Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32342d3234203d3e20323638393430.roa
File:                     3138392e33392e3137362e302f32342d3234203d3e20323638393430.roa (raw, json)
Hash identifier:          bL3y2UjtM+p31qrKOPbfeLvYqjIhG9UK1BGAPlMznrE=
Subject key identifier:   FA:B0:35:53:CD:C3:2A:3F:7B:2B:F6:D7:0D:5C:87:8E:CB:BC:D4:B4
Certificate issuer:       /CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Certificate serial:       33E58E1855B0DDDF133F9F7DB4D34C4544819E7B
Authority key identifier: D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32342d3234203d3e20323638393430.roa
Signing time:             Wed 19 Feb 2025 13:00:00 +0000
ROA not before:           Wed 19 Feb 2025 12:55:00 +0000
ROA not after:            Wed 18 Feb 2026 13:00:00 +0000
asID:                     268940
IP address blocks:        189.39.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e5:8e:18:55:b0:dd:df:13:3f:9f:7d:b4:d3:4c:45:44:81:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
        Validity
            Not Before: Feb 19 12:55:00 2025 GMT
            Not After : Feb 18 13:00:00 2026 GMT
        Subject: CN=FAB03553CDC32A3F7B2BF6D70D5C878ECBBCD4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:de:09:f3:33:7a:1d:17:de:d8:74:5a:58:
                    7e:ab:aa:fb:e9:04:d2:eb:9a:df:35:03:53:fc:d3:
                    02:2f:0e:32:14:0c:51:6d:e5:ae:e1:ad:c6:68:c2:
                    e0:a8:45:2a:33:cf:2c:d9:3d:60:c4:57:ba:18:11:
                    13:cf:60:e0:0e:57:4f:65:4d:ac:a4:0b:46:95:12:
                    52:a3:c0:4b:83:9f:2f:2d:82:3a:f0:62:19:72:8a:
                    3c:a0:39:95:df:46:92:48:91:13:91:69:69:3f:8b:
                    5a:c0:30:e0:be:34:d2:96:94:51:e5:cb:fb:ce:a3:
                    4b:0b:de:51:03:2a:f9:d2:3e:5c:21:cd:0f:0b:e1:
                    0b:24:a3:bf:f4:51:83:87:30:54:d0:3d:68:42:89:
                    63:83:84:1f:3d:99:18:f2:74:73:9b:c1:9d:e2:40:
                    a6:cb:db:68:9d:32:5c:bc:a8:a0:d5:97:68:a5:e8:
                    1b:54:6d:ec:9a:ec:0d:fe:e9:79:e1:05:15:2c:42:
                    8b:b5:c8:8e:de:5c:5b:96:f2:84:8a:1f:40:a7:c3:
                    76:fc:59:df:67:30:ac:3d:75:60:34:14:c8:ce:d6:
                    c7:2d:3f:9e:2d:d3:c4:ff:98:47:4d:4d:c1:55:c1:
                    8f:b8:17:d1:e3:6a:f4:df:b7:6f:cb:3e:1e:51:1c:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:35:53:CD:C3:2A:3F:7B:2B:F6:D7:0D:5C:87:8E:CB:BC:D4:B4
            X509v3 Authority Key Identifier:
                keyid:D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137362e302f32342d3234203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:97:ca:2a:03:6d:bc:e7:95:37:11:ea:0e:0e:20:5c:89:e5:
         da:a4:ac:37:8b:3c:ee:ab:8f:32:58:13:9b:c6:d1:58:13:38:
         c7:c2:e0:78:bb:6a:65:ee:5d:96:df:8f:ff:8e:94:86:e1:95:
         d2:46:4c:1e:d0:47:ab:4a:38:65:ca:a0:23:40:f3:8a:f7:49:
         a7:21:17:72:73:91:ba:d7:d9:db:bf:cf:a7:9e:24:cf:f6:bb:
         16:dd:61:61:06:99:5e:ff:19:9b:d9:1a:7b:d0:9a:44:16:ec:
         1c:c5:b2:4a:67:6f:2e:cf:96:c9:89:f7:2d:27:45:78:0b:55:
         02:c2:e7:b6:1e:1a:0f:9e:28:7b:fc:45:11:e6:45:b9:2e:52:
         ad:6c:80:df:51:f6:ba:97:88:30:f9:a6:22:ff:c5:6e:1c:69:
         86:99:4c:f8:61:d0:a8:25:95:f4:96:f9:55:91:6c:91:77:6b:
         ef:cf:92:82:c3:8b:11:b0:21:c6:cc:ad:18:6f:e8:54:c2:6b:
         cd:18:09:20:e5:5b:0b:06:02:b5:b4:c2:d7:36:e7:ba:d0:26:
         99:06:d5:7a:51:09:ab:e3:c8:b8:0f:af:76:85:18:49:5e:ba:
         f5:f0:41:03:02:1b:dc:94:7f:06:c0:f0:41:eb:ac:77:2f:7b:
         bd:7e:b9:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM+WOGFWw3d8TP599tNNMRUSBnnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwMjE1NzNCOEZERENCMTUyM0MwMDZGQTgwMEE3QkFD
NUJBNDI0MDAeFw0yNTAyMTkxMjU1MDBaFw0yNjAyMTgxMzAwMDBaMDMxMTAvBgNV
BAMTKEZBQjAzNTUzQ0RDMzJBM0Y3QjJCRjZENzBENUM4NzhFQ0JCQ0Q0QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClut4J8zN6HRfe2HRaWH6rqvvp
BNLrmt81A1P80wIvDjIUDFFt5a7hrcZowuCoRSozzyzZPWDEV7oYERPPYOAOV09l
TaykC0aVElKjwEuDny8tgjrwYhlyijygOZXfRpJIkRORaWk/i1rAMOC+NNKWlFHl
y/vOo0sL3lEDKvnSPlwhzQ8L4Qsko7/0UYOHMFTQPWhCiWODhB89mRjydHObwZ3i
QKbL22idMly8qKDVl2il6BtUbeya7A3+6XnhBRUsQou1yI7eXFuW8oSKH0Cnw3b8
Wd9nMKw9dWA0FMjO1sctP54t08T/mEdNTcFVwY+4F9HjavTft2/LPh5RHPUVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+rA1U83DKj97K/bXDVyHjsu81LQwHwYDVR0j
BBgwFoAU2AIVc7j93LFSPABvqACnusW6QkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFBKOTZ3YlJMZ3ZyRXh1UjFMYVM1ZTNOVEFyR0dNRXF0MUVQUFBFd2tX
TUIvMC9EODAyMTU3M0I4RkREQ0IxNTIzQzAwNkZBODAwQTdCQUM1QkE0MjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MDIxNTczQjhGRERDQjE1
MjNDMDA2RkE4MDBBN0JBQzVCQTQyNDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hQSjk2d2JSTGd2ckV4dVIxTGFTNWUzTlRBckdHTUVxdDFFUFBQRXdrV01CLzAv
MzEzODM5MmUzMzM5MmUzMTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzOTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9J7AwDQYJKoZIhvcNAQELBQADggEBAKyXyioD
bbznlTcR6g4OIFyJ5dqkrDeLPO6rjzJYE5vG0VgTOMfC4Hi7amXuXZbfj/+OlIbh
ldJGTB7QR6tKOGXKoCNA84r3SachF3JzkbrX2du/z6eeJM/2uxbdYWEGmV7/GZvZ
GnvQmkQW7BzFskpnby7PlsmJ9y0nRXgLVQLC57YeGg+eKHv8RRHmRbkuUq1sgN9R
9rqXiDD5piL/xW4caYaZTPhh0KgllfSW+VWRbJF3a+/PkoLDixGwIcbMrRhv6FTC
a80YCSDlWwsGArW0wtc257rQJpkG1XpRCavjyLgPr3aFGEleuvXwQQMCG9yUfwbA
8EHrrHcve71+uSQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:43:43 2025 by rpki-client