Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          nvYZSV86zkbJamYtaHJrrKE3jt1x9F6FHo31larFYoU=
Subject key identifier:   61:D1:FF:B5:2E:93:70:4E:A7:63:6A:38:C7:59:7D:87:49:A7:67:B4
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       232D7EC7B4DA8FE8A78C7418F06EA27EC263E94C
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:03 +0000
ROA not before:           Wed 20 Dec 2023 19:55:03 +0000
ROA not after:            Wed 18 Dec 2024 20:00:03 +0000
asID:                     28234
IP address blocks:        189.127.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:7e:c7:b4:da:8f:e8:a7:8c:74:18:f0:6e:a2:7e:c2:63:e9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:03 2023 GMT
            Not After : Dec 18 20:00:03 2024 GMT
        Subject: CN=61D1FFB52E93704EA7636A38C7597D8749A767B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:4c:f5:fd:d8:b0:1b:b8:16:2d:d5:2a:9e:
                    39:71:24:47:d7:57:6a:32:ee:8c:5c:1e:ac:9e:40:
                    88:24:90:0e:e0:25:e4:ab:6c:fc:cc:4d:ee:7b:80:
                    41:b8:92:9b:75:dc:2a:ec:d8:5d:59:cb:b7:50:33:
                    d6:6f:46:ca:ab:de:85:ed:87:13:b7:4b:e4:9e:9c:
                    b4:d7:72:60:c6:93:f5:75:8f:84:6d:a7:cc:18:45:
                    f6:af:d3:d6:f9:97:16:63:b3:ca:d2:ed:13:a1:69:
                    bc:1b:bb:76:c1:4f:38:52:64:df:20:71:de:7e:9a:
                    85:6e:79:82:f9:6b:d5:35:2c:14:98:00:74:74:13:
                    6a:86:bd:3f:0d:0e:54:8f:fa:b0:86:66:1e:79:31:
                    fc:1c:43:eb:e9:a3:47:fd:1a:f9:2e:4d:29:d6:6d:
                    a9:0e:cb:5c:13:37:3e:53:98:32:7e:9c:21:e6:24:
                    b0:3d:c5:51:ce:fe:32:95:69:ed:60:6e:37:5c:9a:
                    39:17:4a:f0:20:34:fd:55:9a:5a:7e:31:b7:f9:ed:
                    df:9f:1b:93:4d:95:5b:76:5c:6e:6a:ba:29:0f:02:
                    3b:23:f1:25:46:2d:ab:85:29:75:1a:db:33:d7:1a:
                    6d:9f:19:91:40:cf:90:d4:ad:4f:f7:45:cc:f0:7e:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D1:FF:B5:2E:93:70:4E:A7:63:6A:38:C7:59:7D:87:49:A7:67:B4
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230332e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c9:e9:fe:9b:24:ea:e1:90:1b:c0:88:72:6a:e4:6b:38:87:
         1e:2c:50:29:be:6c:68:04:e7:ec:44:bb:82:29:eb:4d:32:9d:
         97:fe:04:51:c7:65:f4:83:eb:19:36:96:2a:43:4b:a0:ec:29:
         69:2a:cc:a0:3a:f9:d9:04:47:a5:45:fd:db:11:8e:c3:3b:49:
         91:f0:95:08:03:24:b0:b6:c4:fe:16:d5:00:7a:f3:80:94:b5:
         97:9f:7a:7f:ed:76:54:0a:80:ab:b9:d3:dc:79:d9:0c:51:84:
         dc:69:c7:23:ee:86:e6:d5:92:f2:8b:9a:b1:e0:46:d8:83:cf:
         b6:67:05:38:68:cf:1d:8d:a9:33:12:fa:44:10:d0:54:1b:38:
         c2:f0:6d:0c:e4:4c:75:85:fe:47:95:c0:cc:10:d8:df:58:d8:
         8d:b5:22:04:f2:ae:2b:bb:2f:60:c5:b8:d1:9d:cf:62:0a:88:
         c5:c9:05:06:71:a8:5b:a2:7c:8a:3f:03:9f:87:64:cb:59:d7:
         42:89:a1:1a:d5:73:df:83:3a:d8:04:4a:c3:e6:3f:e0:2a:ad:
         1f:dc:e8:1d:b3:31:5b:0c:16:50:e3:62:27:62:80:12:58:67:
         29:6b:3a:87:59:bb:64:3e:8c:ef:e8:b9:72:04:29:ee:e1:67:
         00:1e:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:12 2025 by rpki-client