Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230362e302f32332d3332203d3e20323730333935.roa
File:                     3139302e38392e3230362e302f32332d3332203d3e20323730333935.roa (raw, json)
Hash identifier:          yQzClLOWRoU8pqINsCF8pL7fvG5l0M56J6T8V4n3f08=
Subject key identifier:   AC:C1:60:A0:A6:A5:D1:CD:B4:E8:88:B7:2F:54:AE:DA:04:CD:04:82
Certificate issuer:       /CN=C9B9ACD433C2198F1292465FB2268B319D884930
Certificate serial:       56B13D58962F3C340848F68100867BE93E44C45A
Authority key identifier: C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230362e302f32332d3332203d3e20323730333935.roa
Signing time:             Sun 21 Jul 2024 21:50:11 +0000
ROA not before:           Sun 21 Jul 2024 21:45:11 +0000
ROA not after:            Sun 20 Jul 2025 21:50:11 +0000
asID:                     270395
IP address blocks:        190.89.206.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b1:3d:58:96:2f:3c:34:08:48:f6:81:00:86:7b:e9:3e:44:c4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B9ACD433C2198F1292465FB2268B319D884930
        Validity
            Not Before: Jul 21 21:45:11 2024 GMT
            Not After : Jul 20 21:50:11 2025 GMT
        Subject: CN=ACC160A0A6A5D1CDB4E888B72F54AEDA04CD0482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1a:91:f5:85:75:a3:39:64:a5:33:45:46:40:
                    4b:aa:21:af:33:22:b2:6e:d9:12:49:fb:2e:83:57:
                    f8:fd:af:67:3b:e4:39:c7:24:73:bc:0e:fb:5d:5f:
                    e8:05:4d:29:27:9b:ed:de:cd:b3:77:84:74:af:82:
                    a6:b0:ef:14:ca:77:23:ea:90:d8:09:5b:b0:e6:3e:
                    69:a1:08:15:8e:b4:a2:ff:92:a4:bc:8a:a3:16:f9:
                    82:1a:95:97:e7:08:06:62:5b:7e:df:95:52:52:d6:
                    68:69:ce:67:6a:30:0f:63:34:83:2b:a8:cb:8d:b9:
                    0f:bd:8e:3d:fe:33:ff:aa:b3:05:b7:9f:f7:4d:78:
                    63:35:6f:0f:a1:88:6e:a4:78:73:87:8b:da:0d:22:
                    24:c0:65:91:ef:14:4f:b5:b5:11:d1:14:80:64:e0:
                    d0:fc:e6:30:fd:78:a8:2e:c2:c2:73:9c:32:1f:79:
                    d2:43:32:a9:56:f5:91:1b:a4:cc:00:83:87:0a:75:
                    35:0d:e0:70:96:6e:d1:09:7e:44:3d:23:d1:d0:69:
                    43:1c:82:8b:d8:38:37:04:dd:d7:9f:87:6f:aa:4f:
                    d8:8a:3a:d7:9c:2e:2a:fa:a5:a7:51:a5:c5:97:9d:
                    d2:3f:7f:e0:b9:7e:8c:0a:22:76:ef:75:49:bd:66:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C1:60:A0:A6:A5:D1:CD:B4:E8:88:B7:2F:54:AE:DA:04:CD:04:82
            X509v3 Authority Key Identifier:
                keyid:C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/C9B9ACD433C2198F1292465FB2268B319D884930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230362e302f32332d3332203d3e20323730333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:62:8e:7b:95:34:7a:6a:aa:f5:c0:0a:e2:4b:a9:56:b5:d7:
         41:5a:e5:64:f4:d9:c2:69:5c:c6:89:58:58:9c:59:26:90:f1:
         e9:45:19:a1:d9:fe:13:eb:8a:4a:0d:aa:43:71:39:2c:00:98:
         41:17:8d:e2:92:a8:2d:d4:21:a8:cd:ec:7d:a0:bf:25:7a:f5:
         93:2f:70:f3:48:1f:eb:a9:a4:46:13:77:1b:b8:a9:1e:74:ea:
         2d:1a:1f:e5:6a:d7:a2:35:d6:73:fb:c8:6e:ad:c9:22:51:86:
         f6:f8:c7:9a:94:4b:4b:7d:34:6d:8f:82:6a:19:3f:dc:b2:5c:
         c0:c3:5b:66:28:8f:9f:51:dc:0a:92:31:8b:56:2a:39:7d:64:
         36:ea:b2:0c:bc:2a:82:ba:86:74:07:37:10:78:64:50:c9:65:
         5c:bd:c9:4b:80:1f:47:f6:b4:35:ef:10:38:12:f2:12:1b:b0:
         91:32:c2:f1:e9:62:16:4e:a4:36:af:45:37:90:a4:ee:a8:56:
         10:37:cc:33:a2:eb:45:e1:33:21:6c:39:f6:36:28:f5:57:4f:
         25:7f:f8:e2:f2:27:51:0c:bf:dc:d4:5d:55:da:f9:e7:22:0d:
         be:04:8c:a8:13:73:c5:f6:b4:13:c8:6f:63:e2:3a:c8:a5:61:
         e7:f6:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:03 2025 by rpki-client