Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
File:                     3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa (raw, json)
Hash identifier:          UVe2MbFzhIa0JwU6/xTO7mKu3ajIxqXkDhVNlRKR1Qk=
Subject key identifier:   14:1F:EF:39:53:F4:ED:23:72:A8:CA:39:46:54:8E:FD:F7:ED:F4:B3
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       0643E24B29D372A754DCDA4253769B684350F43D
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:03 +0000
ROA not before:           Wed 20 Dec 2023 19:55:03 +0000
ROA not after:            Wed 18 Dec 2024 20:00:03 +0000
asID:                     28234
IP address blocks:        189.127.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:e2:4b:29:d3:72:a7:54:dc:da:42:53:76:9b:68:43:50:f4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:03 2023 GMT
            Not After : Dec 18 20:00:03 2024 GMT
        Subject: CN=141FEF3953F4ED2372A8CA3946548EFDF7EDF4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:1c:4f:eb:a3:56:33:10:c8:4f:46:8b:9e:
                    72:55:1a:cc:d4:39:61:2f:d7:ff:56:a9:79:df:71:
                    8a:04:b4:89:6d:a9:6e:46:06:df:13:40:c9:43:1b:
                    22:28:9e:1e:e9:ac:9e:2e:49:35:dd:21:0a:b7:28:
                    26:92:7c:dd:bd:5b:25:90:2f:57:12:06:4d:a2:37:
                    e3:33:99:c0:6b:4e:31:b9:dc:d7:45:97:20:ae:e3:
                    d7:7f:ca:e2:74:49:ae:67:73:58:9f:92:f9:0a:22:
                    5f:37:a3:96:13:3c:86:c0:79:aa:e2:3e:c7:16:05:
                    04:c9:fb:b9:88:eb:a6:5d:39:9a:11:41:99:d9:c9:
                    bd:f7:72:67:41:f4:44:0e:25:9f:ec:51:77:96:df:
                    d5:61:f2:e6:a0:94:42:c7:14:57:e0:eb:8f:bd:f6:
                    c1:ac:1a:cf:3d:2c:9a:e5:dd:ae:2b:9f:de:2b:96:
                    93:c4:8f:bd:ff:70:3b:d1:c5:57:3c:78:98:67:ba:
                    87:df:17:8e:4b:bf:fa:23:a3:8a:9e:55:df:c6:05:
                    2e:d6:f4:e6:4b:52:82:2a:93:46:c6:be:7c:a7:af:
                    e1:db:09:ce:30:e1:5a:34:37:e3:8f:81:83:7c:86:
                    22:b5:59:fd:d2:bd:19:55:2f:37:5e:1f:54:b0:c8:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1F:EF:39:53:F4:ED:23:72:A8:CA:39:46:54:8E:FD:F7:ED:F4:B3
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230322e302f32332d3233203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:46:d4:81:c2:07:d6:70:20:bf:1a:54:d9:27:7e:d9:1a:
         4c:53:d4:89:6e:82:df:47:08:8c:f9:4b:e8:9c:eb:86:ac:39:
         5b:0d:34:6a:ee:25:88:8f:39:ad:47:37:f5:81:1b:ba:91:c1:
         d2:62:0c:18:34:a3:11:05:cb:1c:31:de:04:90:4f:ef:68:da:
         e2:e6:97:f6:1e:4e:89:38:f3:91:00:aa:5a:37:17:31:fe:29:
         c0:0f:84:50:f2:6b:ab:d5:c7:31:a0:dc:2d:5a:d0:7e:b2:bb:
         69:56:36:79:d2:e0:49:02:04:63:23:37:39:9e:e9:64:84:3c:
         5f:d8:13:c7:21:32:d8:ec:17:37:5d:3c:7a:26:bb:24:22:74:
         10:60:53:7e:da:03:47:68:78:1e:51:14:5d:15:fd:52:ed:70:
         b4:09:1a:c5:e7:fd:2a:2a:fc:24:95:92:02:74:b7:eb:5e:d9:
         2f:b1:60:b4:4b:9d:a9:da:d8:cc:f1:1a:e9:eb:f5:2b:62:3c:
         5b:10:4e:36:ca:b4:9d:c2:4d:50:94:6e:cd:e4:4b:09:2d:a0:
         45:e2:8f:9e:8f:ad:ca:c1:9d:3d:82:57:09:75:47:50:c0:c2:
         cb:86:51:91:2f:6c:a4:74:2f:dc:6a:7c:ed:e1:c0:c6:b8:f7:
         18:57:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:58 2025 by rpki-client