Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32322d3232203d3e20323638393430.roa
File:                     3138392e33392e3137362e302f32322d3232203d3e20323638393430.roa (raw, json)
Hash identifier:          EJX/8c3fUUJWsXnIjG5/4hHCXVe8UZ/+JALA2E/v8eQ=
Subject key identifier:   95:E5:C3:13:9F:56:70:DA:D6:7D:96:B5:DF:43:7B:60:62:47:C3:71
Certificate issuer:       /CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Certificate serial:       6D7EE6E1AAEF9C98E6DC243F739FC62C01EA1948
Authority key identifier: D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32322d3232203d3e20323638393430.roa
Signing time:             Wed 19 Feb 2025 12:59:51 +0000
ROA not before:           Wed 19 Feb 2025 12:54:51 +0000
ROA not after:            Wed 18 Feb 2026 12:59:51 +0000
asID:                     268940
IP address blocks:        189.39.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7e:e6:e1:aa:ef:9c:98:e6:dc:24:3f:73:9f:c6:2c:01:ea:19:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
        Validity
            Not Before: Feb 19 12:54:51 2025 GMT
            Not After : Feb 18 12:59:51 2026 GMT
        Subject: CN=95E5C3139F5670DAD67D96B5DF437B606247C371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:4a:a4:4e:1f:20:29:14:67:61:62:7d:89:
                    32:e3:3e:5f:61:0d:00:6d:b2:05:d3:af:85:99:0d:
                    ef:26:82:44:19:c4:ca:74:08:40:d3:e2:0b:06:2b:
                    90:0f:7a:7f:56:63:e7:3b:d9:15:fa:f1:0c:60:71:
                    91:d5:a1:a1:e7:79:11:32:d5:c1:55:b6:03:3b:cd:
                    3b:78:64:29:49:86:7b:96:82:85:3b:3f:d2:dd:bd:
                    91:ab:9c:80:a1:7c:17:bd:fb:21:d2:94:2c:e3:70:
                    16:03:8e:9e:32:7b:c1:ea:7c:1a:88:78:5c:16:59:
                    ca:49:19:1b:5d:f7:c6:92:b9:e7:5c:72:75:09:1f:
                    73:7e:4b:7a:f0:04:7b:f1:3d:d1:34:5d:2c:e8:09:
                    84:8d:c7:d2:19:a0:ca:eb:01:34:86:4e:6c:cc:d8:
                    3c:0e:e0:f8:88:3d:7d:de:13:0a:68:3f:b7:ff:25:
                    7d:97:7d:6e:a6:ec:47:8d:2e:53:33:cb:ee:ac:d0:
                    3c:10:1c:06:3a:73:3b:53:fa:ae:17:92:26:0a:f2:
                    94:2a:51:85:42:4a:32:fc:f7:f4:6a:b2:fd:f6:0a:
                    0d:db:c2:e4:21:70:fa:4b:a7:ae:39:4d:6e:1c:96:
                    5b:cb:27:88:21:1b:94:2f:bd:27:77:86:04:5a:01:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:C3:13:9F:56:70:DA:D6:7D:96:B5:DF:43:7B:60:62:47:C3:71
            X509v3 Authority Key Identifier:
                keyid:D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32322d3232203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:df:23:aa:75:77:69:33:a6:fd:e6:0b:95:2d:91:98:d1:cc:
         fa:9a:01:3b:ee:5b:16:4e:5c:6b:6d:b9:1d:28:67:23:97:94:
         25:82:fb:8a:da:69:31:d7:ec:67:c8:b9:6a:d4:67:0b:12:d3:
         19:d9:c6:ba:ca:92:a3:bb:5a:61:97:1c:9e:3b:44:fb:44:08:
         71:a0:70:af:89:b3:e8:1a:3b:1b:8a:66:ee:0d:f6:c3:d4:0c:
         06:79:de:7f:c9:f4:05:15:ad:db:66:22:19:30:e1:20:52:f3:
         d4:d9:4e:cc:9e:b1:54:63:f3:74:69:67:b2:3a:fc:cf:cf:03:
         66:c2:94:9c:da:41:e8:4c:6a:58:22:01:f9:e2:58:19:60:3f:
         fa:32:de:9e:1a:e3:13:e5:4a:98:c1:cc:ff:5b:06:60:a6:1b:
         56:c6:c9:5a:c4:cb:30:72:6f:7b:89:a6:95:fa:21:18:33:93:
         e5:7e:b6:10:6c:c8:cc:d8:51:34:75:b3:53:b9:91:c5:84:47:
         39:89:2f:5c:96:c0:b9:7f:71:33:00:7b:9e:ef:17:dc:14:c0:
         e9:19:cd:42:54:7a:9b:d0:01:21:d1:cd:ca:a8:c8:4d:d0:a4:
         0c:5b:78:3d:6a:44:71:f7:c8:9e:89:be:59:26:b0:b4:17:a7:
         ec:47:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:44 2025 by rpki-client