Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3232203d3e203238323737.roa
File:                     3138392e31342e38302e302f32302d3232203d3e203238323737.roa (raw, json)
Hash identifier:          5s9h6uhSG6UsCENdOvGENcnGShD3hSYcSWqKN4UyDk4=
Subject key identifier:   67:6A:F6:AE:A8:BF:20:1D:99:4B:03:7E:04:C3:D6:E9:28:D8:D3:AE
Certificate issuer:       /CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
Certificate serial:       37A4307E17995A807E950684CC8D6EF44350B222
Authority key identifier: B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3232203d3e203238323737.roa
Signing time:             Thu 26 Jan 2023 18:54:02 +0000
ROA not before:           Thu 26 Jan 2023 18:49:02 +0000
ROA not after:            Thu 25 Jan 2024 18:54:02 +0000
asID:                     28277
IP address blocks:        189.14.80.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a4:30:7e:17:99:5a:80:7e:95:06:84:cc:8d:6e:f4:43:50:b2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
        Validity
            Not Before: Jan 26 18:49:02 2023 GMT
            Not After : Jan 25 18:54:02 2024 GMT
        Subject: CN=676AF6AEA8BF201D994B037E04C3D6E928D8D3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:9c:cb:eb:00:0f:8f:f1:58:2a:fa:f2:f3:
                    60:68:ee:be:d2:28:43:2b:3c:5e:f6:50:3b:4d:d6:
                    4a:b6:05:44:42:c0:54:bd:b8:83:08:88:86:4d:18:
                    33:63:bb:6b:10:f9:8b:a0:bd:85:85:58:58:4a:34:
                    39:cf:dc:01:e2:3c:f0:ea:f7:7f:ca:4d:e1:40:ec:
                    94:d2:81:eb:fe:63:bb:06:d2:92:7a:c5:48:3b:00:
                    44:a6:f2:a3:26:73:0b:3b:c1:38:4e:6e:0e:0c:d2:
                    60:41:ba:a4:b2:b3:8f:3d:ce:c7:f7:f6:df:11:a5:
                    91:32:51:11:69:a2:d7:9c:af:78:44:b2:09:f2:ef:
                    61:6b:dd:ba:a9:b2:10:3b:3e:af:e4:76:38:62:58:
                    32:e3:1f:1a:96:c3:43:97:0e:2f:ed:4b:dd:73:86:
                    67:48:56:87:c9:ab:27:ae:91:2c:e1:b8:f5:06:32:
                    77:18:79:99:63:89:2c:7e:9a:6a:ac:29:a1:e4:a5:
                    6e:ba:cd:bf:62:61:17:62:ff:3f:d2:51:5a:fd:d4:
                    87:6e:54:68:b0:10:fc:26:42:8e:af:a4:78:2f:55:
                    b8:5d:43:83:20:d6:cb:72:31:1b:e4:d3:e1:3b:1d:
                    26:14:4f:7f:13:3b:a1:98:de:6f:1f:ba:30:32:bf:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6A:F6:AE:A8:BF:20:1D:99:4B:03:7E:04:C3:D6:E9:28:D8:D3:AE
            X509v3 Authority Key Identifier:
                keyid:B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3232203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:4d:06:b4:a6:3f:e6:f5:9f:35:75:e5:c8:e7:9e:7e:60:
         49:74:61:53:5a:56:9e:62:01:33:8d:4c:03:73:68:d3:db:ac:
         64:d2:11:db:99:b6:30:2f:36:6c:74:8d:e6:20:8d:22:8e:d3:
         c9:c7:8d:89:9a:04:58:95:77:4f:c3:83:0b:f3:b1:f9:da:b8:
         33:60:35:ed:28:3f:a3:5b:f3:31:44:ec:27:67:13:4a:5d:27:
         e5:4e:d2:6d:d2:5d:61:0a:19:4c:d4:b7:f0:47:65:a9:7e:41:
         b4:5e:2b:30:b4:03:69:1f:8a:78:79:fc:4d:3a:02:8d:72:d6:
         42:32:bc:e9:cd:e4:ba:8d:1a:61:c5:bd:a6:78:e2:b8:a8:7e:
         bd:db:bc:34:cc:ee:f8:08:a4:e3:9a:38:3d:b7:a9:71:38:01:
         a1:13:f0:4c:fb:32:e8:f2:1f:16:49:59:94:3f:0a:4c:68:9a:
         1b:db:2f:23:c2:ce:1b:8c:e9:b2:32:af:e9:22:08:3a:ec:76:
         3b:e0:4a:c9:6a:ed:9d:a0:b7:63:c3:6c:cd:05:4a:9b:e1:af:
         e2:74:54:6f:d1:15:65:50:2f:43:bd:ca:d7:62:f6:44:a0:07:
         3a:c9:af:02:32:c0:6b:16:e4:c8:4b:33:af:f0:49:a9:90:40:
         27:5e:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:18 2025 by rpki-client