Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230362e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230362e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          FsKgpJx/SxBvdLbUTFppry5XiC8pe/C/Mn+DGbFrlL0=
Subject key identifier:   1E:D3:C1:D5:9F:BA:63:78:FC:C7:34:AC:9C:0E:F4:98:66:18:DA:1C
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       11E9910E5E28B77FF4C241C25FD69B0F43591AC2
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230362e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 20:00:00 +0000
ROA not before:           Wed 20 Dec 2023 19:55:00 +0000
ROA not after:            Wed 18 Dec 2024 20:00:00 +0000
asID:                     28234
IP address blocks:        189.127.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e9:91:0e:5e:28:b7:7f:f4:c2:41:c2:5f:d6:9b:0f:43:59:1a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 19:55:00 2023 GMT
            Not After : Dec 18 20:00:00 2024 GMT
        Subject: CN=1ED3C1D59FBA6378FCC734AC9C0EF4986618DA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:82:ee:20:c1:8a:da:22:74:a0:6a:8c:14:
                    f5:0f:93:71:59:0f:13:bf:bf:1a:5e:b7:4a:73:1d:
                    b5:fd:0d:af:4b:0f:93:78:7a:86:d1:40:3a:a6:dc:
                    d5:41:36:01:36:a0:ab:8e:3c:33:e2:ff:bd:ea:c2:
                    ac:e8:a1:90:73:ab:8d:c1:75:e6:0e:aa:bb:dc:42:
                    fe:9f:1b:92:17:10:4f:a8:af:30:e5:1f:b0:6c:c5:
                    1a:86:a7:3f:06:7d:f5:4d:3f:0c:96:2d:8f:3b:fb:
                    42:12:bd:3c:07:4b:34:9a:a1:1a:62:7c:eb:1e:32:
                    9f:6b:d5:78:74:18:b5:bb:f8:f6:1c:3f:88:a4:da:
                    12:94:57:26:a5:25:eb:c7:3d:04:2f:ba:d0:22:8c:
                    f7:bb:19:35:7c:be:3e:41:04:dc:d9:cf:a6:65:cf:
                    0c:98:53:17:e4:15:74:10:b0:97:81:3a:57:8b:a0:
                    1a:6d:62:35:78:7b:40:55:7d:84:24:c4:f4:4b:2a:
                    f3:c2:bd:19:1c:fb:4b:8a:c5:e9:ff:17:7a:4e:fc:
                    ce:61:f7:20:9f:a5:4a:5f:24:5e:12:45:a0:44:9e:
                    16:17:32:c7:ba:ba:7e:4b:cf:f8:87:c2:e5:2e:de:
                    11:06:c4:9e:a9:56:c2:94:2b:75:09:d3:cc:28:99:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D3:C1:D5:9F:BA:63:78:FC:C7:34:AC:9C:0E:F4:98:66:18:DA:1C
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230362e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:95:73:ed:b7:fc:9a:a0:c2:cb:bc:e2:af:fc:fe:99:ee:
         1e:69:36:e9:30:d5:2f:b4:85:17:a5:a6:80:71:1d:bd:07:58:
         4d:85:e7:a4:12:51:48:a7:2d:65:73:cc:5b:3c:32:5b:df:44:
         de:71:5b:63:69:ec:81:90:63:02:53:23:d0:a0:f2:91:16:1b:
         69:ec:78:53:07:24:6f:33:eb:c8:86:b6:ac:23:24:3e:eb:12:
         37:89:ee:5f:57:f1:33:13:c8:8c:73:e9:1e:5f:29:4a:e1:ea:
         07:c4:e5:b0:1e:29:b8:2d:63:ff:a5:c9:95:2e:96:3d:e5:0e:
         47:09:43:39:3d:26:6b:8a:0f:c2:4c:f5:28:0b:2a:c2:80:1a:
         87:52:09:d9:46:05:9e:2a:8c:64:0a:83:e3:23:8e:d3:b7:f2:
         9f:13:01:14:f9:4b:90:43:1b:34:e8:37:17:53:c8:0d:df:a5:
         08:f5:ec:ff:88:6b:78:60:2a:57:b6:e2:4d:9c:32:d4:13:e7:
         2a:83:b6:20:31:fb:80:da:d5:4f:cd:5d:34:be:24:04:48:89:
         fb:df:06:43:a4:8f:9e:24:c4:29:9b:ab:4e:d7:19:f1:18:3a:
         30:30:ca:ce:c7:6d:49:7b:ce:3b:09:d1:3a:d2:bc:00:44:7f:
         41:4b:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:07 2025 by rpki-client