Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32332d3233203d3e20323731333030.roa
File:                     3138392e39312e3137322e302f32332d3233203d3e20323731333030.roa (raw, json)
Hash identifier:          Tj0GysocRlUNpUywqRsYs76LQK2pJwOFbJjRG4v7DCA=
Subject key identifier:   DB:06:71:F0:E4:BE:B6:82:0C:17:51:37:74:15:4E:A1:20:A6:43:40
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       778261713FBDA7EB510C499EE51891BCEAFE5F35
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32332d3233203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:49 +0000
ROA not before:           Wed 09 Nov 2022 20:07:49 +0000
ROA not after:            Wed 08 Nov 2023 20:12:49 +0000
asID:                     271300
IP address blocks:        189.91.172.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:61:71:3f:bd:a7:eb:51:0c:49:9e:e5:18:91:bc:ea:fe:5f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:49 2022 GMT
            Not After : Nov  8 20:12:49 2023 GMT
        Subject: CN=DB0671F0E4BEB6820C17513774154EA120A64340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:c3:85:1b:99:19:e6:d6:4e:52:9f:85:1c:
                    0d:77:6f:a4:c5:6f:23:1f:17:32:27:21:3c:cf:54:
                    d0:a1:66:03:b0:9c:46:cb:a8:97:01:57:fc:a1:00:
                    98:c0:86:5c:3c:7c:0c:af:01:ed:1d:30:b6:3a:64:
                    4b:59:7a:3f:ab:df:4b:1e:ee:f8:82:0b:ca:e9:53:
                    92:0f:01:36:64:de:01:b9:f6:94:23:34:b8:09:4a:
                    73:46:62:30:66:95:27:30:7e:1d:8c:18:d8:c3:c3:
                    b1:a2:a4:80:2b:b0:02:ec:5b:79:13:44:d0:75:2f:
                    1c:01:12:e1:a6:9d:73:da:13:a0:a9:46:9e:8c:7f:
                    55:0f:6d:cc:2f:83:e8:6a:3c:4c:ac:ec:44:4f:5f:
                    e6:af:14:bb:5c:20:c9:c4:91:b4:07:99:22:17:e9:
                    fb:ea:01:8d:64:77:dd:b7:bc:12:1f:54:a5:fc:03:
                    31:16:f4:21:72:31:bf:a7:38:ae:16:42:f3:b4:5c:
                    0a:07:f0:94:01:0f:b3:62:cc:66:fc:8f:c7:59:2c:
                    2d:82:a0:6a:d0:da:ad:63:33:65:28:32:e3:4c:db:
                    a2:2a:7a:9d:3a:89:7b:38:20:43:e8:40:ac:b8:af:
                    3d:d2:8e:e3:4b:9e:4d:db:e2:55:d2:a9:02:8d:98:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:06:71:F0:E4:BE:B6:82:0C:17:51:37:74:15:4E:A1:20:A6:43:40
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137322e302f32332d3233203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:3a:64:3b:9f:3c:7a:78:6c:4b:e7:3a:7f:66:21:d5:e8:
         d4:9c:d3:12:07:66:bc:2b:b5:50:60:e0:ff:a9:f6:d5:18:eb:
         13:72:cc:08:fa:40:61:4e:26:be:eb:56:ea:d9:11:ef:b3:99:
         e8:92:26:31:1d:49:4b:a7:3a:3c:4a:dd:65:b2:48:10:d3:16:
         81:f4:be:5e:3e:67:f0:79:59:6c:58:37:d5:ed:40:22:ba:61:
         dc:ec:f9:c9:54:68:7d:96:1e:b5:e9:c3:99:34:ff:85:5f:89:
         a5:a7:18:a7:46:67:06:7d:c6:25:2b:b3:55:4e:44:43:0d:61:
         2c:de:52:c0:d4:08:25:eb:bb:9c:3c:8d:c2:1c:27:08:52:13:
         3f:fc:56:b6:c8:c0:b0:6e:dd:60:a3:b1:44:42:ef:f6:e4:32:
         b7:a7:52:e5:2d:33:a9:88:66:d6:b6:93:0e:9b:bb:ab:13:54:
         64:79:be:95:8a:2a:9e:23:41:c8:07:5d:cc:e5:53:96:96:06:
         cc:38:4e:4a:99:59:c0:2e:b8:94:c7:3b:66:0e:75:62:87:4c:
         12:ee:d2:94:a1:71:97:8a:8e:07:37:a7:f3:84:af:e6:c4:1f:
         30:13:e6:21:c4:ea:c7:af:57:39:64:3c:a9:d2:80:b4:35:74:
         a9:ff:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:31 2025 by rpki-client