Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          7bvU7SKIuJicaF0JYHL/dHQ/0RhpJ1YQ93oEYvDJ4+s=
Subject key identifier:   20:99:A4:80:3F:D8:D5:17:EF:D9:9C:16:76:3B:52:48:FF:26:7F:D6
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       78F0417673C9C9EF91B0838C8CDFD5503E55FAEA
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:01 +0000
ROA not before:           Wed 20 Dec 2023 19:55:01 +0000
ROA not after:            Wed 18 Dec 2024 20:00:01 +0000
asID:                     28234
IP address blocks:        189.127.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:41:76:73:c9:c9:ef:91:b0:83:8c:8c:df:d5:50:3e:55:fa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:01 2023 GMT
            Not After : Dec 18 20:00:01 2024 GMT
        Subject: CN=2099A4803FD8D517EFD99C16763B5248FF267FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:d3:a0:d1:97:95:79:b9:6b:ee:3d:d0:24:
                    4d:14:9f:d1:6c:45:e7:d1:09:bc:fc:f3:f4:cf:03:
                    7b:eb:36:a9:26:da:c8:c9:52:db:98:f0:ee:ab:e5:
                    a0:1c:45:3c:9f:20:1e:da:10:34:9f:5f:f9:4e:07:
                    9d:99:32:01:24:96:35:df:07:e3:98:ca:de:15:1d:
                    a9:fc:e1:21:8c:fa:a8:95:1d:76:87:f8:54:60:8c:
                    51:17:f8:95:75:76:db:29:ab:d9:ed:78:d7:cb:89:
                    f5:42:b2:41:a5:52:73:9e:2d:13:cb:cf:d8:5a:1d:
                    2a:d0:67:a1:c2:57:4f:e3:43:3e:0c:ba:52:0c:d2:
                    f3:19:9b:d9:5f:da:49:70:38:86:7d:30:57:44:fa:
                    b7:c0:69:fe:f4:ce:2c:f2:0e:61:c8:1c:0d:82:5f:
                    b5:8b:f7:35:c4:d5:61:39:41:0b:26:23:f0:62:d6:
                    0e:ee:5d:67:51:e0:a0:8d:6e:4f:02:7f:96:18:15:
                    7e:da:f7:39:e5:eb:95:f0:af:e4:26:a7:37:be:f0:
                    61:75:07:0a:01:d1:75:81:52:b3:3c:f5:3b:2c:7a:
                    9c:25:23:c9:70:82:bb:38:e2:f7:21:34:65:ca:f7:
                    68:55:7b:e7:cf:f9:67:86:f4:04:d1:7a:a8:9f:a2:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:99:A4:80:3F:D8:D5:17:EF:D9:9C:16:76:3B:52:48:FF:26:7F:D6
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3139382e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:b0:64:43:cf:49:4c:50:a4:46:4b:80:6e:98:f6:2d:ce:
         1b:db:88:5e:65:6d:f1:e5:dc:ab:6f:d2:0e:e3:6d:0d:e5:59:
         b7:3d:25:c5:26:e1:22:b4:e0:ee:1e:83:ef:3a:a1:fb:69:0b:
         a8:43:52:49:85:1e:10:73:77:41:eb:cc:5f:64:3f:ea:9b:59:
         90:d5:f9:fb:f0:a6:37:73:3d:37:7d:b8:19:f6:6b:2c:3a:83:
         1e:26:a4:8c:d4:b0:4c:d1:75:74:32:19:e1:cb:4d:50:89:0f:
         08:ef:93:d1:b8:7a:48:84:d7:30:db:aa:85:0e:67:4e:98:ce:
         e0:81:5a:a3:ee:90:9b:38:a2:ed:d2:63:a2:93:44:1c:17:5b:
         5d:89:13:c1:55:83:a5:5a:1a:6b:48:2a:ec:4a:63:bd:68:f2:
         3f:b3:cc:e8:57:4c:6f:a2:bc:99:d7:2a:03:da:30:00:6d:04:
         98:b3:83:68:cb:2a:ab:b4:bf:1b:41:c0:86:8c:67:09:c9:49:
         1f:05:f2:ea:ba:34:1f:85:f7:3f:e7:cd:24:7a:59:6b:d4:a9:
         79:6a:f8:8d:f7:15:a0:88:f5:fb:24:3a:3f:34:c4:63:78:43:
         82:2c:7f:29:0e:e2:fa:86:2f:61:04:ac:24:e8:89:5d:74:40:
         85:dc:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:23 2025 by rpki-client