Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          CV2mI4iRzfxSZwB/BGGLvbbg4y8HFe3vMsry+rXTOo8=
Subject key identifier:   72:1E:EF:65:82:5F:62:FE:79:DB:DB:85:FE:99:1F:74:57:5D:72:A4
Certificate issuer:       /CN=7196070155EEACE0B9DB990C69D30A191553EAC8
Certificate serial:       7AE99ED8B9D75C3F9C29128D91813CA2EB402E47
Authority key identifier: 71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 29 Feb 2024 20:34:33 +0000
ROA not before:           Thu 29 Feb 2024 20:29:33 +0000
ROA not after:            Thu 27 Feb 2025 20:34:33 +0000
asID:                     270370
IP address blocks:        190.89.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e9:9e:d8:b9:d7:5c:3f:9c:29:12:8d:91:81:3c:a2:eb:40:2e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7196070155EEACE0B9DB990C69D30A191553EAC8
        Validity
            Not Before: Feb 29 20:29:33 2024 GMT
            Not After : Feb 27 20:34:33 2025 GMT
        Subject: CN=721EEF65825F62FE79DBDB85FE991F74575D72A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:13:7c:3a:c7:29:28:84:ea:9d:64:7f:3d:
                    9e:57:38:0a:be:a1:75:81:14:05:4e:a1:67:96:12:
                    d4:39:ca:37:28:3a:a4:fe:f6:73:b5:5a:69:da:51:
                    08:8e:8f:55:4d:f7:69:38:fc:e0:de:47:bf:55:6d:
                    90:f0:38:70:1c:3c:2c:c2:e2:35:ab:3c:e4:a9:25:
                    97:fc:8c:45:14:4a:56:cf:c2:49:b8:b2:7d:37:0e:
                    72:50:03:8e:71:6f:1a:c7:69:c7:0d:7b:90:78:d2:
                    22:b5:bd:e6:f3:7c:cf:bf:29:e7:e3:21:ea:89:d9:
                    a4:88:3a:e4:0d:40:98:ca:52:1e:59:36:c3:93:e8:
                    18:15:50:22:08:19:1f:12:b3:d8:70:d0:78:ab:a3:
                    bf:8b:9e:d0:6a:ab:20:c4:ab:ce:21:f4:a3:0b:0e:
                    8e:26:10:d5:8d:86:13:df:e7:fc:27:78:8d:f7:c4:
                    a7:13:c3:4a:14:af:26:48:ab:82:b0:07:7c:ab:d5:
                    89:8a:41:b7:dd:48:70:2f:c1:ee:dd:70:86:c8:15:
                    c9:9d:43:c0:b9:d3:a5:f9:2e:03:8b:93:c6:ee:c4:
                    9b:e0:44:32:3d:80:a1:d8:1b:45:04:d5:2e:87:10:
                    88:52:e0:a0:74:d9:4e:a6:78:a0:5f:d6:fa:c8:66:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:EF:65:82:5F:62:FE:79:DB:DB:85:FE:99:1F:74:57:5D:72:A4
            X509v3 Authority Key Identifier:
                keyid:71:96:07:01:55:EE:AC:E0:B9:DB:99:0C:69:D3:0A:19:15:53:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/7196070155EEACE0B9DB990C69D30A191553EAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7196070155EEACE0B9DB990C69D30A191553EAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:36:7d:7c:5a:10:8f:d5:78:31:d5:40:a5:b8:1b:c9:cf:c1:
         03:8b:81:ed:ff:b1:f1:af:e0:21:4f:6f:f5:d3:e8:7f:af:84:
         a5:2b:64:e9:a6:e4:79:b8:6c:71:9f:41:09:83:8c:53:a1:1e:
         05:1a:18:c1:ec:69:8e:95:27:55:db:6f:44:d5:2a:24:a4:9f:
         0a:99:2d:24:5c:a4:f7:fb:64:ed:9f:ed:86:29:d3:fc:b3:9a:
         06:fc:3a:c9:ac:36:e8:d9:84:75:6f:fe:0b:96:30:e2:c6:b2:
         ff:84:bb:0f:11:e6:6b:0b:48:ce:af:83:fd:63:2d:41:49:ab:
         e4:31:5e:ac:88:35:ef:a6:65:ef:98:21:b3:05:24:0f:e4:61:
         e3:76:76:e8:d9:6a:2c:90:45:8b:6e:86:84:ac:cf:f5:2f:9c:
         a7:d0:fa:7f:60:ca:6d:fe:a5:46:dc:d5:81:3e:56:8b:51:d6:
         6e:07:8e:b1:e1:f5:1c:06:16:9d:40:db:73:f7:50:38:f1:3e:
         81:31:c0:45:8c:85:7d:cf:4c:6e:dd:32:12:44:03:07:1b:07:
         8e:af:e2:7b:44:01:7e:0d:81:ef:b7:5d:6c:f4:4a:53:b5:4b:
         fb:36:04:d2:6c:a9:47:c6:51:56:f3:c8:2b:93:23:b3:a9:20:
         e4:bb:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:12 2025 by rpki-client