Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa (raw, json)
Hash identifier:          u+H+xUqXrutnJ8sitzot8Ti1TEt4Y8LOnfL9BHJdHDE=
Subject key identifier:   F6:D8:F9:D0:28:7A:78:53:18:F6:02:7A:E0:2D:57:D4:5D:08:E1:E8
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       527B1585BD627BB0A3294ABC91E0D428DF576304
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:04 +0000
ROA not before:           Wed 20 Dec 2023 19:55:04 +0000
ROA not after:            Wed 18 Dec 2024 20:00:04 +0000
asID:                     28234
IP address blocks:        189.127.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7b:15:85:bd:62:7b:b0:a3:29:4a:bc:91:e0:d4:28:df:57:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:04 2023 GMT
            Not After : Dec 18 20:00:04 2024 GMT
        Subject: CN=F6D8F9D0287A785318F6027AE02D57D45D08E1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:c8:e9:16:67:12:c0:d5:71:c0:32:18:a4:
                    42:a5:ed:f5:8f:76:4d:b5:75:64:6a:62:d9:fd:b2:
                    e7:0d:fc:23:19:1f:50:59:a3:85:49:f3:7a:3b:f6:
                    13:e9:13:f2:ca:7f:45:27:d3:fb:79:95:bd:49:8b:
                    06:01:16:8c:a4:23:ff:4c:0b:12:89:d9:bf:9b:07:
                    46:b0:ce:24:5e:09:d0:c7:dc:6f:50:8a:38:8d:36:
                    95:9d:f7:fb:54:d5:17:f0:07:ee:18:ff:db:74:45:
                    bd:7d:7c:63:7e:67:6d:a9:39:fb:0f:1e:2c:d9:6a:
                    d5:95:3f:0e:d4:5f:8f:f2:4e:75:6c:f3:50:96:a1:
                    12:9a:4f:3c:8f:8d:56:a3:a9:47:71:54:32:eb:fc:
                    7b:eb:0a:ab:aa:31:64:81:3e:a2:a8:b9:c5:24:51:
                    e5:e9:d3:7d:e8:cf:17:87:ff:b5:8a:1d:5d:d3:8b:
                    ee:d9:df:fc:62:41:8c:8c:ef:bf:ce:bd:07:37:f6:
                    97:35:8c:06:3f:d8:36:94:9d:86:60:94:c2:45:6e:
                    cf:b6:a4:52:c1:4d:e0:11:6f:c5:9b:36:4b:33:cd:
                    5f:11:d4:c9:0f:94:3b:67:d0:70:a4:aa:c7:74:6b:
                    b3:4f:b1:a6:fd:d2:95:c5:02:c9:a5:53:03:25:95:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D8:F9:D0:28:7A:78:53:18:F6:02:7A:E0:2D:57:D4:5D:08:E1:E8
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32302d3230203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:26:65:3e:ab:cf:0b:6d:ed:90:6c:84:34:af:eb:c0:89:
         d3:6d:c6:71:1f:f2:fa:1a:e1:0a:59:29:20:7d:64:01:6e:c6:
         44:6f:77:7e:ac:6f:73:ee:88:2f:fd:3c:2f:8d:26:a3:83:10:
         c9:f9:0f:8d:91:af:c0:27:b6:0c:b6:be:29:8a:fd:ca:0a:20:
         5c:78:8f:cf:7a:7d:c4:8a:a0:82:39:56:de:a8:57:fa:90:82:
         af:a6:7f:0c:f3:31:a9:92:86:84:e8:a6:43:f8:90:4e:f8:cc:
         96:d5:1a:6d:01:a9:e5:c2:81:c0:25:61:b9:e4:5a:ad:d7:1b:
         b6:7c:56:bd:14:86:89:c7:cf:ac:61:cc:05:b2:c9:c7:5e:9b:
         7f:3e:2d:04:2a:88:8a:9b:84:29:58:5d:08:59:c3:13:1b:13:
         07:34:e0:05:a7:73:61:ac:b8:c2:3a:51:ee:f4:15:99:14:58:
         e8:20:ce:10:f0:ef:41:01:e7:83:4e:85:ca:a4:e5:51:da:42:
         7b:38:5b:49:bf:70:89:8a:cb:8c:0d:9d:5f:8c:48:49:46:2c:
         e0:05:a3:4e:9c:8e:21:81:08:16:fa:77:80:d2:97:69:48:45:
         7f:1f:b2:8a:a0:c7:4b:70:b5:a3:e9:8d:d1:db:13:ae:c4:db:
         2b:a9:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:27 2025 by rpki-client