Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/3138392e3131332e3138302e302f32342d3234203d3e20323730333334.roa
File:                     3138392e3131332e3138302e302f32342d3234203d3e20323730333334.roa (raw, json)
Hash identifier:          dlR5bWTP44Ypzz1ccHG8e6P6px9dxcbL5cTi98aDoso=
Subject key identifier:   20:81:7C:32:31:C6:B7:98:58:B6:B2:A4:A0:00:35:BA:E3:D5:92:7B
Certificate issuer:       /CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
Certificate serial:       5D26AE608B16D33ED18BF6D5D35DF43A7891A7C8
Authority key identifier: 03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/3138392e3131332e3138302e302f32342d3234203d3e20323730333334.roa
Signing time:             Mon 10 Oct 2022 18:11:12 +0000
ROA not before:           Mon 10 Oct 2022 18:06:12 +0000
ROA not after:            Mon 09 Oct 2023 18:11:12 +0000
asID:                     270334
IP address blocks:        189.113.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:26:ae:60:8b:16:d3:3e:d1:8b:f6:d5:d3:5d:f4:3a:78:91:a7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
        Validity
            Not Before: Oct 10 18:06:12 2022 GMT
            Not After : Oct  9 18:11:12 2023 GMT
        Subject: CN=20817C3231C6B79858B6B2A4A00035BAE3D5927B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:79:2a:08:7b:67:2b:8b:e4:1a:5a:5d:3d:
                    f0:86:1f:8a:07:19:75:d2:b0:a1:94:2a:6c:e0:87:
                    c6:ad:44:ed:9c:aa:90:28:ea:61:7e:37:b1:ad:56:
                    1a:17:ca:a4:cc:25:e3:fe:56:fd:fe:db:89:b6:7a:
                    03:6f:27:a0:f1:a4:8b:72:c4:f3:86:fa:93:64:d4:
                    5a:4a:38:9a:64:b3:a7:1e:6e:90:51:71:05:2b:60:
                    70:3e:6f:95:7f:98:e5:50:30:5f:b6:a7:9d:ff:0f:
                    8e:42:cb:fb:94:b4:ae:16:f4:c0:b6:40:27:9f:23:
                    a9:e6:35:9c:b0:c1:e8:13:37:49:85:b5:cd:02:6b:
                    a3:90:ac:d5:b1:e5:40:30:19:ae:eb:0a:b9:c9:86:
                    e9:a4:94:57:de:4e:47:2c:69:06:c9:94:99:e8:01:
                    79:52:3e:67:1f:b0:9b:32:8e:2d:d0:ae:db:a6:a5:
                    bd:e8:79:86:9f:7a:19:ee:2f:1a:19:de:07:eb:a6:
                    a0:16:cc:4b:f8:16:ce:b4:b8:6c:a2:fe:14:be:f6:
                    f5:50:8e:88:96:e9:f4:f1:d5:11:4b:9f:21:fe:62:
                    29:7f:96:f5:07:9e:30:fc:9d:08:8c:49:a4:04:c8:
                    39:cb:d5:f1:cc:21:d8:ed:aa:25:1c:24:fd:78:1e:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:7C:32:31:C6:B7:98:58:B6:B2:A4:A0:00:35:BA:E3:D5:92:7B
            X509v3 Authority Key Identifier:
                keyid:03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/3138392e3131332e3138302e302f32342d3234203d3e20323730333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:c6:01:81:10:59:0d:9c:ff:29:ea:a9:00:d6:49:32:f4:
         38:90:9c:db:cb:9c:9b:88:10:bc:63:db:93:6b:c1:25:02:53:
         7f:6a:d4:8a:70:c2:73:23:2b:59:7f:66:89:07:fd:93:9b:d1:
         22:ac:82:99:89:8b:d0:b6:16:4a:c8:81:e6:a7:29:a1:28:e3:
         00:fc:7b:b1:2e:62:7e:38:2a:e8:e3:b1:54:de:b4:0a:9e:4c:
         7d:c8:08:4e:27:5e:7e:78:f3:61:01:8c:87:85:f7:c9:6c:6b:
         fb:b0:4e:a8:f2:40:ad:e3:17:cb:ba:b2:88:c0:73:85:ec:24:
         bc:7e:30:30:34:25:05:79:d0:51:78:cc:94:6d:bf:fa:49:b5:
         37:53:90:6b:63:cc:87:c1:ec:96:b8:56:44:e6:f8:94:59:e8:
         03:fb:84:27:7c:81:7a:36:64:1c:48:a5:e7:3a:db:52:e3:68:
         f9:67:07:85:26:c8:2b:5f:11:b1:d6:e3:fa:8e:88:11:9d:98:
         41:49:87:ed:4a:46:d5:a4:70:2e:4c:be:c9:de:a4:14:6b:2e:
         f4:5a:9b:85:94:c1:5c:24:3c:a2:40:9f:13:a0:44:8a:e3:04:
         b6:f7:bd:0b:52:8e:17:29:38:77:1e:93:1e:75:a5:8b:25:6a:
         7e:f5:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:02 2025 by rpki-client