Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230362e302f32342d3332203d3e20323730333935.roa
File:                     3139302e38392e3230362e302f32342d3332203d3e20323730333935.roa (raw, json)
Hash identifier:          6BsPD3XyldcN4K8qQLp9OV9mW96qoQYgLG2w4nRJe8o=
Subject key identifier:   F3:DC:99:44:91:68:EC:A2:FF:EC:10:75:0A:C9:67:B6:91:E6:24:05
Certificate issuer:       /CN=C9B9ACD433C2198F1292465FB2268B319D884930
Certificate serial:       15BEC256C20B8281AAF4794C51C84DE612C5D1A1
Authority key identifier: C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230362e302f32342d3332203d3e20323730333935.roa
Signing time:             Sun 21 Jul 2024 21:51:14 +0000
ROA not before:           Sun 21 Jul 2024 21:46:14 +0000
ROA not after:            Sun 20 Jul 2025 21:51:14 +0000
asID:                     270395
IP address blocks:        190.89.206.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:c2:56:c2:0b:82:81:aa:f4:79:4c:51:c8:4d:e6:12:c5:d1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B9ACD433C2198F1292465FB2268B319D884930
        Validity
            Not Before: Jul 21 21:46:14 2024 GMT
            Not After : Jul 20 21:51:14 2025 GMT
        Subject: CN=F3DC99449168ECA2FFEC10750AC967B691E62405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:6d:56:7d:9d:be:b1:fe:fa:f4:c7:83:74:
                    70:60:b1:80:19:93:6c:4a:d3:84:59:82:4e:93:83:
                    94:2d:fa:ba:11:af:14:aa:0b:2c:44:89:8c:30:99:
                    7e:21:f6:fd:d7:ee:fd:8f:cb:e3:d1:44:d8:61:a5:
                    7b:16:79:fc:ac:7b:0b:4d:13:46:57:f4:48:b4:21:
                    f0:bb:c0:8a:dc:08:da:51:b4:eb:df:44:85:e6:6d:
                    62:ee:8d:33:36:01:5b:f6:aa:6e:e3:71:e4:2e:f9:
                    70:b5:64:dc:97:da:65:c5:6e:d3:29:0f:80:04:b6:
                    e5:6e:a8:b7:90:16:b2:62:90:54:65:7f:d2:f3:7f:
                    62:70:5f:be:94:be:76:6b:91:e3:bf:af:7b:80:6a:
                    f8:59:98:eb:ff:f8:9f:5b:2d:06:9d:35:da:fd:d1:
                    71:b8:c0:ea:3a:e8:a4:e6:0e:10:de:60:e3:e6:81:
                    4f:7e:46:99:5b:86:d7:d1:86:fd:88:65:46:27:6a:
                    34:d5:40:ee:66:c3:c2:80:96:9e:4c:a7:83:4b:4a:
                    ea:1c:11:2c:91:ba:b2:ef:b3:fe:88:41:13:32:db:
                    42:1e:3e:45:e7:ba:e1:dd:bc:fe:57:9e:d7:d7:22:
                    dc:10:ea:1c:bf:c5:a8:77:09:93:cf:e1:1c:63:63:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DC:99:44:91:68:EC:A2:FF:EC:10:75:0A:C9:67:B6:91:E6:24:05
            X509v3 Authority Key Identifier:
                keyid:C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/C9B9ACD433C2198F1292465FB2268B319D884930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230362e302f32342d3332203d3e20323730333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:44:c1:01:9f:ff:c1:14:90:ce:d6:f4:6d:1b:ef:af:de:
         a9:17:2f:90:3a:ab:a9:21:13:88:6e:d9:14:68:85:e3:45:43:
         c9:99:86:8c:82:87:dd:dc:51:cb:f0:91:16:cc:3f:b3:21:3c:
         1f:ba:bc:a6:4a:e3:4f:7d:f0:8b:f6:87:f2:ec:07:1a:e2:6f:
         3f:d7:3c:0b:da:cb:c7:aa:0e:b1:fa:2c:01:83:a5:89:a9:fe:
         94:64:23:4a:e9:a1:f3:c8:05:e2:59:0c:49:29:05:5f:89:5e:
         d2:74:7b:96:3a:4d:39:b7:0c:3d:70:f1:13:cd:5b:2c:47:bd:
         cb:8d:41:b4:8a:f5:d8:36:af:ae:6c:40:b0:67:02:5e:f0:53:
         bc:2b:ae:52:34:98:a6:e3:f2:b7:34:7f:d2:02:79:09:cc:b2:
         69:79:e4:03:d5:86:2c:11:f9:a8:e6:84:65:e5:65:5d:ac:99:
         44:7a:4f:4f:c9:84:ae:e2:7b:05:17:7b:31:bc:2a:06:69:35:
         ff:22:c6:73:78:2d:e4:9b:4a:48:34:f8:04:6b:7d:a9:9d:a8:
         00:4f:b7:c3:c9:7d:8e:4f:c3:7a:88:18:65:be:c8:2d:bd:87:
         02:49:38:7f:80:af:7b:ca:b5:e8:6f:b0:ea:19:e5:2d:07:25:
         93:bc:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:47:39 2025 by rpki-client