Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa
File:                     3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa (raw, json)
Hash identifier:          JctcwR+g/6DFf4ha3vkLlgta9hBNtO4HO9/P2nvL0Lo=
Subject key identifier:   75:95:4D:0A:91:E9:94:3B:9E:DE:71:C8:46:20:63:EE:8F:3C:47:CB
Certificate issuer:       /CN=5929470213BAFF684FBF82D56F8228968AA3EADA
Certificate serial:       0FCA9426F17577455012F3381AFD6885296369FD
Authority key identifier: 59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa
Signing time:             Wed 20 Dec 2023 19:00:00 +0000
ROA not before:           Wed 20 Dec 2023 18:55:00 +0000
ROA not after:            Wed 18 Dec 2024 19:00:00 +0000
asID:                     28234
IP address blocks:        189.127.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:94:26:f1:75:77:45:50:12:f3:38:1a:fd:68:85:29:63:69:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Validity
            Not Before: Dec 20 18:55:00 2023 GMT
            Not After : Dec 18 19:00:00 2024 GMT
        Subject: CN=75954D0A91E9943B9EDE71C8462063EE8F3C47CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:0d:f5:5a:4f:e0:8d:8a:fb:17:c8:27:1c:
                    b9:22:b6:0d:62:f5:df:b2:cd:8e:7b:4b:69:1f:f9:
                    eb:82:6c:48:9a:8e:fa:75:51:58:0a:fb:86:28:37:
                    68:21:13:00:2f:d4:ac:bf:a6:58:a6:64:a4:f7:a9:
                    03:45:4e:a6:11:0d:86:4f:ae:2c:f2:32:4a:06:f9:
                    f0:2b:f0:6b:b6:79:50:cf:ab:2e:ce:e0:74:6a:5a:
                    f6:4f:92:a2:30:16:16:dd:42:6a:96:c0:cd:85:69:
                    a2:8a:12:b3:ba:1a:6b:4a:a5:24:23:00:eb:70:08:
                    00:97:77:bc:38:bd:d5:5e:75:e7:52:1b:55:fb:55:
                    65:41:84:59:fd:97:cd:cd:a3:36:3a:34:10:58:5f:
                    56:e5:d1:cc:af:33:5d:01:fd:92:41:08:6b:6f:5b:
                    00:b3:45:2d:46:0e:3e:1e:2f:5a:c2:6f:99:a2:2a:
                    ff:89:56:e7:76:5e:55:fa:70:15:13:05:ed:fa:9e:
                    5a:94:8e:55:b9:f5:8a:25:51:4b:a4:64:bd:2b:9a:
                    a1:bb:37:2f:34:c8:83:7a:22:ca:aa:17:8a:73:e3:
                    46:60:84:7b:c6:32:be:dc:a3:4f:0a:91:84:cc:ef:
                    cd:d3:32:98:06:0a:8a:e2:13:7b:1b:b7:5d:a4:85:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:95:4D:0A:91:E9:94:3B:9E:DE:71:C8:46:20:63:EE:8F:3C:47:CB
            X509v3 Authority Key Identifier:
                keyid:59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/3138392e3132372e3230302e302f32342d3234203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:10:8e:d3:86:06:6f:23:31:cc:df:3d:57:52:9c:a0:6f:f0:
         04:c3:ee:f4:dd:0b:87:3e:39:6c:cb:a5:cd:2b:b3:9f:51:8b:
         70:22:f1:93:7b:f3:b2:24:95:d6:21:06:57:bf:c5:12:63:bd:
         35:c9:81:52:81:bc:5a:d3:49:6d:11:d1:98:de:8a:32:b3:f8:
         92:57:cf:54:b5:4e:11:c5:06:d3:51:9f:10:20:f5:04:20:a2:
         02:cc:f2:d2:5c:90:d8:85:e8:33:3c:1f:8d:b4:90:66:3a:db:
         a7:1c:11:3f:24:82:57:68:89:21:2e:64:b3:9a:35:9b:54:a1:
         db:6f:14:c7:89:3c:df:56:28:28:5e:de:aa:e0:cf:e8:75:69:
         cc:04:03:42:f0:f7:39:2d:43:7d:09:c7:c0:94:74:b4:2d:00:
         23:42:6b:88:64:5f:8b:52:04:bc:d8:d0:63:72:17:b7:dc:e9:
         50:44:bc:42:c1:82:b5:a8:5a:bf:ff:23:af:7a:2c:fc:44:d1:
         9f:a7:48:52:ab:8e:68:5c:1d:52:79:22:fc:d4:eb:db:24:62:
         28:22:98:41:a3:b7:d8:e2:53:7a:bb:dc:c1:0f:70:fd:9c:e0:
         9b:81:de:56:f4:be:4a:b0:3c:75:08:27:a6:47:59:29:79:c6:
         69:22:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net