Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa
File:                     3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa (raw, json)
Hash identifier:          6u0rw8544Sv7VrWTxpm8MiqnibmdXa8dJC11wUDgDSM=
Subject key identifier:   01:8B:08:C3:1E:D5:F2:E8:02:20:83:27:AB:2E:3D:C0:80:3B:0C:DE
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       666F7F9C1E079D89924B0CA10A6481BBC9912A15
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:55 +0000
ROA not before:           Tue 24 Sep 2024 21:39:55 +0000
ROA not after:            Tue 23 Sep 2025 21:44:55 +0000
asID:                     270716
IP address blocks:        189.127.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6f:7f:9c:1e:07:9d:89:92:4b:0c:a1:0a:64:81:bb:c9:91:2a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:55 2024 GMT
            Not After : Sep 23 21:44:55 2025 GMT
        Subject: CN=018B08C31ED5F2E802208327AB2E3DC0803B0CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:c0:a1:1b:36:93:89:51:d0:36:df:03:6d:
                    9a:ad:5e:a5:6f:59:14:64:fb:a9:92:8f:f2:ba:35:
                    c2:34:43:a5:4f:a0:2a:4a:d7:8e:6e:a3:78:4e:92:
                    36:dc:3c:a5:b6:c2:49:f7:e8:61:bf:b2:c3:cd:53:
                    6f:93:c2:7f:68:69:7d:84:de:de:c6:0c:79:e7:b1:
                    7b:87:a4:3a:fe:2a:4e:95:df:26:4b:ed:89:f0:39:
                    84:29:40:64:30:46:b4:d6:ec:46:54:12:aa:07:f5:
                    f1:65:66:10:87:be:ec:82:70:8a:a5:15:50:10:8e:
                    d8:c2:3a:31:c0:f9:4f:38:f6:81:11:3e:b2:28:97:
                    e2:4c:9a:34:08:e2:fc:6b:1d:72:30:c3:c1:95:1f:
                    b2:c4:dd:dc:11:3d:1b:5b:b6:0d:c3:c3:ab:40:eb:
                    7b:c5:38:95:4e:c5:6b:cc:f0:76:a3:82:84:33:a2:
                    c5:c3:fd:d3:82:27:97:7a:94:ac:be:01:f2:5c:cd:
                    45:f8:06:ce:1e:0b:a3:6e:75:af:f4:5b:d5:e5:7f:
                    49:69:e8:97:25:f6:dd:0e:f3:fb:ab:2d:1d:62:64:
                    30:4e:f3:a8:f3:a7:94:32:f8:b9:15:97:89:6d:c2:
                    00:92:06:ad:28:71:1e:72:f2:0e:ea:3a:53:3e:b2:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:08:C3:1E:D5:F2:E8:02:20:83:27:AB:2E:3D:C0:80:3B:0C:DE
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/3138392e3132372e3138382e302f32322d3232203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:59:d5:a8:c2:ca:4e:d9:b8:53:5e:ff:a6:1e:f0:b6:03:eb:
         18:ba:93:e8:b7:94:78:f8:86:fc:30:ec:4e:5c:aa:07:46:44:
         20:ce:2e:3d:27:c1:28:9c:90:3f:94:97:d6:ba:a0:04:53:ae:
         c1:ae:7f:25:98:30:ee:3f:86:ac:ad:85:e6:5a:07:9e:83:48:
         cb:43:f9:92:4f:ea:f7:fe:ed:df:59:85:14:5b:b9:ae:02:0f:
         82:cd:43:55:0a:80:98:78:d2:47:d6:56:29:35:c8:7f:a8:9a:
         19:e7:e2:6f:3c:a8:b1:27:a0:05:29:9c:4d:2b:35:b0:76:e3:
         ae:01:6b:b7:4c:74:ce:44:0e:fa:01:a6:bf:1a:1f:3e:76:1f:
         8d:61:bd:51:b1:63:a6:46:70:81:2f:b0:7d:e2:b1:89:7c:e9:
         8f:e2:8f:0a:f6:d3:36:6e:bc:dd:04:b3:ba:85:23:af:5f:b3:
         e6:dd:d5:42:df:ce:e3:63:76:0d:45:1b:f2:79:e4:f3:8f:65:
         27:25:e4:55:98:a5:4c:75:0d:8a:a4:e5:a6:de:8a:0f:46:cf:
         ff:14:7d:fb:65:5c:70:87:ec:e6:e8:d5:58:94:27:8b:3e:90:
         c2:6a:4e:8c:3a:dd:bc:36:9e:d9:2a:54:4a:13:96:1b:14:36:
         1c:d6:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:12 2025 by rpki-client