Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa
File:                     3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa (raw, json)
Hash identifier:          5zqmp9zuCaJTpn206p/SnSo3GzJ1N7afUBNrLJyoCIo=
Subject key identifier:   09:BF:9A:85:5E:00:98:29:2E:3B:0C:13:F4:87:02:64:1E:29:3E:21
Certificate issuer:       /CN=8B384F437E456C4797E6DFC0379EA72714867D56
Certificate serial:       78F3988C502E59518B379A883D4EFDEE62D7097D
Authority key identifier: 8B:38:4F:43:7E:45:6C:47:97:E6:DF:C0:37:9E:A7:27:14:86:7D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B384F437E456C4797E6DFC0379EA72714867D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa
Signing time:             Tue 18 Mar 2025 18:22:18 +0000
ROA not before:           Tue 18 Mar 2025 18:17:18 +0000
ROA not after:            Tue 17 Mar 2026 18:22:18 +0000
asID:                     273480
IP address blocks:        190.111.96.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:98:8c:50:2e:59:51:8b:37:9a:88:3d:4e:fd:ee:62:d7:09:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B384F437E456C4797E6DFC0379EA72714867D56
        Validity
            Not Before: Mar 18 18:17:18 2025 GMT
            Not After : Mar 17 18:22:18 2026 GMT
        Subject: CN=09BF9A855E0098292E3B0C13F48702641E293E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:f6:a9:88:ff:2d:7e:f0:06:d5:94:7d:72:
                    6c:3d:ca:a9:49:49:0f:d8:c7:6c:ed:94:85:1b:cb:
                    38:41:6b:42:99:16:0d:98:6f:36:da:a9:ec:15:06:
                    ca:ad:3d:79:77:ac:21:ea:4f:a5:3e:fe:66:37:48:
                    e0:f0:2f:21:66:82:8e:24:d4:e0:22:10:f7:57:f9:
                    a5:8c:24:f5:fb:fc:a8:ba:aa:40:ea:7f:63:d4:ca:
                    31:3c:11:23:e3:09:7b:e2:56:1c:89:b7:08:18:21:
                    16:c2:bf:34:64:51:c1:57:24:a6:66:45:cc:41:8c:
                    e6:18:76:9a:cb:dd:29:d9:36:6e:7d:a7:f4:32:82:
                    65:9f:ef:82:88:8c:73:f9:d9:02:60:02:bd:c5:3f:
                    a6:eb:b3:47:22:b7:cb:0a:fb:69:fb:8c:0c:16:66:
                    09:ff:96:58:0c:22:28:dc:b3:a0:4b:62:b2:1f:d1:
                    43:ec:a4:22:72:48:f8:44:38:c3:94:9f:7a:f4:28:
                    f8:c2:5c:fd:50:9d:42:c5:65:d1:35:7e:d5:d1:19:
                    f2:5f:ce:90:42:ba:2c:66:1f:bc:53:95:cd:64:d5:
                    b3:aa:c7:b7:32:f3:c5:78:b3:7e:c9:64:6e:9a:d1:
                    25:d1:f6:d7:dc:3e:52:92:54:65:c7:4a:16:ee:21:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BF:9A:85:5E:00:98:29:2E:3B:0C:13:F4:87:02:64:1E:29:3E:21
            X509v3 Authority Key Identifier:
                keyid:8B:38:4F:43:7E:45:6C:47:97:E6:DF:C0:37:9E:A7:27:14:86:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/8B384F437E456C4797E6DFC0379EA72714867D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B384F437E456C4797E6DFC0379EA72714867D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:8f:3c:8d:7e:29:b8:e1:66:18:8b:44:83:26:aa:b9:4e:
         c7:5c:31:09:b6:05:00:17:bd:43:9b:23:f0:77:b5:52:bd:f4:
         8c:0f:55:2a:54:be:54:6f:5c:bd:33:9c:0f:e2:fb:65:5d:2a:
         9b:c9:c8:a9:af:5d:19:7f:74:f9:9f:18:48:5c:98:61:71:4d:
         39:5a:54:22:07:e8:be:2c:9c:50:1f:84:27:6f:75:c0:60:27:
         33:48:b9:f9:13:d3:b2:f6:49:9c:6e:b9:a4:76:53:4a:4e:63:
         af:b3:7a:89:0c:eb:47:0b:78:e2:88:88:d7:85:9e:40:07:03:
         6f:71:0c:c6:26:15:84:50:d5:2f:3a:14:71:4e:f3:a8:8f:d5:
         a4:6e:a7:aa:b9:9f:35:08:e8:ab:4e:a1:d5:14:9d:b4:39:13:
         71:6d:e1:a2:74:7a:23:73:4d:1c:71:e5:bf:77:6f:3a:41:24:
         26:23:30:84:6c:1b:50:00:08:0c:4f:a1:55:a4:55:e2:c0:33:
         65:3d:ad:ae:b8:5c:87:85:21:ab:11:b3:dc:68:cb:eb:26:06:
         e6:0f:ed:19:d1:74:78:1c:af:4b:60:19:5b:4b:e9:e2:3f:ac:
         ac:39:cf:77:04:c6:00:01:ab:26:81:a9:7c:12:8f:dd:b1:61:
         62:ca:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:40:27 2025 by rpki-client