Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32322d3232203d3e203238323737.roa
File:                     3138392e31342e38302e302f32322d3232203d3e203238323737.roa (raw, json)
Hash identifier:          wMFxbDkoT0iif9HnvYAUlGAQImXa6XvteJ/qEakR/dM=
Subject key identifier:   54:C7:37:F0:AF:63:10:7B:A3:CD:AB:F9:4B:C7:D6:64:F9:CF:AF:C7
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       09B740D63D69F96E2CAA7A44F5249C3F1753D700
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32322d3232203d3e203238323737.roa
Signing time:             Fri 12 Aug 2022 20:00:00 +0000
ROA not before:           Fri 12 Aug 2022 19:55:00 +0000
ROA not after:            Sat 12 Aug 2023 20:00:00 +0000
asID:                     28277
IP address blocks:        189.14.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:40:d6:3d:69:f9:6e:2c:aa:7a:44:f5:24:9c:3f:17:53:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug 12 19:55:00 2022 GMT
            Not After : Aug 12 20:00:00 2023 GMT
        Subject: CN=3082010A0282010100C177BCFB7BB605C60357B7AB60D0706F14A233FA680145C7268FD23B27224C39ACD8F052E5146E7AAA7315F2F2992EB36B105A2F6EDEDBE852A6EDA8C3310F16ADD5920E4F7115C7310A11128B41339AB69390361FD22D82978F1F9EEF4F6FD298A0AB10F152622790265D99C28001113E0976E1BDD77460C806ABC8AC44557D3B4C20B274138E5943DC8C3F70DCE13DAF99CF7F8BE2B2412996D38E93002E3D23E20836E8D7C0F85B2ED7E0082B013E449B6A589D0A6676D8F23F3DE3F703F8497FC8C51E108AAF0700C4A62A361F2BD22A2A57FA8A51C1F3B8CDAC7F717C04BFAD2D602F160F6110461956522FCF6E4569E7EE1B7C82BE69323BB237B46E5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:bc:fb:7b:b6:05:c6:03:57:b7:ab:60:d0:
                    70:6f:14:a2:33:fa:68:01:45:c7:26:8f:d2:3b:27:
                    22:4c:39:ac:d8:f0:52:e5:14:6e:7a:aa:73:15:f2:
                    f2:99:2e:b3:6b:10:5a:2f:6e:de:db:e8:52:a6:ed:
                    a8:c3:31:0f:16:ad:d5:92:0e:4f:71:15:c7:31:0a:
                    11:12:8b:41:33:9a:b6:93:90:36:1f:d2:2d:82:97:
                    8f:1f:9e:ef:4f:6f:d2:98:a0:ab:10:f1:52:62:27:
                    90:26:5d:99:c2:80:01:11:3e:09:76:e1:bd:d7:74:
                    60:c8:06:ab:c8:ac:44:55:7d:3b:4c:20:b2:74:13:
                    8e:59:43:dc:8c:3f:70:dc:e1:3d:af:99:cf:7f:8b:
                    e2:b2:41:29:96:d3:8e:93:00:2e:3d:23:e2:08:36:
                    e8:d7:c0:f8:5b:2e:d7:e0:08:2b:01:3e:44:9b:6a:
                    58:9d:0a:66:76:d8:f2:3f:3d:e3:f7:03:f8:49:7f:
                    c8:c5:1e:10:8a:af:07:00:c4:a6:2a:36:1f:2b:d2:
                    2a:2a:57:fa:8a:51:c1:f3:b8:cd:ac:7f:71:7c:04:
                    bf:ad:2d:60:2f:16:0f:61:10:46:19:56:52:2f:cf:
                    6e:45:69:e7:ee:1b:7c:82:be:69:32:3b:b2:37:b4:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C7:37:F0:AF:63:10:7B:A3:CD:AB:F9:4B:C7:D6:64:F9:CF:AF:C7
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32322d3232203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:60:53:1e:66:fe:89:cd:a6:19:01:7c:e4:fa:00:d0:20:40:
         8d:49:74:96:a9:67:03:66:8e:40:f0:f6:b5:f0:de:98:01:1f:
         15:0b:1a:77:3a:ef:97:48:8f:53:8a:89:47:7c:49:52:61:9e:
         da:07:0c:c2:bf:5e:b0:7c:7a:3f:e1:dc:e1:06:54:e3:74:aa:
         2c:48:31:87:9a:39:29:40:e5:78:8e:0c:47:80:1f:1d:aa:50:
         08:e3:c7:80:53:a6:b2:66:22:0f:81:f7:31:c5:c4:3e:1e:1e:
         29:48:ee:bd:3e:d0:6d:c6:5d:09:40:4e:c4:ad:d3:f3:9c:2c:
         a2:57:c5:bc:08:ad:b9:78:99:dc:f3:0b:92:fe:96:7f:1c:84:
         14:cc:f6:88:6a:78:00:2b:ce:f0:02:83:bc:e8:58:c6:1f:b7:
         dc:aa:3e:d3:5f:6e:07:f0:9e:96:30:7d:bb:2c:de:fa:47:1b:
         d1:8f:3f:76:20:78:dd:0a:1d:0f:cf:51:c2:90:a5:7f:dc:7d:
         bb:64:b3:5b:7a:1c:0b:23:0d:af:62:66:38:d5:cc:a7:a4:cf:
         be:87:73:76:a1:60:41:6a:b3:45:e4:c3:cf:84:e0:ae:c4:6d:
         db:22:5c:b3:44:90:e8:c1:7a:3a:a3:f9:3d:2a:b4:df:a4:64:
         b0:17:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:45:21 2025 by rpki-client