Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137372e302f32342d3234203d3e20323638393430.roa
File:                     3138392e33392e3137372e302f32342d3234203d3e20323638393430.roa (raw, json)
Hash identifier:          R5voSzZmFTVTxSfIRslCDKo/wa0yoauy80wrfhhqcCY=
Subject key identifier:   FD:EB:26:EC:F7:96:59:5B:41:D8:52:48:5C:7A:88:07:8D:85:31:8F
Certificate issuer:       /CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Certificate serial:       6FA016BE0F61DC6691BB0B857E181243C6655D9F
Authority key identifier: D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137372e302f32342d3234203d3e20323638393430.roa
Signing time:             Wed 19 Feb 2025 13:00:02 +0000
ROA not before:           Wed 19 Feb 2025 12:55:02 +0000
ROA not after:            Wed 18 Feb 2026 13:00:02 +0000
asID:                     268940
IP address blocks:        189.39.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a0:16:be:0f:61:dc:66:91:bb:0b:85:7e:18:12:43:c6:65:5d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
        Validity
            Not Before: Feb 19 12:55:02 2025 GMT
            Not After : Feb 18 13:00:02 2026 GMT
        Subject: CN=FDEB26ECF796595B41D852485C7A88078D85318F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:30:0d:45:02:c6:ec:f6:a2:fb:88:85:05:5b:
                    34:ae:fd:b0:f4:31:a5:12:60:c3:b5:98:05:2e:4d:
                    f9:8e:8c:57:52:3f:6a:b1:16:2f:c3:7f:aa:80:ec:
                    96:0f:33:c8:6b:9c:05:15:9d:d9:2c:4f:0b:5f:d4:
                    52:b9:4c:df:6a:9d:7f:2c:3d:cc:53:d2:84:a2:b5:
                    f8:a2:f3:a2:ed:f5:0b:25:de:79:2a:49:9b:f5:9c:
                    c4:10:c0:41:8b:12:29:2b:fb:b0:d5:e5:72:0a:fd:
                    e2:bf:fe:92:25:7d:dd:04:f9:cf:00:f6:c4:a2:43:
                    6f:e8:2e:16:27:70:eb:e9:6e:33:57:16:1b:fc:16:
                    c9:2d:67:56:02:18:46:b3:c3:de:c0:2f:07:a5:15:
                    e6:33:ee:22:bb:58:a1:bc:42:63:e3:53:56:cd:41:
                    60:16:ec:fe:21:ec:c1:78:7c:e0:d3:ad:20:13:8b:
                    56:64:e8:00:7a:03:a6:ac:ab:3e:70:8f:ae:d4:05:
                    72:f9:c1:ae:dc:38:63:0f:f1:be:f3:48:f2:7e:56:
                    a1:d5:0d:0f:ce:7a:4e:b8:a6:1b:66:15:d0:99:2c:
                    67:fe:0c:0e:e1:bd:43:ed:7e:cd:a7:83:1b:40:38:
                    12:b1:c5:df:d7:b5:e2:00:b2:a5:51:50:43:3c:48:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:26:EC:F7:96:59:5B:41:D8:52:48:5C:7A:88:07:8D:85:31:8F
            X509v3 Authority Key Identifier:
                keyid:D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137372e302f32342d3234203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:18:08:2d:d9:2d:f0:79:6d:35:ae:79:bd:6d:02:2e:d2:
         cb:90:13:56:d7:46:98:6e:62:61:80:3e:63:98:4d:6c:c5:26:
         79:21:aa:c8:f8:78:87:40:27:f9:7c:b8:27:b1:31:f5:5a:ee:
         11:e0:4e:e5:a7:7d:5c:2a:c8:57:f7:57:df:a8:93:a5:5b:65:
         be:c6:5c:13:46:a0:e8:48:7b:00:77:2b:15:27:be:cf:fe:b6:
         15:1c:a5:52:d3:72:fb:bd:4a:ef:57:9f:d6:8e:a1:bc:dc:29:
         32:40:9b:2c:e8:73:e6:f9:14:fa:59:0d:50:3d:a0:ec:12:99:
         4c:04:dd:af:70:64:0c:6c:da:df:19:b3:ee:1d:fc:cf:9d:fc:
         a9:af:b4:16:b3:4c:7c:dc:d8:6c:85:d5:d5:93:95:4d:b9:60:
         3d:49:b7:62:5e:bc:eb:33:8b:c4:54:a6:cc:36:6b:66:2a:29:
         8a:3d:e9:0e:73:e9:73:9f:5f:f6:11:b2:35:c3:fc:83:4e:ea:
         6c:01:f1:4b:2d:96:b7:74:27:97:e5:85:df:48:49:a8:a0:90:
         aa:20:dc:28:91:c0:0b:e3:d9:87:67:23:a8:06:dd:b5:d1:6d:
         7e:df:50:af:b0:fa:5b:b4:e1:a2:55:4c:54:bd:41:bc:12:75:
         38:de:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:14:03 2025 by rpki-client