Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          An0gEoKf2cbrTiBm9LueX+86CFxgQWto3h4L40DBfUg=
Subject key identifier:   CC:1E:72:20:FE:14:E9:3E:C9:98:C8:AB:E8:F3:F1:2F:5E:4B:06:4B
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       5FF26B76C31781C97306A835CAB9A9CDCDCC3D8E
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:00 +0000
ROA not before:           Wed 20 Dec 2023 19:55:00 +0000
ROA not after:            Wed 18 Dec 2024 20:00:00 +0000
asID:                     28234
IP address blocks:        189.127.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f2:6b:76:c3:17:81:c9:73:06:a8:35:ca:b9:a9:cd:cd:cc:3d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:00 2023 GMT
            Not After : Dec 18 20:00:00 2024 GMT
        Subject: CN=CC1E7220FE14E93EC998C8ABE8F3F12F5E4B064B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:c3:c1:a0:4e:0a:98:81:c0:c1:43:d4:7c:
                    fa:d5:f1:eb:6c:2d:a7:17:99:00:be:06:06:28:61:
                    28:ca:31:45:d2:ed:75:89:57:4f:fb:79:fb:ce:c3:
                    0a:6e:72:3f:37:74:58:e2:25:bf:ca:08:41:4b:57:
                    0b:f9:06:f8:5f:dd:a9:ed:ba:40:16:d3:1e:1e:75:
                    d3:90:30:b0:1f:dc:b1:58:30:31:f2:55:7b:16:6f:
                    f2:58:8e:04:00:f1:d3:16:c8:ba:4d:d0:5a:11:0d:
                    b1:64:9f:be:ab:74:06:ec:30:70:f5:0c:d5:3c:53:
                    f3:37:08:f8:c0:02:85:7e:01:c1:62:0a:2f:85:b2:
                    52:77:35:93:c3:c0:0c:f1:83:09:72:bc:e1:78:37:
                    41:56:17:b6:3e:37:8f:c1:16:ff:7f:97:76:6b:12:
                    ab:8b:04:73:71:fe:2b:a4:b3:85:67:62:5c:35:a3:
                    f7:7f:9b:18:69:31:e4:7b:25:1e:9a:4c:7f:d5:71:
                    98:ad:91:91:00:32:12:1f:f1:7a:01:67:63:01:0c:
                    8a:ff:8d:0d:0c:cb:f8:64:6b:42:60:1c:cb:ff:5d:
                    63:bc:ad:b1:09:a2:90:37:d8:6b:92:a3:7a:eb:8d:
                    9d:10:09:15:f6:73:05:19:9b:43:b3:c9:ec:fc:0d:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1E:72:20:FE:14:E9:3E:C9:98:C8:AB:E8:F3:F1:2F:5E:4B:06:4B
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230352e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:7c:0c:37:a2:08:0c:ff:17:21:bd:cf:e5:19:c7:43:6c:
         0d:8e:9c:74:da:1e:6c:21:0c:81:3e:6e:51:b8:3e:c5:5a:30:
         75:4c:b4:cc:71:2a:17:6a:75:c4:1d:00:fe:91:fa:66:e2:1c:
         c8:c5:d0:11:d3:ec:83:88:fb:54:24:96:5d:de:c7:8b:db:17:
         1d:0f:b7:1d:87:40:22:98:be:7b:ef:28:67:c5:6e:fd:b9:cb:
         3e:68:49:a1:db:d0:5e:4c:dd:21:99:ec:a2:89:77:98:9e:93:
         78:3c:a6:35:1c:6c:69:26:64:1a:a5:0b:93:45:ab:ee:45:69:
         b7:c4:1b:c6:3e:98:4c:e8:0c:b3:38:67:3c:c7:2d:41:e5:e5:
         94:8f:63:d7:92:a4:7f:16:d8:ea:d4:d4:81:87:b4:9e:e8:4d:
         b0:9a:fb:47:32:45:8a:5d:91:a1:84:ae:b3:d8:13:a9:87:c3:
         0b:61:24:bc:f3:15:0b:6a:dd:14:6d:f9:04:28:b3:84:6d:3c:
         5d:34:63:b8:de:00:a0:86:69:45:e8:8f:cc:42:d5:d0:43:21:
         1f:60:e8:7e:96:28:3d:60:0d:02:87:29:15:13:79:a5:38:56:
         c6:ec:aa:01:59:b2:1a:df:8b:8c:06:e7:86:1d:d4:bf:ef:a5:
         33:af:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:03 2025 by rpki-client