Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137382e302f32342d3234203d3e20323638393430.roa
File:                     3138392e33392e3137382e302f32342d3234203d3e20323638393430.roa (raw, json)
Hash identifier:          bqTp3w29ZLfC8L2hHT3P87pvA0oWQXBA7bajKg3tAdQ=
Subject key identifier:   C2:11:AC:C2:48:F1:B4:5D:F3:64:AA:7E:E0:23:0D:C4:AA:FA:1E:96
Certificate issuer:       /CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Certificate serial:       18FCBA49AD5A0FAEEBE77E6B9B0F445749C9E84D
Authority key identifier: D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137382e302f32342d3234203d3e20323638393430.roa
Signing time:             Wed 19 Feb 2025 13:00:07 +0000
ROA not before:           Wed 19 Feb 2025 12:55:07 +0000
ROA not after:            Wed 18 Feb 2026 13:00:07 +0000
asID:                     268940
IP address blocks:        189.39.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fc:ba:49:ad:5a:0f:ae:eb:e7:7e:6b:9b:0f:44:57:49:c9:e8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
        Validity
            Not Before: Feb 19 12:55:07 2025 GMT
            Not After : Feb 18 13:00:07 2026 GMT
        Subject: CN=C211ACC248F1B45DF364AA7EE0230DC4AAFA1E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:60:ed:40:10:4c:0f:cf:7a:ce:f1:d6:30:
                    1b:8f:02:3c:12:13:f2:1b:0b:7b:98:39:51:ca:b8:
                    9f:1f:93:42:60:ed:f0:dd:d6:c9:c4:ab:a8:c0:ce:
                    e0:d7:fc:99:77:a9:f9:cb:a5:0c:bc:f1:fb:70:0d:
                    21:10:c1:86:7f:ff:e0:40:96:6c:56:b3:06:31:e4:
                    93:8e:55:c9:9c:4c:38:2e:0a:5e:66:22:d2:68:84:
                    e9:53:8a:2a:bf:72:20:8d:51:8e:25:ad:47:59:d3:
                    86:b2:9c:bf:b1:6b:d4:b6:d2:5b:b8:9d:c1:cc:49:
                    50:8c:a2:d3:93:a2:12:d9:63:32:2d:74:2b:a7:66:
                    55:0d:50:47:1d:8e:4e:9b:8a:b3:6e:11:94:96:f3:
                    3f:9a:d0:2a:43:43:c7:37:f1:48:a2:c7:9c:ed:77:
                    36:81:f3:57:0e:57:28:bd:13:ee:1d:91:bc:ad:59:
                    a2:8a:3c:6c:a0:c4:77:98:6e:a6:fe:19:54:0d:38:
                    9a:b7:23:88:4b:f9:1b:3e:06:c2:8d:c2:ee:92:fe:
                    28:97:6b:47:21:36:be:4c:f5:8f:a9:65:9f:7a:72:
                    1c:90:c3:86:ae:52:28:07:d8:97:6b:9a:13:a8:5c:
                    d6:b1:0e:e2:90:06:d8:d1:85:f4:2e:5a:7e:0b:6e:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:AC:C2:48:F1:B4:5D:F3:64:AA:7E:E0:23:0D:C4:AA:FA:1E:96
            X509v3 Authority Key Identifier:
                keyid:D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/3138392e33392e3137382e302f32342d3234203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:25:ce:2d:a1:fa:76:c4:0a:55:68:c2:5d:97:74:54:dd:
         db:f9:43:86:2c:74:93:09:ce:7a:92:ec:e7:05:73:a5:98:6c:
         2b:9e:da:fe:f5:0a:ca:7d:63:6f:fc:5a:74:8a:50:b3:e4:8e:
         b7:f4:38:23:1c:13:49:62:2a:77:94:41:e8:c7:49:9a:c8:85:
         22:24:45:91:b4:28:0d:5f:7b:71:49:05:77:29:5f:b5:66:3e:
         fc:fb:35:86:49:99:24:71:5b:ee:d9:d2:9e:c2:4b:d0:e7:2b:
         ab:74:50:1c:58:fa:4d:48:34:1a:6f:aa:f3:11:bd:9d:a3:61:
         21:af:96:e0:67:f6:2f:28:1a:5c:ac:8f:13:d3:80:8c:b2:55:
         25:32:8b:9b:6d:ca:1b:e7:fa:37:4a:c2:8e:f8:a2:78:28:a2:
         92:be:1e:09:5b:c2:8a:2e:e6:57:24:59:fe:16:10:6c:f0:16:
         24:56:df:09:c3:79:2e:7c:7f:a9:0d:0c:6b:8f:3e:ac:60:bc:
         b3:67:2c:02:5a:0d:04:5c:23:60:dc:24:7a:86:ac:47:8b:d0:
         53:f5:42:a6:02:42:96:85:f0:88:ab:8e:b6:66:b4:ae:7d:0a:
         e7:b4:74:80:75:57:fd:2c:5b:00:0c:bb:dc:87:3e:5f:08:32:
         e3:dd:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:53 2025 by rpki-client