Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/3139302e3131322e3134382e302f32322d3232203d3e20323639373130.roa
File:                     3139302e3131322e3134382e302f32322d3232203d3e20323639373130.roa (raw, json)
Hash identifier:          EcIfNwrqtUrhwbeWNfjQefEyfMnNAzLIuG1pRm/ZSx8=
Subject key identifier:   B5:3E:ED:72:A5:E1:9C:F0:9B:FE:91:9E:30:E8:39:BA:A6:CE:CE:9A
Certificate issuer:       /CN=6231794FB460D1AAD5E9D731200F0BEAAFDAD7C6
Certificate serial:       6975B63A234296A93E1B942FC606AD80FF0C696F
Authority key identifier: 62:31:79:4F:B4:60:D1:AA:D5:E9:D7:31:20:0F:0B:EA:AF:DA:D7:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6231794FB460D1AAD5E9D731200F0BEAAFDAD7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/3139302e3131322e3134382e302f32322d3232203d3e20323639373130.roa
Signing time:             Fri 23 Aug 2024 19:51:55 +0000
ROA not before:           Fri 23 Aug 2024 19:46:55 +0000
ROA not after:            Fri 22 Aug 2025 19:51:55 +0000
asID:                     269710
IP address blocks:        190.112.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:75:b6:3a:23:42:96:a9:3e:1b:94:2f:c6:06:ad:80:ff:0c:69:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6231794FB460D1AAD5E9D731200F0BEAAFDAD7C6
        Validity
            Not Before: Aug 23 19:46:55 2024 GMT
            Not After : Aug 22 19:51:55 2025 GMT
        Subject: CN=B53EED72A5E19CF09BFE919E30E839BAA6CECE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:82:7a:7f:9b:fd:3d:3c:ce:8f:7f:15:37:
                    0c:af:3b:92:d8:a2:44:fa:78:c2:6b:c0:90:fa:41:
                    7e:83:0f:e0:01:65:3a:89:17:aa:cf:bb:e8:c2:3b:
                    11:60:5a:1a:37:fa:12:35:98:9b:6a:2e:2f:f5:1f:
                    3e:9e:be:3b:b7:74:ff:f5:17:0d:9e:11:be:25:44:
                    cb:32:fc:8a:5c:8d:4d:b2:60:36:1e:73:9f:82:ed:
                    13:83:bd:44:20:66:ae:1d:d2:1b:7d:74:c1:f0:d2:
                    9c:32:6c:b8:9e:c0:c5:13:47:66:d3:bb:99:57:82:
                    95:09:76:7a:af:42:b8:42:c4:8f:62:64:8f:51:40:
                    c6:90:91:3e:70:f2:f1:52:8c:ef:31:13:11:df:76:
                    e2:e1:bc:ce:dd:7c:f1:65:ca:63:32:8e:d0:6d:92:
                    22:13:23:a8:db:cf:15:0f:1b:f7:7a:12:a3:1d:9d:
                    3d:9c:bf:f7:6f:60:3e:01:f2:cb:c0:aa:1e:f4:74:
                    06:9e:a2:28:cf:04:07:80:12:ba:69:17:4e:e8:95:
                    f4:6d:ac:4f:a4:d1:74:11:42:68:7a:26:b6:56:4e:
                    5d:92:e4:16:f4:d3:32:07:57:1a:2d:a4:2d:d4:08:
                    97:8a:f7:ba:17:d5:4a:33:d2:32:c7:f2:e9:c3:38:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:ED:72:A5:E1:9C:F0:9B:FE:91:9E:30:E8:39:BA:A6:CE:CE:9A
            X509v3 Authority Key Identifier:
                keyid:62:31:79:4F:B4:60:D1:AA:D5:E9:D7:31:20:0F:0B:EA:AF:DA:D7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/6231794FB460D1AAD5E9D731200F0BEAAFDAD7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6231794FB460D1AAD5E9D731200F0BEAAFDAD7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/3139302e3131322e3134382e302f32322d3232203d3e20323639373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:7e:2d:d7:e1:e4:e5:ce:28:58:b6:7f:2a:44:ed:2e:5a:
         fa:b0:df:f7:28:40:6a:f3:2d:48:c9:f8:92:6f:d5:3a:32:9e:
         d2:af:39:4d:2e:3b:1d:ac:f9:ff:25:3a:06:9b:c9:34:cf:fd:
         71:e7:be:7a:21:b7:09:bc:5e:f8:34:39:8d:4c:cf:c5:80:9b:
         5e:13:89:8d:e4:05:21:0c:34:bc:35:d6:3b:da:c5:59:6e:32:
         f9:f4:af:16:e6:e1:a9:ec:9c:af:c6:03:24:55:ba:20:4f:63:
         b8:e4:12:1d:d9:09:13:36:65:00:98:f6:00:23:4a:a8:83:22:
         2a:b8:4f:da:1a:06:02:fb:20:ab:70:21:2b:52:80:f5:8e:4e:
         e5:86:6c:26:be:11:d5:9c:bb:9c:c5:a5:1c:29:17:85:cb:1e:
         b5:ce:b3:c2:f7:ee:fa:e9:e5:82:fd:0d:e3:f7:f0:61:3f:b2:
         61:30:3b:51:2a:f9:50:ec:1f:95:5d:44:40:58:44:22:8a:ff:
         94:93:d8:ce:57:12:48:9c:36:71:92:e9:83:fb:9a:73:8e:7a:
         f1:4c:12:4f:13:1c:10:97:ea:fc:fa:75:f1:32:49:18:a9:ac:
         8e:90:65:f1:02:7b:1b:96:ac:6d:ac:4f:b5:5d:84:4e:a4:e0:
         0e:69:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:11 2025 by rpki-client