Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
File:                     3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (raw, json)
Hash identifier:          Rm7syIWM1ShIdFphagiJs3we2GacBnb2dMJNqOCHclE=
Subject key identifier:   5E:40:9E:14:68:A4:07:09:96:FA:1A:22:70:BF:4F:88:B3:E0:83:57
Certificate issuer:       /CN=09130D1C7615C38FDA09ACEF70984B36E81C6C91
Certificate serial:       4B7D268697DB1B4503D65C728BCF40EF96978972
Authority key identifier: 09:13:0D:1C:76:15:C3:8F:DA:09:AC:EF:70:98:4B:36:E8:1C:6C:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09130D1C7615C38FDA09ACEF70984B36E81C6C91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
Signing time:             Thu 02 Dec 2021 13:23:53 +0000
ROA not before:           Thu 02 Dec 2021 13:18:53 +0000
ROA not after:            Thu 01 Dec 2022 13:23:53 +0000
asID:                     270632
IP address blocks:        189.126.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7d:26:86:97:db:1b:45:03:d6:5c:72:8b:cf:40:ef:96:97:89:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09130D1C7615C38FDA09ACEF70984B36E81C6C91
        Validity
            Not Before: Dec  2 13:18:53 2021 GMT
            Not After : Dec  1 13:23:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:32:22:fc:53:b8:da:c6:22:80:14:85:48:
                    fe:de:a1:03:c7:fa:77:c0:29:92:6b:a1:47:00:fa:
                    b6:8f:91:5c:65:a5:65:8d:f8:98:3e:06:e6:9e:51:
                    c4:6a:c8:04:04:0a:1f:5d:28:cc:ff:72:de:a6:21:
                    ee:88:74:83:0b:b5:54:b8:50:d7:83:e8:c2:1e:d5:
                    0d:57:36:22:17:49:c4:0e:66:de:a4:61:ef:53:43:
                    6c:a2:4c:2c:3a:8c:b6:1b:ed:af:41:f4:7f:48:58:
                    80:a1:60:98:25:f2:c3:08:ea:8d:b0:7d:3b:3a:b4:
                    68:33:bf:e0:45:fd:6d:a9:0c:96:d8:3e:81:31:e4:
                    df:1d:ad:67:16:3e:93:f7:f2:24:7f:ee:8f:18:ad:
                    ca:8f:fe:65:a4:2e:70:8b:42:55:49:48:e7:f1:77:
                    a1:fd:54:35:df:60:54:22:a8:7d:83:4e:2e:5c:af:
                    49:51:b9:fd:83:8f:c3:14:fe:ae:06:b7:6d:fd:46:
                    23:9e:98:de:ed:de:fa:1a:60:19:be:8b:88:76:b1:
                    b7:65:ae:c5:da:e9:27:bf:de:2b:96:7c:ae:60:a6:
                    f5:08:7c:6e:08:21:91:5f:dd:78:11:c6:91:76:1f:
                    c3:b3:76:1a:c5:98:46:83:ed:49:26:b4:ec:97:a2:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:9E:14:68:A4:07:09:96:FA:1A:22:70:BF:4F:88:B3:E0:83:57
            X509v3 Authority Key Identifier:
                keyid:09:13:0D:1C:76:15:C3:8F:DA:09:AC:EF:70:98:4B:36:E8:1C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/09130D1C7615C38FDA09ACEF70984B36E81C6C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09130D1C7615C38FDA09ACEF70984B36E81C6C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:2c:aa:31:0c:d9:d8:7a:7e:48:f0:19:61:af:95:c1:de:ae:
         5d:f2:51:90:99:d5:83:e7:ce:ea:66:a8:33:92:c1:57:57:fe:
         b9:b9:1b:19:fd:26:a1:85:13:3e:75:02:bd:cc:fb:9a:10:07:
         3d:29:20:3e:3b:15:66:92:fe:ba:9e:b7:5e:34:4f:47:fb:b7:
         d6:ed:45:de:07:7f:e2:bb:eb:8d:10:3c:4b:7e:53:ed:a7:ce:
         6d:11:bb:40:e9:67:46:85:bc:bd:38:d7:cd:e1:44:58:d2:de:
         14:7b:40:e8:44:a1:e9:b8:92:0c:f1:cf:b1:13:8a:c4:16:cb:
         d0:01:06:a7:1d:41:46:6f:df:ea:4e:b9:41:8d:04:24:9d:d2:
         9c:b5:42:3d:72:8c:9a:64:d9:ed:1d:6b:a3:03:77:d7:05:ae:
         03:c5:83:9e:d9:29:25:cf:0b:b8:91:b9:a4:cb:1f:bf:5f:7c:
         69:c2:7e:65:f3:b7:71:b8:93:cb:a2:9a:64:f9:4d:b3:ce:4b:
         9f:b1:88:05:39:24:9c:21:3f:ea:fc:fe:87:bd:28:52:80:49:
         b5:66:11:77:87:9c:a3:2b:cc:1f:31:a8:81:58:cc:c9:50:9d:
         08:ae:29:8a:3d:9f:a6:1b:70:be:b5:b1:af:f4:ac:04:42:bc:
         d2:af:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:10:09 2025 by rpki-client