Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137332e302f32342d3234203d3e20323731333030.roa
File:                     3138392e39312e3137332e302f32342d3234203d3e20323731333030.roa (raw, json)
Hash identifier:          s61k/ictc8eihl2jPKQbV6mXEfauhvbvUJ2EFqbveSE=
Subject key identifier:   70:60:90:87:14:DE:AE:8D:B3:79:DD:5F:1F:4D:DB:73:07:F2:D0:F9
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       7B15936FB7A65FBBD238091357527346B392C7C5
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137332e302f32342d3234203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:49 +0000
ROA not before:           Wed 09 Nov 2022 20:07:49 +0000
ROA not after:            Wed 08 Nov 2023 20:12:49 +0000
asID:                     271300
IP address blocks:        189.91.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:93:6f:b7:a6:5f:bb:d2:38:09:13:57:52:73:46:b3:92:c7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:49 2022 GMT
            Not After : Nov  8 20:12:49 2023 GMT
        Subject: CN=7060908714DEAE8DB379DD5F1F4DDB7307F2D0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:8c:ab:15:96:8c:47:ad:98:48:0e:4b:84:
                    e1:da:94:ad:d6:71:90:3b:1f:01:48:f5:72:db:51:
                    eb:19:21:bc:3f:35:eb:cf:a6:f1:64:d2:96:13:ed:
                    d4:b0:f2:07:c2:5c:7f:d2:43:9b:a6:65:c5:b9:56:
                    f5:9c:96:0f:06:1a:88:32:1b:9d:c8:85:da:0c:03:
                    a4:c1:73:73:0a:41:91:ef:2d:3d:88:9d:ff:e4:49:
                    07:62:a2:8a:cb:90:6b:5a:5b:97:03:f0:96:10:fa:
                    df:8e:16:af:7c:32:8c:f8:2f:35:e1:96:7d:c6:ce:
                    16:82:85:17:6c:1f:51:d2:43:fb:52:ea:b8:2c:5f:
                    fd:40:e1:27:89:f9:e6:d0:22:4d:c2:db:f4:c7:83:
                    c5:40:ae:ad:a7:28:e8:df:18:08:83:7c:e7:51:e5:
                    9f:04:bd:22:11:77:56:83:c9:44:7a:05:19:67:c1:
                    3a:f0:83:a6:37:4d:10:f0:46:74:2d:33:54:c6:2d:
                    62:69:10:ee:90:5b:05:d1:9f:7a:68:61:a5:f1:6a:
                    6d:b1:70:c7:28:21:c9:38:ac:70:c7:59:b4:34:ee:
                    23:9c:8b:6b:c5:99:1a:25:cc:09:c4:b3:6d:9f:dd:
                    2c:d1:13:b9:48:fc:1e:46:3b:99:ba:ed:47:31:05:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:90:87:14:DE:AE:8D:B3:79:DD:5F:1F:4D:DB:73:07:F2:D0:F9
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/3138392e39312e3137332e302f32342d3234203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:b1:81:9b:65:3a:32:d6:07:a2:f1:ac:e6:50:c9:e2:fd:
         bd:a4:2e:c0:e3:78:82:a4:a1:06:ec:db:b7:cc:7e:91:1d:3e:
         bb:4d:02:e8:4f:77:2d:e1:ff:ae:34:b2:f6:cc:6e:bb:0f:9b:
         5c:a8:9d:8e:de:51:ea:fe:3b:c6:50:6b:e2:d4:ff:bf:cb:bd:
         1d:9d:ee:ba:99:2c:42:ab:98:bd:3a:50:31:72:50:3f:ee:07:
         36:83:9a:78:3c:ce:eb:62:23:90:9b:df:2d:8a:4a:8c:47:61:
         c7:1b:4e:d7:af:f7:56:20:92:34:df:39:d8:01:72:41:da:07:
         a3:6d:ce:f3:a5:68:72:ad:5f:62:88:7f:84:32:a8:16:7f:46:
         52:63:5a:16:61:fc:c8:ff:90:df:e3:ff:89:f2:b8:2e:64:be:
         a9:dd:11:2c:78:d0:16:f0:a8:dc:4b:3d:a3:62:ea:15:21:4f:
         39:5e:69:14:ff:1c:e8:79:48:c1:67:48:fc:7a:27:4b:80:34:
         f1:d5:8d:23:1b:81:f6:d2:b5:3e:36:af:8e:c4:89:75:fe:a6:
         10:40:ef:4d:da:45:ee:a9:b4:f9:cb:c7:89:0c:58:61:16:98:
         d5:92:37:3c:c5:47:c9:38:9c:7b:b5:e2:15:fe:3d:ad:90:98:
         46:d7:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:32 2025 by rpki-client