Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          dlL5gMGSKo1MMiaBjzJOVpGY5LbXucxuah+AyMoKGhM=
Subject key identifier:   73:72:2D:5E:80:11:FE:DC:16:F9:C7:EF:02:A5:D7:F7:AD:FE:F1:75
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       52C255663EBA6B8C4476D40CD5148472D45B7DBE
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:01 +0000
ROA not before:           Wed 20 Dec 2023 19:55:01 +0000
ROA not after:            Wed 18 Dec 2024 20:00:01 +0000
asID:                     28234
IP address blocks:        189.127.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c2:55:66:3e:ba:6b:8c:44:76:d4:0c:d5:14:84:72:d4:5b:7d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:01 2023 GMT
            Not After : Dec 18 20:00:01 2024 GMT
        Subject: CN=73722D5E8011FEDC16F9C7EF02A5D7F7ADFEF175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:de:8f:1b:47:0f:9b:b7:7e:0c:e0:8c:03:
                    5e:44:e7:f6:12:3a:55:9a:8a:73:ce:1e:20:a8:e7:
                    5d:cc:56:e4:28:e9:6a:f1:dd:b3:8d:e9:6f:83:25:
                    85:6d:40:fc:e7:12:45:24:a1:d7:e7:82:15:ba:db:
                    6e:99:75:9b:2d:fd:3d:ab:4d:99:34:12:95:5b:e6:
                    df:22:14:40:7c:8c:63:56:b9:c2:17:fe:62:d7:29:
                    8d:85:f6:46:42:58:ce:10:62:23:b7:11:b7:9a:50:
                    4d:db:7b:c6:32:61:70:3c:6e:0a:2c:52:19:68:24:
                    41:bf:66:e6:75:b7:3a:c9:ac:1f:ad:f7:81:f9:eb:
                    38:13:6e:ad:70:ea:64:38:80:7b:a7:a9:21:e9:a7:
                    f4:a9:53:8e:ef:0b:5c:1d:f8:dc:95:05:7f:e1:59:
                    a0:e7:8d:08:a3:08:95:6c:36:a8:41:62:65:62:70:
                    02:d6:eb:40:8f:13:e3:9e:a8:b8:a5:09:a8:95:78:
                    e5:83:0f:8c:3e:e0:39:08:0d:17:77:1c:2b:88:99:
                    f1:ee:b4:ff:56:0c:ad:b4:41:65:ea:ca:4a:04:a5:
                    01:4e:6a:31:8d:b5:b0:f9:e2:a9:ed:bb:af:e1:68:
                    60:47:bb:99:f6:c0:cd:7c:16:65:13:f7:9c:0f:d7:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:2D:5E:80:11:FE:DC:16:F9:C7:EF:02:A5:D7:F7:AD:FE:F1:75
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139372e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:4a:c0:69:56:f8:d8:f3:81:d5:7e:6d:21:03:ed:8f:4f:49:
         94:79:71:00:76:bd:eb:2c:44:d2:62:dd:20:f0:54:a9:3a:37:
         69:3d:c4:93:f8:9e:f9:6a:8b:c3:c5:60:ad:f4:fd:0f:e2:06:
         4a:59:a6:81:78:df:82:8d:60:54:32:5f:55:8c:c4:c8:0d:90:
         28:63:80:0a:78:a5:d0:4d:80:e7:cb:11:18:cb:5f:72:1d:5e:
         a6:ac:68:d7:b8:5c:eb:3d:19:2b:58:dc:6a:9f:95:0d:87:10:
         8b:46:c7:eb:ef:44:da:d4:d2:a2:b2:2a:f7:f3:6e:53:7c:36:
         c4:42:a7:c5:9f:25:be:d2:07:cd:b7:d9:6a:b1:27:f1:c9:ee:
         68:3e:fa:07:fd:50:fe:3a:ce:76:15:5f:31:c1:76:3d:b3:13:
         44:f2:b8:6b:94:5d:f9:c4:0c:6f:b7:6b:82:19:df:35:90:4b:
         f3:28:77:db:f8:31:0c:32:b3:88:e0:8c:8e:3e:06:47:d6:17:
         e1:6a:d7:9d:ec:db:71:38:a6:8d:3c:d0:1b:22:53:a3:e4:e9:
         9d:0b:b9:ec:89:1d:02:97:f1:8d:2b:19:cb:c3:ef:98:3e:50:
         77:87:99:de:d1:d1:8c:61:34:1b:41:57:2b:fc:5d:a0:55:5f:
         27:5b:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:48 2025 by rpki-client