Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230342e302f32342d3332203d3e20323730333935.roa
File:                     3139302e38392e3230342e302f32342d3332203d3e20323730333935.roa (raw, json)
Hash identifier:          URATzMVkfvEh3u45WfG3Bzx0uD5BtyZ8fyk54IrNCeg=
Subject key identifier:   94:F3:D4:D1:69:79:D6:C5:D8:D4:99:01:A4:FA:32:6A:62:18:F7:2E
Certificate issuer:       /CN=C9B9ACD433C2198F1292465FB2268B319D884930
Certificate serial:       71CB16ECBCAD721D3DEE13CACB41B0968EFD9E9F
Authority key identifier: C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230342e302f32342d3332203d3e20323730333935.roa
Signing time:             Sun 21 Jul 2024 21:50:30 +0000
ROA not before:           Sun 21 Jul 2024 21:45:30 +0000
ROA not after:            Sun 20 Jul 2025 21:50:30 +0000
asID:                     270395
IP address blocks:        190.89.204.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cb:16:ec:bc:ad:72:1d:3d:ee:13:ca:cb:41:b0:96:8e:fd:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B9ACD433C2198F1292465FB2268B319D884930
        Validity
            Not Before: Jul 21 21:45:30 2024 GMT
            Not After : Jul 20 21:50:30 2025 GMT
        Subject: CN=94F3D4D16979D6C5D8D49901A4FA326A6218F72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:83:2f:cd:3f:de:4f:b5:35:4f:24:91:c5:
                    7c:20:f2:5f:94:e5:2c:e4:b8:28:4a:56:ca:bb:d3:
                    b5:04:f3:5b:a6:e4:e8:b6:63:49:1a:d2:24:ae:25:
                    40:19:57:50:63:56:fe:d1:0b:12:9b:36:a2:8e:83:
                    01:4e:af:e0:2c:b5:b9:2e:84:19:5e:ad:ee:d2:cd:
                    be:0e:79:46:ac:e2:37:42:2b:5d:91:56:7a:bc:b2:
                    6f:47:c9:14:3f:a1:8d:88:30:2b:3f:53:a3:bf:88:
                    31:06:22:5f:ee:1c:a0:0b:20:d7:ee:fc:02:88:65:
                    f7:7b:c6:0a:ee:5a:ae:e5:ed:1c:e7:c9:bd:4f:35:
                    12:d6:15:a3:5c:32:cf:34:3a:b7:a7:0d:5b:10:78:
                    3f:18:ff:f6:ba:8a:eb:91:52:ac:7f:f0:89:ec:3c:
                    fa:23:24:58:41:56:0c:c2:5f:57:f9:d3:71:28:e8:
                    af:0d:c9:4f:e0:f4:8e:3d:2f:9c:0c:17:e9:87:f6:
                    65:61:1f:25:73:54:a8:60:8a:ad:55:90:31:c2:fd:
                    89:df:02:0f:e2:39:1c:63:b8:54:27:cf:39:ac:25:
                    a3:35:ae:3b:cc:53:1b:5c:37:7a:cb:02:fa:dd:45:
                    14:85:c4:da:92:e4:e1:ca:be:81:d1:d4:a9:f2:68:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:D4:D1:69:79:D6:C5:D8:D4:99:01:A4:FA:32:6A:62:18:F7:2E
            X509v3 Authority Key Identifier:
                keyid:C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/C9B9ACD433C2198F1292465FB2268B319D884930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230342e302f32342d3332203d3e20323730333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:d1:5f:e4:ea:da:d5:af:da:fb:c0:c8:32:8c:67:62:ef:
         7f:60:65:33:90:8b:4a:72:49:b4:08:92:a7:b4:39:b1:5e:6f:
         b4:c3:09:11:38:05:c2:7d:6f:54:b9:dd:c3:ee:6c:1e:95:a6:
         55:5a:e1:3a:de:55:c1:6c:b4:ec:03:54:f3:ee:11:36:15:f0:
         44:33:f2:b4:05:97:88:b5:d5:95:3c:87:a1:a2:f4:23:d9:5e:
         1f:e0:a4:66:19:ab:64:30:3b:e8:4a:4f:ac:0a:74:bb:c9:53:
         ad:c9:f9:85:90:26:b2:6d:95:c3:a6:25:1e:da:0a:e1:24:ca:
         06:20:b3:a4:65:86:fd:3a:26:d2:35:9d:fe:78:ff:1b:4e:fd:
         df:26:17:45:fa:ce:f6:24:fd:5a:14:62:47:ef:23:20:c5:33:
         a5:de:18:75:28:b1:5b:b4:ce:c4:29:c2:c4:ad:20:2d:e7:b4:
         44:75:e4:01:59:7c:58:71:23:bb:f8:02:29:a4:46:ef:63:b2:
         8c:01:a7:54:72:fd:c2:1f:03:26:4f:a7:90:7f:d5:7d:f5:85:
         bc:a0:f3:04:ef:3b:53:38:a7:44:d9:b1:02:ac:c1:eb:e9:c3:
         3e:f9:80:b1:ea:c0:0f:5a:53:18:35:d9:bd:68:0c:4d:c3:c5:
         81:e4:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:51:22 2025 by rpki-client