Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          1GRUhgosHzwW2RzzCPdJVXLXs4PdDGo0IeTqZe06OkQ=
Subject key identifier:   73:AA:AF:FF:AE:34:44:78:9F:A0:B0:70:35:2A:BD:35:8F:C5:5B:40
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       3E807F3E91BB5BC29ECC9CFDFA70FDD4832E0A3E
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 19:00:00 +0000
ROA not before:           Wed 20 Dec 2023 18:55:00 +0000
ROA not after:            Wed 18 Dec 2024 19:00:00 +0000
asID:                     28234
IP address blocks:        189.127.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:80:7f:3e:91:bb:5b:c2:9e:cc:9c:fd:fa:70:fd:d4:83:2e:0a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 18:55:00 2023 GMT
            Not After : Dec 18 19:00:00 2024 GMT
        Subject: CN=73AAAFFFAE3444789FA0B070352ABD358FC55B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:ef:f0:1c:c4:75:b3:20:d6:d3:b9:83:92:
                    2c:4b:b7:21:7c:2e:25:2a:63:07:b2:95:8c:c2:93:
                    2b:d8:a4:cd:14:07:58:a1:37:51:aa:f7:dc:2f:f9:
                    45:1d:a4:47:e9:7a:82:2f:91:b4:15:2c:3a:e6:45:
                    59:bf:fc:05:48:16:07:0b:12:d6:5d:a7:cc:c8:e6:
                    53:4c:5d:23:ab:d9:b2:8b:58:ab:39:90:a4:b5:5a:
                    f0:dc:01:26:8c:07:d9:fd:b6:cb:2f:21:7a:a3:49:
                    a3:8c:9e:0e:a5:ee:50:1e:6b:15:d0:67:53:16:13:
                    10:52:4f:47:a9:53:56:96:5d:ce:37:15:bb:b5:19:
                    4c:8e:6f:de:94:d2:31:df:e2:e7:d7:45:d8:0d:bb:
                    f5:9d:92:c7:9f:fa:c4:99:64:c4:30:07:09:9a:1e:
                    15:f4:9c:6e:d6:e3:57:69:a3:e5:c7:3f:77:61:09:
                    1f:15:77:05:e8:1e:f6:bf:8f:72:3b:45:97:0f:ab:
                    36:7c:26:da:00:04:1b:f6:b0:ec:40:f2:a0:18:87:
                    75:88:27:6a:2f:cc:86:e9:37:63:d6:8f:fa:77:0d:
                    c5:11:47:65:63:15:60:64:0d:66:a0:41:de:07:ba:
                    12:69:88:bf:7a:a6:04:86:79:33:7c:84:4b:e4:19:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AA:AF:FF:AE:34:44:78:9F:A0:B0:70:35:2A:BD:35:8F:C5:5B:40
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230372e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:ef:d0:b5:e7:04:9a:3e:87:41:d4:a6:9c:e8:b7:aa:10:
         64:44:45:fe:2e:9b:b4:0f:bb:85:9d:40:a6:5c:3f:44:34:bb:
         45:1d:ff:9e:7e:b7:fc:da:a3:a0:ab:e4:74:85:d6:41:77:43:
         fa:e9:98:49:27:f8:d5:61:9c:5e:56:cb:38:b4:52:c8:c8:5c:
         1f:ec:22:1a:50:81:49:0a:b8:23:f1:5c:4d:aa:cd:fc:2a:77:
         91:27:db:09:b6:c3:b5:19:4a:cb:9c:93:c5:94:dc:0b:84:2e:
         ec:95:6b:5a:49:b9:92:58:ea:8c:00:27:13:6a:4d:f2:c6:c6:
         40:e5:b0:da:9f:c8:cf:87:f5:4d:4c:43:3f:82:89:0f:8c:83:
         58:7f:fe:94:34:b4:8d:c5:03:15:e6:89:3a:b1:ed:14:3f:01:
         3c:73:bf:5f:0c:e1:a6:b2:85:76:c7:c5:69:da:f6:52:45:ba:
         cd:81:a1:45:3c:5b:0e:dc:b0:ff:c3:61:fa:11:0f:0d:75:f0:
         18:27:84:24:e8:76:de:84:c4:82:06:ea:a4:ea:ac:8a:17:07:
         12:ac:96:78:3b:d8:8d:fa:be:77:c3:42:de:28:08:35:bb:61:
         e7:af:8e:8c:b6:0b:a1:91:d2:25:38:9e:95:36:1a:90:10:b5:
         66:e7:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:15 2025 by rpki-client