Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139342e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139342e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          0BnYTmYRH++nCtACtOsvAQ05G0cU4JHhljNGsJEkpcE=
Subject key identifier:   2F:6E:C9:1A:14:C4:C1:10:C7:BB:91:4C:C3:62:BB:40:D8:66:47:88
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       0A808132C5E2A30BD56E46DBFE0A63BF32A38054
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139342e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:02 +0000
ROA not before:           Wed 20 Dec 2023 19:55:02 +0000
ROA not after:            Wed 18 Dec 2024 20:00:02 +0000
asID:                     28234
IP address blocks:        189.127.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:80:81:32:c5:e2:a3:0b:d5:6e:46:db:fe:0a:63:bf:32:a3:80:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:02 2023 GMT
            Not After : Dec 18 20:00:02 2024 GMT
        Subject: CN=2F6EC91A14C4C110C7BB914CC362BB40D8664788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:58:9b:75:54:fb:7e:f2:48:1a:c2:95:77:
                    f0:3d:c4:cf:d1:68:f6:ce:e3:d2:78:d8:f6:b7:fa:
                    07:75:fb:22:c7:6e:61:93:4d:5a:c2:3b:f7:b1:b4:
                    3b:99:ef:46:67:a8:50:8a:39:37:fa:3a:b4:bc:f1:
                    03:4c:a0:8e:67:dd:32:9c:34:5e:34:d3:3a:3a:06:
                    24:06:f5:d7:dd:f2:82:5f:e2:ad:9e:ea:fb:dc:97:
                    55:54:3b:6f:70:94:44:70:ca:a9:96:6d:a8:60:4d:
                    2b:a6:6e:63:0d:d6:ae:c1:04:59:78:c4:b7:97:cf:
                    cf:88:3c:d2:58:60:17:2e:55:5a:41:99:a5:8e:d4:
                    67:ee:e9:6a:39:19:4d:67:76:f7:c1:88:86:e0:55:
                    a4:69:97:95:61:6c:4e:1e:51:ad:bd:9a:4c:8b:73:
                    a3:6a:0f:3b:43:c9:ac:b2:31:8e:74:4b:b3:c4:38:
                    27:44:13:04:b2:a9:7b:df:b3:b2:3c:f0:19:17:b7:
                    2a:e5:86:a6:a3:5e:cf:45:1b:e6:38:56:e3:57:e8:
                    df:c0:df:2a:a4:2d:6b:52:b8:48:d6:a6:52:1c:18:
                    02:b8:ea:09:9e:e8:04:a2:8e:f2:bd:db:06:5e:91:
                    36:25:55:58:ee:2d:2b:32:38:44:b3:11:ac:68:1a:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:C9:1A:14:C4:C1:10:C7:BB:91:4C:C3:62:BB:40:D8:66:47:88
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139342e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:f4:6b:a9:38:e5:d1:61:e0:fb:69:5a:48:cb:1d:a1:29:
         ed:3a:08:7c:e8:b5:75:1b:6b:00:6c:c4:8c:06:9f:d7:e8:f4:
         f1:1a:a9:6c:2b:86:eb:b0:7e:de:65:1a:c8:fb:c1:be:0d:9d:
         38:c3:4c:fe:3b:e2:3c:1d:27:3f:d7:aa:7d:0f:22:80:ea:bd:
         82:a9:22:6b:f4:a4:fa:e2:9a:a6:51:c1:fd:7e:5b:d4:5b:1a:
         74:d5:aa:f8:b4:79:ce:d0:6f:38:30:c2:e8:33:a1:00:92:34:
         2c:e9:b3:d2:da:45:e1:a9:61:f6:b8:f2:e4:a7:46:b9:65:f7:
         43:59:fa:77:c8:c2:14:4f:45:5c:32:22:c5:06:70:c7:91:1f:
         e6:76:3c:e7:0c:ca:64:4e:9a:5f:65:54:4c:11:2b:19:81:bc:
         04:e8:33:3a:55:bd:35:17:34:bd:2c:8b:c7:a4:99:94:99:6e:
         ae:86:29:ff:03:a3:e4:d4:da:04:82:6e:da:ce:88:f9:65:54:
         1a:59:6f:3c:5c:3f:2f:58:b4:52:83:c5:9d:b7:16:41:ce:93:
         85:25:c7:65:21:6f:e1:2b:75:f2:7b:6a:58:fc:c7:87:a9:79:
         72:b3:1d:93:ea:af:46:32:da:c5:01:89:6d:67:61:f4:fd:30:
         f5:f2:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:37 2025 by rpki-client