Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          vR4znOCuq1n4pU1QBqDBpfw/McD5UoOdTvoUxSrIAWw=
Subject key identifier:   E5:CF:3F:96:F5:FD:8F:7A:CA:CE:DB:8F:33:34:6D:C1:D3:F1:52:D7
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       5015BE6096A3183D99162F6C5CBA73CB05BB8A66
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 19:00:01 +0000
ROA not before:           Wed 20 Dec 2023 18:55:01 +0000
ROA not after:            Wed 18 Dec 2024 19:00:01 +0000
asID:                     28234
IP address blocks:        189.127.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:15:be:60:96:a3:18:3d:99:16:2f:6c:5c:ba:73:cb:05:bb:8a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 18:55:01 2023 GMT
            Not After : Dec 18 19:00:01 2024 GMT
        Subject: CN=E5CF3F96F5FD8F7ACACEDB8F33346DC1D3F152D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:4f:ba:b7:37:be:c9:d1:31:ca:c3:91:26:
                    a6:4b:7e:04:c6:4e:b6:b7:d3:83:00:54:83:0a:df:
                    bc:a0:59:86:b2:45:54:5d:8f:96:34:c3:15:35:e4:
                    b6:f6:1a:88:1c:7d:7e:2e:3d:55:92:9f:5c:b3:25:
                    33:49:57:8c:0e:8b:2a:74:7e:d6:ea:b3:8c:46:28:
                    ff:09:16:58:8f:5f:ca:6f:24:3e:52:71:55:9d:c8:
                    fe:dd:03:92:d7:8b:4f:1b:c8:83:4e:f2:67:ad:38:
                    89:da:07:62:83:75:0f:c3:6d:95:34:a6:e0:1c:58:
                    af:99:5a:46:b2:43:f5:4d:ff:13:37:d4:e5:dd:c2:
                    17:a1:1d:62:68:de:38:78:ff:c6:79:d8:ee:e8:8d:
                    de:16:89:74:fb:d4:d3:ae:ec:c9:77:d9:d8:13:cc:
                    ec:d1:3a:ed:fc:68:8d:0e:ef:98:57:52:ed:88:13:
                    63:72:28:0d:a6:fd:2b:11:21:d2:54:5b:43:0d:68:
                    81:62:3b:18:6e:e5:ca:7d:d7:0b:57:bf:37:51:d3:
                    5f:7b:da:6b:01:6d:f7:1c:11:1e:c9:9c:2f:0d:30:
                    13:6a:f6:9a:a1:90:e9:ce:79:4e:5d:fb:8c:9b:19:
                    37:45:26:61:25:51:d7:dd:eb:16:f8:8b:32:15:31:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:3F:96:F5:FD:8F:7A:CA:CE:DB:8F:33:34:6D:C1:D3:F1:52:D7
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139382e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:c3:93:fa:59:2b:58:c8:46:c6:04:88:3a:77:3c:9c:1c:
         1e:65:ea:fd:2e:7e:86:c5:5a:41:57:46:6b:98:3b:0e:9e:b0:
         87:51:a3:94:18:58:79:aa:6b:42:03:a9:14:4f:78:cd:78:62:
         68:b0:ae:a8:e2:5a:2c:63:1c:3f:1e:05:f4:3b:22:06:5d:19:
         ed:c3:5b:c5:25:ad:10:12:ca:88:8f:21:18:05:0b:1b:ab:a1:
         a9:19:4f:26:67:0c:61:c3:af:3d:06:62:02:80:b1:39:32:93:
         d4:35:51:bd:60:92:d8:cb:b3:9d:44:f9:e1:76:db:c1:91:7c:
         04:97:74:67:7a:a9:b1:4f:41:26:b9:69:39:f2:67:42:60:3b:
         32:bb:da:3b:18:05:79:01:fb:99:e8:23:92:e9:11:cd:53:4c:
         0c:eb:fe:27:b7:bc:2e:d7:45:ac:ff:e6:74:0f:80:bc:68:b1:
         84:8a:9c:8e:b1:2e:51:74:9a:e5:49:4f:0f:d6:56:40:fc:85:
         d7:b0:67:ce:a7:40:b5:14:1d:0b:d7:92:b2:ca:ae:8b:d8:94:
         64:ab:89:79:77:75:1d:05:d3:f6:bb:0f:c4:14:bf:69:79:a1:
         7f:0b:c6:be:62:bb:3c:f9:9b:a6:a2:2e:3b:87:ea:6d:c1:c9:
         69:8b:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:26:45 2025 by rpki-client