Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32332d3233203d3e20323730343331.roa
File:                     3139302e3131352e38342e302f32332d3233203d3e20323730343331.roa (raw, json)
Hash identifier:          Hu00yPITts0+3OWS4suiCpe0uXEzTO+uxmQdx7/3C68=
Subject key identifier:   38:60:DB:B0:24:FC:E0:67:B3:AC:E9:3C:DA:0E:12:58:91:5A:88:6C
Certificate issuer:       /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial:       695EC5BCA86AA25C71C7B7686957D9E2AD766039
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32332d3233203d3e20323730343331.roa
Signing time:             Wed 29 Jan 2025 22:29:20 +0000
ROA not before:           Wed 29 Jan 2025 22:24:20 +0000
ROA not after:            Wed 28 Jan 2026 22:29:20 +0000
asID:                     270431
IP address blocks:        190.115.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:c5:bc:a8:6a:a2:5c:71:c7:b7:68:69:57:d9:e2:ad:76:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
        Validity
            Not Before: Jan 29 22:24:20 2025 GMT
            Not After : Jan 28 22:29:20 2026 GMT
        Subject: CN=3860DBB024FCE067B3ACE93CDA0E1258915A886C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:12:f5:84:f1:15:6e:9b:04:61:39:73:e7:
                    87:14:c9:ac:e4:a7:5d:ec:51:1c:fa:9a:b7:7e:1c:
                    e7:73:9d:dc:3c:95:27:df:92:75:23:39:71:f6:88:
                    98:ae:e6:f5:7b:d0:11:fb:03:95:de:e2:5d:97:c3:
                    e3:ab:01:04:5d:10:e7:d3:6e:2b:6b:f8:16:f2:5d:
                    fb:79:36:4a:fb:2a:98:99:2d:2b:92:d1:c6:61:b6:
                    e3:b4:ee:13:1c:ea:54:db:bd:ca:11:0d:f4:7a:79:
                    dd:d4:ca:3f:96:a0:11:cc:c4:0a:3e:91:7b:f1:82:
                    ff:39:94:e6:a4:b8:dc:09:4a:11:af:7f:48:93:27:
                    65:e4:2a:3c:18:d9:07:3c:2d:63:09:7f:a4:de:b1:
                    f8:02:2f:61:56:7a:a4:71:6d:e9:2b:ca:fa:85:52:
                    4c:69:b1:4e:6b:27:24:43:bd:81:4f:be:3f:bf:d1:
                    4e:b3:6a:11:cc:77:47:d5:89:49:7e:d4:a1:0b:40:
                    05:8c:3a:46:0d:e8:8d:05:0f:b9:70:8b:9c:69:d8:
                    8c:a3:5e:23:c3:28:aa:cd:d3:d1:21:e7:0c:75:b1:
                    d3:57:38:fb:53:25:f2:99:7d:60:b1:2a:af:06:db:
                    86:5d:5d:1b:fe:0a:d6:4e:5c:6a:84:2e:62:98:72:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:DB:B0:24:FC:E0:67:B3:AC:E9:3C:DA:0E:12:58:91:5A:88:6C
            X509v3 Authority Key Identifier:
                keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32332d3233203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:0a:14:25:73:f4:63:a5:0c:0b:e1:17:88:35:12:fc:65:
         a2:40:a0:f1:c3:a1:b7:1b:62:44:8d:53:61:96:c9:e7:c7:3a:
         cd:ad:bf:83:cf:d5:a5:3c:8a:3c:6f:3b:01:e2:e1:20:91:07:
         1f:19:d6:08:54:43:7f:1f:b7:74:12:7f:ee:f8:22:1f:26:a5:
         35:32:9c:81:9d:09:30:38:b3:90:a9:34:84:76:8f:2d:7b:1a:
         4d:17:4f:a7:e6:19:d3:57:37:92:d9:ef:44:0b:fb:ff:5d:2a:
         3d:e0:bf:86:f1:5a:37:b0:cd:fe:33:52:72:da:db:0e:c0:38:
         8f:42:cc:17:46:f2:6f:99:ac:15:48:45:61:8c:e1:a1:f6:3b:
         41:99:af:58:bb:d5:20:84:71:82:ac:f2:17:ab:10:cc:7c:07:
         c3:bb:25:50:35:95:8f:b3:f9:96:5b:63:00:91:c1:f7:62:85:
         e5:d1:d3:7b:3a:e1:73:82:40:08:cf:4b:54:a3:8a:ed:1a:61:
         07:29:64:8a:75:78:88:77:53:0b:4c:57:b7:06:66:42:07:ca:
         16:c0:d4:45:de:47:2e:bd:76:ef:d9:e6:c8:12:e5:b6:d4:16:
         f8:1b:a6:9b:99:8f:3d:83:84:fd:4f:80:8c:68:15:4d:6b:3b:
         24:cc:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:36:58 2025 by rpki-client