Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3230203d3e203238323737.roa
File:                     3138392e31342e38302e302f32302d3230203d3e203238323737.roa (raw, json)
Hash identifier:          zR98so2q42KScSCfcaJlf4Jgz/861u7Cwd1SGI6khpM=
Subject key identifier:   FF:4C:6E:38:4D:21:94:BF:E0:8A:0B:E0:52:9B:CA:8D:47:0A:5E:48
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       45A788C78A0C9A590EF298FBBFD4A59B15665A6D
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3230203d3e203238323737.roa
Signing time:             Fri 02 Sep 2022 14:00:00 +0000
ROA not before:           Fri 02 Sep 2022 13:55:00 +0000
ROA not after:            Sat 02 Sep 2023 14:00:00 +0000
asID:                     28277
IP address blocks:        189.14.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:88:c7:8a:0c:9a:59:0e:f2:98:fb:bf:d4:a5:9b:15:66:5a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Sep  2 13:55:00 2022 GMT
            Not After : Sep  2 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:ba:85:6a:c5:68:d3:42:c6:e7:e5:97:06:
                    fb:22:2d:f9:6d:45:57:dc:63:aa:1a:e4:7b:0a:96:
                    3a:c4:f8:25:cb:aa:cd:3e:08:03:83:e9:cd:04:c0:
                    fb:c9:4d:14:f6:06:90:1c:90:af:f8:40:6c:fb:a2:
                    65:2e:61:96:fc:a4:3d:3b:0a:7c:8e:65:5a:19:31:
                    9b:5c:31:6a:af:32:31:ee:3e:6b:b0:bf:11:cf:69:
                    87:b3:91:15:20:70:7c:fd:41:e3:bf:5d:1b:94:d7:
                    04:b5:ed:46:c1:82:93:44:69:2c:f4:a5:b9:4c:bc:
                    44:9b:19:bc:b0:d6:48:f4:1f:31:08:2c:09:d0:09:
                    1d:9d:1e:b7:60:8a:2e:0f:33:e9:9e:ca:da:42:42:
                    ef:79:b9:5b:4d:c1:d8:f3:b7:7c:0d:50:0c:81:9c:
                    3a:98:52:f3:26:ea:5d:90:41:b7:a7:e7:34:38:05:
                    c4:d5:e6:68:47:0b:2b:d5:95:3e:bc:27:bb:6d:4c:
                    b1:9a:94:6c:67:26:85:67:d5:3f:2e:ee:f8:a9:d0:
                    d8:95:ce:70:02:09:d5:b4:cb:0e:f3:5b:60:82:45:
                    b0:2b:3d:c9:2b:38:1d:d5:f2:38:f8:8e:b7:26:66:
                    b9:38:51:d0:c9:d5:9d:8f:a8:9b:41:41:98:60:24:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:6E:38:4D:21:94:BF:E0:8A:0B:E0:52:9B:CA:8D:47:0A:5E:48
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3230203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:04:f3:14:a6:46:35:1c:94:e8:65:93:56:8d:1f:fe:a2:70:
         ee:d6:93:87:d9:76:7d:b5:dd:0a:b9:63:39:04:ff:2a:49:73:
         98:47:7e:91:87:15:6c:e1:c7:91:23:45:b9:1d:f8:14:1e:2d:
         4e:52:c0:a3:b2:db:ee:e7:89:0e:be:a9:9e:68:2c:e1:d7:0c:
         7f:c5:51:12:c7:9f:67:99:8b:e5:bd:44:e1:98:20:53:f7:cb:
         5e:bb:01:20:a8:9c:78:41:62:8f:c9:40:aa:24:db:c9:8f:74:
         0c:b1:2c:70:3c:ef:eb:34:68:c2:b9:6e:a9:c4:0f:44:11:2d:
         95:3e:0f:7f:ff:fd:7d:18:ad:3d:2d:ee:04:73:27:79:68:af:
         6e:31:42:90:22:60:ec:52:27:ff:6f:f9:a0:d6:80:08:90:6c:
         c3:a0:a8:87:32:51:57:46:b2:30:10:d2:a1:e2:fe:79:11:72:
         c4:23:6f:4a:cc:bb:f0:79:4f:c6:cd:f5:74:5c:bc:b6:8d:d7:
         b1:58:de:29:ea:1f:34:77:58:2b:10:e1:24:8e:6d:51:75:5d:
         c7:58:5f:b9:b2:56:40:24:c5:e4:1b:b4:1f:79:14:cf:2f:bf:
         fa:e4:06:24:f9:0f:9a:54:d4:3f:65:74:8b:29:32:71:19:72:
         79:4d:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:15:33 2025 by rpki-client