Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3234203d3e20323637343634.roa
File:                     3139302e38392e3134392e302f32342d3234203d3e20323637343634.roa (raw, json)
Hash identifier:          a4l+8INqWNMI4uMMTH9IifarUK2mmBBJ9gHs/fzggRc=
Subject key identifier:   37:65:5D:7A:30:A3:ED:2F:31:D8:A3:55:D1:A1:A5:F5:70:21:F8:CF
Certificate issuer:       /CN=547777E5F0350F77534A3D644AB1FCEE0214E0D0
Certificate serial:       44A543D03A77053F4D22CC73FA4EBE054524B53C
Authority key identifier: 54:77:77:E5:F0:35:0F:77:53:4A:3D:64:4A:B1:FC:EE:02:14:E0:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/547777E5F0350F77534A3D644AB1FCEE0214E0D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3234203d3e20323637343634.roa
Signing time:             Sat 08 Apr 2023 23:36:30 +0000
ROA not before:           Sat 08 Apr 2023 23:31:30 +0000
ROA not after:            Sat 06 Apr 2024 23:36:30 +0000
asID:                     267464
IP address blocks:        190.89.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a5:43:d0:3a:77:05:3f:4d:22:cc:73:fa:4e:be:05:45:24:b5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547777E5F0350F77534A3D644AB1FCEE0214E0D0
        Validity
            Not Before: Apr  8 23:31:30 2023 GMT
            Not After : Apr  6 23:36:30 2024 GMT
        Subject: CN=37655D7A30A3ED2F31D8A355D1A1A5F57021F8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:b4:94:f7:c5:04:e0:78:48:43:24:f8:b2:
                    dc:78:c2:78:c5:64:38:44:ea:c2:02:92:4c:3b:fa:
                    33:75:8d:f9:9a:8b:44:32:fd:c5:14:de:fa:83:db:
                    e5:12:d1:7f:cd:8e:64:01:27:52:de:c9:a7:98:10:
                    dd:a2:5c:df:f0:6a:a8:3a:b1:13:ca:75:c3:ab:6f:
                    fc:c9:6e:96:bc:59:f3:8e:9f:41:9b:09:5f:88:4b:
                    d2:c4:d6:d8:9a:39:59:28:d2:b1:56:7e:5b:40:1a:
                    54:19:cc:ce:0f:8e:31:15:bb:fd:69:7c:b1:df:d6:
                    cc:8a:d6:48:69:42:42:5a:b8:32:5d:57:8d:c9:c1:
                    62:fc:3f:53:38:74:de:45:6e:2b:cf:c8:85:2d:a1:
                    5e:04:38:d1:2b:c1:8f:25:c0:89:df:0d:91:03:ca:
                    62:6e:79:35:c4:7a:b1:f4:99:23:df:7c:0f:70:c5:
                    48:15:be:13:c4:1c:62:29:b6:6a:b0:94:2a:25:63:
                    99:2e:49:96:22:1c:7f:a9:59:6b:aa:f9:b4:3d:74:
                    64:ef:58:da:08:82:9c:06:90:ee:4d:99:ce:4f:8e:
                    20:fa:0d:80:79:5c:88:ee:95:93:b8:0b:30:d4:31:
                    99:8e:dc:ef:16:85:86:72:79:c0:fe:22:83:7a:21:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:5D:7A:30:A3:ED:2F:31:D8:A3:55:D1:A1:A5:F5:70:21:F8:CF
            X509v3 Authority Key Identifier:
                keyid:54:77:77:E5:F0:35:0F:77:53:4A:3D:64:4A:B1:FC:EE:02:14:E0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/547777E5F0350F77534A3D644AB1FCEE0214E0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/547777E5F0350F77534A3D644AB1FCEE0214E0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3234203d3e20323637343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:b6:ce:a6:7a:86:52:fb:8c:03:b6:46:8e:4e:07:04:9d:
         e9:9c:7a:d9:1c:d1:4c:cc:4f:5b:3d:d2:e6:0f:40:87:93:71:
         0b:98:0e:a0:53:a1:03:d4:4a:9d:a5:50:9a:86:76:4e:53:b6:
         b6:48:b7:22:3c:dc:b4:b8:6f:be:c3:f0:79:41:8c:ba:02:45:
         0b:e9:52:66:18:37:65:04:2e:15:c8:4a:1e:3d:9f:0b:4f:06:
         0c:60:c8:80:98:57:50:74:cb:1c:61:e5:4f:5c:d9:69:0a:99:
         de:37:39:f4:7a:3c:63:cc:d7:3a:3c:6a:e2:c1:30:ef:39:2f:
         08:ee:c1:50:c0:32:2c:3c:c9:e2:c4:60:f3:fd:f3:8e:38:7a:
         87:53:1b:de:a2:d3:23:b0:5b:11:dc:82:97:97:f3:70:0f:c9:
         4c:06:db:cf:d6:cd:05:ce:76:22:44:c2:a4:cd:bc:6c:2a:37:
         c5:e4:1c:15:10:24:3f:87:c2:61:9f:35:75:e7:5c:5f:b4:33:
         4e:63:85:2b:05:10:ad:a4:da:cb:b8:0a:b1:dc:27:fb:ce:66:
         c5:b6:0e:f7:93:d7:8c:dd:4f:7a:3c:bf:4b:51:83:8b:f5:e5:
         b0:81:69:97:eb:48:38:72:73:d0:f9:1f:0d:bc:cf:45:65:fa:
         21:f1:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:11 2025 by rpki-client