Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32302d3234203d3e203238323334.roa
File:                     3138392e3132372e3139322e302f32302d3234203d3e203238323334.roa (raw, json)
Hash identifier:          yf2aQbAgUG/Pa7Zx9heI9Wap5lStQfzFNbiLOvEP29o=
Subject key identifier:   33:61:AB:DC:55:A6:95:21:57:EF:AA:77:57:FC:85:F3:84:2D:39:77
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       2FD1EF51054845B3D78128C67840393229830F76
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32302d3234203d3e203238323334.roa
Signing time:             Tue 31 Oct 2023 23:00:00 +0000
ROA not before:           Tue 31 Oct 2023 22:55:00 +0000
ROA not after:            Tue 29 Oct 2024 23:00:00 +0000
asID:                     28234
IP address blocks:        189.127.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d1:ef:51:05:48:45:b3:d7:81:28:c6:78:40:39:32:29:83:0f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Oct 31 22:55:00 2023 GMT
            Not After : Oct 29 23:00:00 2024 GMT
        Subject: CN=3361ABDC55A6952157EFAA7757FC85F3842D3977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:95:ce:bb:91:d3:a5:11:71:8a:44:b2:47:
                    26:11:e4:17:ea:d0:63:1c:24:63:d3:e6:35:05:82:
                    63:59:38:4c:f0:62:2e:c3:cf:df:38:3d:56:42:69:
                    80:bc:4e:56:e0:13:77:3d:70:49:72:8d:e4:6a:b3:
                    ad:92:26:46:2a:46:fc:ba:e9:d3:8b:59:ce:e2:99:
                    e2:ad:58:c3:c2:ef:20:e4:20:e4:84:b1:f6:ae:2c:
                    ae:b1:ce:2a:6b:d7:52:84:67:aa:a3:d4:33:eb:41:
                    ac:09:31:2e:47:87:11:76:be:c9:59:04:50:45:24:
                    99:95:9f:f4:6d:a2:08:60:79:21:23:58:29:3e:a2:
                    45:a3:6e:c7:23:d8:de:ca:f7:3d:14:5a:62:04:ac:
                    5d:28:d3:a8:e4:69:c0:58:4b:a9:c9:82:73:c7:de:
                    c8:59:f9:44:b7:6c:37:80:07:36:87:2f:d1:95:0d:
                    25:cb:51:5b:13:5d:87:56:19:bf:2c:67:ee:e2:da:
                    65:f5:a7:e4:d9:37:20:df:2b:65:b9:a9:6f:e6:b8:
                    2c:c9:99:5c:eb:5e:bd:bb:8a:56:03:89:db:e5:0b:
                    50:0f:7e:fd:59:21:42:e0:58:49:fa:56:47:15:c5:
                    8d:ff:29:93:08:46:c1:3c:71:a5:31:59:54:9e:ae:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:61:AB:DC:55:A6:95:21:57:EF:AA:77:57:FC:85:F3:84:2D:39:77
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139322e302f32302d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:4f:0a:ba:b4:7f:ac:be:8e:a5:f3:3b:6d:75:70:9c:32:
         37:11:2f:95:ce:06:5e:1f:a1:bb:d8:f2:9d:99:0c:13:8f:78:
         12:a3:0d:68:4e:52:54:51:d7:60:0c:a5:f3:29:2a:48:e2:76:
         32:de:9d:9c:59:80:2e:b0:bb:ee:85:10:18:0e:72:16:04:e3:
         32:d4:29:8d:88:d7:b6:34:bd:4a:27:48:9a:40:51:25:6b:c6:
         d9:40:34:d9:75:55:7f:04:99:bf:79:62:3f:07:93:82:1a:eb:
         4a:be:b7:57:3e:9e:81:ba:9a:38:83:97:78:ed:a1:f1:80:3c:
         c5:82:d7:47:5e:d8:c0:06:14:5f:e2:44:9e:e8:bc:f3:27:7e:
         ef:95:c8:b0:de:6a:ba:1b:e1:d7:11:28:f1:b0:3c:31:db:7c:
         fc:51:4d:d0:cc:c8:e4:64:6c:45:a2:86:48:c3:1f:2e:13:b3:
         ce:69:05:b1:0a:13:88:f6:92:57:48:77:7b:9d:f8:a6:27:b2:
         98:fe:87:27:26:2e:8a:fd:2d:59:07:88:bf:8d:48:be:0b:a8:
         a4:bd:61:99:bc:82:bd:6a:77:57:fb:94:e7:ee:41:fe:59:5e:
         d8:09:84:71:83:f0:08:2e:3b:c5:e4:99:5a:2e:ef:84:a6:0f:
         b6:41:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:13 2025 by rpki-client