Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          1IMF9/nNxInrXzx2odQuu/wwCXg/MHWRztvP72AlBcY=
Subject key identifier:   8D:35:A5:06:BF:F8:61:B2:C9:AA:E3:DC:D6:89:A8:0A:87:95:6F:84
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       3C6F3996F93BBA8020CED37FDF181CE1E33B9760
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:00 +0000
ROA not before:           Wed 20 Dec 2023 19:55:00 +0000
ROA not after:            Wed 18 Dec 2024 20:00:00 +0000
asID:                     28234
IP address blocks:        189.127.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6f:39:96:f9:3b:ba:80:20:ce:d3:7f:df:18:1c:e1:e3:3b:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:00 2023 GMT
            Not After : Dec 18 20:00:00 2024 GMT
        Subject: CN=8D35A506BFF861B2C9AAE3DCD689A80A87956F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:72:4c:b3:fc:c0:b7:53:2f:1b:ae:a6:bc:
                    82:c5:35:a5:f0:69:91:c2:57:40:17:ad:3b:1e:76:
                    af:e5:b3:cd:1c:92:d4:de:2f:28:dc:9b:2c:d0:98:
                    20:f9:0f:be:7d:7f:e0:bc:64:d5:d3:ae:a5:ca:50:
                    c2:ca:b5:cc:c0:43:04:93:91:5c:8a:91:57:9f:39:
                    35:60:fa:ae:b2:1d:23:3e:aa:87:4e:9e:20:6e:ee:
                    3d:ae:26:cf:f4:fd:46:71:5a:6a:4f:71:80:0f:34:
                    a4:09:09:fc:69:bf:68:e8:65:9b:b2:4e:fc:0d:98:
                    37:ed:c1:f6:b6:d3:c2:1c:eb:dc:9e:30:a8:08:af:
                    db:7a:eb:cd:03:e8:43:a4:c7:a4:db:c1:98:9c:b6:
                    82:46:0c:db:70:f7:12:8c:0f:3e:33:c5:eb:9b:e1:
                    58:5c:6b:d2:35:3a:c4:3b:31:53:95:f4:4f:3f:28:
                    28:85:d3:e9:2d:1b:2b:a4:55:9e:dc:c1:61:64:35:
                    3b:6b:8e:19:af:18:13:91:03:75:96:ad:e5:b3:17:
                    34:31:81:21:ac:6b:78:55:9b:a8:44:88:3f:3e:36:
                    86:a4:da:55:da:a4:d1:22:0a:10:61:c9:a1:1b:bd:
                    8d:af:7a:60:6f:b9:9d:4c:b6:8e:9a:d8:d0:cf:d8:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:35:A5:06:BF:F8:61:B2:C9:AA:E3:DC:D6:89:A8:0A:87:95:6F:84
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139332e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:37:03:3b:e4:50:b8:6d:4a:86:44:38:60:1f:ce:c7:da:1c:
         fe:1e:af:71:1c:54:dc:56:b0:68:4e:35:59:56:96:dc:cc:3e:
         15:6c:fb:f7:65:e6:30:ac:02:a5:a4:9d:b5:24:ac:69:9f:5c:
         dc:96:f8:f4:99:24:3a:4b:74:11:bf:38:b1:b6:b3:4c:4f:b4:
         7e:07:01:48:a4:08:60:67:8b:49:3f:b4:a3:1c:d4:bb:5a:88:
         d3:4f:b7:6a:45:63:8a:49:65:16:55:e1:e1:7c:f4:96:4d:33:
         e1:da:38:24:87:4f:c7:b2:a5:e1:6d:2c:b4:3f:5d:b5:ac:46:
         60:ff:f2:c5:40:4a:80:fd:00:cf:ab:1c:70:bf:2f:05:07:b7:
         ce:7d:24:ed:0e:39:f6:6a:e8:58:be:2a:77:9f:aa:d8:aa:36:
         47:37:43:21:93:c8:ae:f0:4a:a3:1e:fe:d2:9d:a2:37:0c:06:
         0e:69:5c:81:5c:08:e1:6b:db:41:04:78:c7:e6:ae:bc:73:c8:
         a5:d3:da:fc:16:9d:34:8e:27:43:93:97:4a:8a:f7:2d:ae:03:
         92:72:77:82:e6:74:6d:b3:3b:e8:7d:47:c3:26:ca:86:db:04:
         fb:2b:91:1e:17:13:9c:a4:62:c0:ec:b0:48:f0:45:aa:c0:5a:
         45:e0:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:41 2025 by rpki-client