Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa
File:                     3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa (raw, json)
Hash identifier:          jSpgZBjAggPBh2ximpWbZW2GTFAN6PEppR6sZP5UST0=
Subject key identifier:   53:33:CF:80:09:77:D6:75:61:BA:2D:D9:FD:93:86:69:13:97:17:27
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       073F64B933153E807ECD4182D37E66385B1D5CB0
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:04 +0000
ROA not before:           Wed 20 Dec 2023 19:55:04 +0000
ROA not after:            Wed 18 Dec 2024 20:00:04 +0000
asID:                     28234
IP address blocks:        189.127.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:64:b9:33:15:3e:80:7e:cd:41:82:d3:7e:66:38:5b:1d:5c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:04 2023 GMT
            Not After : Dec 18 20:00:04 2024 GMT
        Subject: CN=5333CF800977D67561BA2DD9FD93866913971727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:f8:ab:33:4e:e5:42:4d:67:ba:93:dc:24:
                    39:98:22:14:ea:10:31:a3:74:89:d1:e1:dd:37:76:
                    70:d8:bf:24:35:95:34:06:bd:af:f5:8a:c3:78:aa:
                    6a:3a:4f:3a:61:5a:7e:d3:61:5d:55:59:5d:eb:54:
                    a8:e8:a8:9f:1f:11:0c:7b:38:d6:3a:75:ae:aa:2e:
                    86:88:34:3d:78:01:55:64:e7:b8:c1:32:e6:eb:5e:
                    b9:6e:d8:a0:0c:51:19:fd:6b:0d:23:6f:ca:2c:7c:
                    08:ab:84:b1:20:b5:62:7b:ac:ef:91:57:67:87:98:
                    ef:87:49:bd:aa:ec:dc:98:71:11:4f:1b:27:08:ca:
                    9e:2a:1b:40:53:5a:93:96:32:9b:24:68:5d:8c:d5:
                    d6:12:50:6e:48:30:71:da:a0:ed:92:66:69:35:ca:
                    bf:06:c6:ca:d1:09:4e:51:21:fe:de:7a:da:28:9e:
                    c2:63:22:04:2e:3b:81:5d:6c:c8:32:33:62:4b:5d:
                    98:37:8e:60:d3:19:bc:0b:6b:04:52:34:6e:78:bb:
                    85:2b:d6:6f:ab:1b:77:e8:58:07:0e:c4:b3:53:3e:
                    bb:96:ec:1a:b4:9f:11:4f:dd:58:61:60:6b:09:c3:
                    a6:94:96:06:30:95:70:3d:27:7d:e4:20:54:d0:c3:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:CF:80:09:77:D6:75:61:BA:2D:D9:FD:93:86:69:13:97:17:27
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32322d3232203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:b9:ee:cf:50:8e:8b:06:17:35:a6:c6:d6:b8:86:da:e4:
         ac:4f:5f:b4:5d:c0:09:ff:67:da:d5:14:96:4b:9c:17:de:b6:
         a6:6e:2b:eb:dd:f5:59:3f:29:23:e1:60:ec:21:54:c7:ea:92:
         d9:66:09:1b:48:9e:e4:92:7a:28:bb:0f:d9:1b:b2:60:e0:c1:
         79:4a:cb:49:b5:51:b9:26:9e:f5:f2:19:37:28:8b:c1:35:48:
         1c:57:aa:31:32:ba:cd:b1:ec:b2:cc:e4:03:6f:c8:35:12:1f:
         d5:d7:af:51:78:cd:e5:a7:eb:c5:94:76:b9:ad:5a:f7:cd:bb:
         64:d3:ab:0a:95:00:3f:6b:71:72:63:83:dc:31:6f:e5:91:e7:
         98:8b:58:3c:63:8d:7d:de:88:77:98:9d:5a:ed:75:16:fb:17:
         b6:73:af:ab:99:3c:f7:c2:cb:dc:b2:e8:6e:5d:c3:a2:01:e5:
         c4:16:3c:b5:27:83:f7:d1:56:e4:95:15:3b:fe:e9:fb:10:35:
         e8:f4:e4:60:2c:06:ab:34:b8:07:4c:d5:ec:b8:99:4d:49:a1:
         e4:c6:80:2a:3a:2f:17:1b:87:89:3e:b1:97:76:d1:ac:20:8f:
         b8:c9:c7:b0:c8:fd:c6:1a:3a:41:f2:0d:e6:66:3a:f5:90:6a:
         08:2f:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:25:14 2025 by rpki-client