Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3232203d3e20323730343331.roa
File:                     3139302e3131352e38342e302f32322d3232203d3e20323730343331.roa (raw, json)
Hash identifier:          fBXeCfHuH9Q0OQwd1e0s7y7SwB/yAwm6+5stF78SPRU=
Subject key identifier:   F1:83:2F:09:C9:4B:77:94:56:FC:89:CB:72:FC:9F:51:86:41:45:DA
Certificate issuer:       /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial:       0CC0EDEB3F394391C0BA5443834B75B9955898F6
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3232203d3e20323730343331.roa
Signing time:             Wed 29 Jan 2025 22:29:16 +0000
ROA not before:           Wed 29 Jan 2025 22:24:16 +0000
ROA not after:            Wed 28 Jan 2026 22:29:16 +0000
asID:                     270431
IP address blocks:        190.115.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c0:ed:eb:3f:39:43:91:c0:ba:54:43:83:4b:75:b9:95:58:98:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
        Validity
            Not Before: Jan 29 22:24:16 2025 GMT
            Not After : Jan 28 22:29:16 2026 GMT
        Subject: CN=F1832F09C94B779456FC89CB72FC9F51864145DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:b7:67:6c:c8:ce:99:9a:b9:66:0d:b6:09:
                    f4:18:b1:b0:c1:23:46:51:3e:fd:f9:d1:26:95:cc:
                    62:e1:36:40:13:c9:f7:ba:17:d4:12:4f:b3:1c:1d:
                    12:6e:be:fc:1c:02:8a:0b:d6:28:fe:f8:48:f2:54:
                    7b:88:df:d3:0f:d1:24:09:8f:49:df:5a:44:2f:86:
                    d2:eb:d3:ae:6e:9d:9c:2b:4c:47:a3:ef:28:66:04:
                    2e:a0:78:24:7d:5b:a3:10:08:78:d9:48:24:27:cb:
                    9a:46:8f:e6:c5:ba:00:01:07:46:d6:ac:90:79:ba:
                    00:87:e9:b2:b1:5d:e2:fe:dd:fe:ca:92:4e:6a:3c:
                    8b:46:64:d2:88:de:02:c3:6b:c5:14:5d:a9:56:04:
                    1a:dc:1c:eb:a0:e3:db:d7:8c:96:fb:77:0e:31:cc:
                    3d:3c:ab:08:f5:2d:88:36:84:03:f5:4c:c4:ae:bc:
                    df:2f:28:9d:a4:df:a5:ee:a4:e2:eb:04:8b:f1:f6:
                    b0:55:e2:80:50:78:9f:44:1f:b4:73:d8:62:ba:ed:
                    a2:88:c8:1c:b3:7e:ce:41:db:72:93:ea:dc:2b:7f:
                    51:5b:09:a2:7c:38:ae:6c:cc:bc:2b:24:b6:03:a9:
                    f4:0d:d5:91:d7:32:a8:d1:22:b1:43:e8:01:61:d1:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:83:2F:09:C9:4B:77:94:56:FC:89:CB:72:FC:9F:51:86:41:45:DA
            X509v3 Authority Key Identifier:
                keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32322d3232203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:ea:00:82:12:0a:d9:59:be:ae:d1:07:ba:b6:13:8c:4d:
         f4:f5:13:e7:b2:6b:d2:17:18:9b:78:16:87:12:09:24:cb:ff:
         9a:2c:53:7a:cd:c5:2a:35:29:67:8c:ad:28:c4:f1:85:9e:63:
         61:01:2c:85:05:53:ed:b7:e1:26:e8:5e:80:4a:f0:07:5e:42:
         e1:01:40:6f:88:23:cb:6f:63:9e:31:4d:18:9b:b8:b4:f9:2a:
         3c:fb:0c:50:74:13:5d:9a:3d:28:36:14:82:62:f3:87:73:ef:
         b6:41:1d:88:d7:8a:07:b1:82:67:59:82:08:26:5c:29:bb:93:
         82:24:44:75:ec:63:4c:38:c7:02:f9:32:d5:9f:b0:72:22:e1:
         ec:1b:88:a5:2e:f4:ef:f1:04:6d:dc:26:7d:a1:bb:34:6b:ab:
         10:9b:b8:8d:e6:ec:26:00:0d:ba:c0:bd:18:79:00:a0:52:a0:
         f5:11:a4:97:f3:a9:49:4f:2c:64:4b:6b:9f:00:a5:6e:93:98:
         63:d9:e7:4b:6e:83:d5:7b:a5:31:16:64:64:c9:ea:8a:df:e3:
         9c:cd:58:2e:9a:38:81:3a:b7:ff:b7:25:af:db:20:5b:e7:0e:
         e8:58:64:a3:22:96:b8:70:61:8f:db:51:57:6b:92:48:0e:a7:
         28:cf:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:27:22 2025 by rpki-client