:ab:46:34:70:
         20:e9:d9:6d:31:af:6f:f7:ac:a0:e0:33:06:a0:f6:17:9a:63:
         6d:92:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:52:50 2025 by rpki-client