Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3332203d3e20323730333730.roa
File:                     3139302e38392e3134392e302f32342d3332203d3e20323730333730.roa (raw, json)
Hash identifier:          Ccx3xmZlPeooyIDvZZBI3FxgcMloFUrZANgb7T0EnfM=
Subject key identifier:   99:01:D9:52:FA:3E:44:F3:F7:FB:94:60:E0:7A:5F:B3:CA:9C:46:C7
Certificate issuer:       /CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
Certificate serial:       7FA3611F5B17323FE892A22F65E9C67BE628855B
Authority key identifier: 6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3332203d3e20323730333730.roa
Signing time:             Tue 02 May 2023 11:27:23 +0000
ROA not before:           Tue 02 May 2023 11:22:23 +0000
ROA not after:            Tue 30 Apr 2024 11:27:23 +0000
asID:                     270370
IP address blocks:        190.89.149.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a3:61:1f:5b:17:32:3f:e8:92:a2:2f:65:e9:c6:7b:e6:28:85:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
        Validity
            Not Before: May  2 11:22:23 2023 GMT
            Not After : Apr 30 11:27:23 2024 GMT
        Subject: CN=9901D952FA3E44F3F7FB9460E07A5FB3CA9C46C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:e8:1d:0d:8f:56:81:f0:c0:23:40:16:78:
                    69:33:19:70:da:08:ec:db:4c:2c:20:fc:b2:d6:5a:
                    fd:ff:91:f4:e6:21:27:97:2e:07:66:ca:f8:69:22:
                    cc:5f:45:cb:87:08:68:23:69:98:58:af:2c:dd:6e:
                    80:2b:b9:be:a6:46:17:f2:e4:a0:2d:8d:96:9e:01:
                    9f:11:77:91:e3:39:94:62:8d:f7:c4:9e:54:7e:bd:
                    d8:e2:1a:d5:81:59:b6:e3:a3:5e:32:61:e6:d3:5b:
                    f6:01:ad:00:48:1d:88:01:a4:84:7e:b4:a2:20:c9:
                    55:95:0b:24:aa:fc:a8:eb:26:44:9c:73:87:d0:51:
                    c5:f2:92:38:a6:92:8e:59:03:90:08:8e:85:9c:6c:
                    49:fe:fe:ad:60:f8:fd:e7:09:40:49:5b:51:e4:64:
                    2e:46:d8:68:a0:64:60:c5:16:d4:72:00:08:61:58:
                    59:5e:2a:a4:b6:bb:b4:ec:8b:0b:6c:ff:7e:93:86:
                    07:db:d8:df:59:7b:1d:d7:fc:23:b1:68:cf:7e:45:
                    d5:f7:00:34:bf:d2:c3:a5:a4:a2:7c:61:d9:64:94:
                    94:da:d3:ba:7c:d2:99:cc:89:ad:fc:58:a0:1a:67:
                    d1:32:a5:81:eb:96:9b:4c:0d:46:d3:55:e4:2e:1c:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:01:D9:52:FA:3E:44:F3:F7:FB:94:60:E0:7A:5F:B3:CA:9C:46:C7
            X509v3 Authority Key Identifier:
                keyid:6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3134392e302f32342d3332203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:3a:00:3c:c0:0f:e4:91:12:5e:ba:88:df:09:36:e7:ba:
         1d:32:77:8e:52:bb:e6:65:d6:72:92:cd:bc:4b:f8:b8:18:db:
         5a:22:cd:fb:5f:e7:29:70:7f:b8:36:9f:50:3c:d1:c4:6e:31:
         6b:db:88:c9:98:d1:ec:2c:49:67:27:d5:b8:c5:14:6d:e3:47:
         fa:81:01:a0:7f:b8:2c:cf:0a:a9:0b:dd:cc:78:12:1c:89:f0:
         8a:03:b9:26:f0:8e:aa:74:34:86:97:6c:4a:85:38:84:75:35:
         bb:3e:04:cf:ba:24:de:01:12:db:94:9b:bc:55:0b:2f:db:88:
         b2:88:45:12:44:b6:ee:12:79:af:03:d6:cc:ec:bc:f7:cd:3e:
         90:17:c1:15:26:95:e8:ae:c4:61:e0:a7:05:62:5e:37:72:31:
         ba:3f:8c:75:4c:ca:e7:02:7b:27:a6:bb:0c:a6:12:01:79:de:
         bd:79:dd:9f:c1:d6:6a:a1:06:d6:06:c0:8c:74:2a:5d:e7:ff:
         85:70:e3:85:e8:3d:89:2c:6b:63:0f:39:d7:21:c5:e7:7e:30:
         8a:0e:96:98:f2:d3:9c:76:ea:7c:0a:6c:54:34:32:fc:a2:9c:
         e4:5a:37:c7:eb:09:61:9b:30:76:81:6a:3f:9e:58:2a:6e:7c:
         f5:9d:2f:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf6NhH1sXMj/okqIvZenGe+YohVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJGRTRDMTMyMzdCREI4RkRERTUwNkNFQTczNEI5ODlC
M0RDOTFGOTAeFw0yMzA1MDIxMTIyMjNaFw0yNDA0MzAxMTI3MjNaMDMxMTAvBgNV
BAMTKDk5MDFEOTUyRkEzRTQ0RjNGN0ZCOTQ2MEUwN0E1RkIzQ0E5QzQ2QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvugdDY9WgfDAI0AWeGkzGXDa
COzbTCwg/LLWWv3/kfTmISeXLgdmyvhpIsxfRcuHCGgjaZhYryzdboArub6mRhfy
5KAtjZaeAZ8Rd5HjOZRijffEnlR+vdjiGtWBWbbjo14yYebTW/YBrQBIHYgBpIR+
tKIgyVWVCySq/KjrJkScc4fQUcXykjimko5ZA5AIjoWcbEn+/q1g+P3nCUBJW1Hk
ZC5G2GigZGDFFtRyAAhhWFleKqS2u7Tsiwts/36Thgfb2N9Zex3X/COxaM9+RdX3
ADS/0sOlpKJ8YdlklJTa07p80pnMia38WKAaZ9EypYHrlptMDUbTVeQuHB1nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmQHZUvo+RPP3+5Rg4Hpfs8qcRscwHwYDVR0j
BBgwFoAUa/5MEyN724/d5QbOpzS5ibPckfkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMC82QkZFNEMxMzIzN0JEQjhGRERFNTA2Q0VBNzM0Qjk4OUIzREM5MUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCRkU0QzEzMjM3QkRCOEZE
REU1MDZDRUE3MzRCOTg5QjNEQzkxRjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzAv
MzEzOTMwMmUzODM5MmUzMTM0MzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzAzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WZUwDQYJKoZIhvcNAQELBQADggEBAHsuOgA8
wA/kkRJeuojfCTbnuh0yd45Su+Zl1nKSzbxL+LgY21oizftf5ylwf7g2n1A80cRu
MWvbiMmY0ewsSWcn1bjFFG3jR/qBAaB/uCzPCqkL3cx4EhyJ8IoDuSbwjqp0NIaX
bEqFOIR1Nbs+BM+6JN4BEtuUm7xVCy/biLKIRRJEtu4Sea8D1szsvPfNPpAXwRUm
leiuxGHgpwViXjdyMbo/jHVMyucCeyemuwymEgF53r153Z/B1mqhBtYGwIx0Kl3n
/4Vw44XoPYksa2MPOdchxed+MIoOlpjy05x26nwKbFQ0MvyinORaN8frCWGbMHaB
aj+eWCpufPWdL4g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:41 2025 by rpki-client