Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38362e302f32342d3234203d3e20323730343331.roa
File:                     3139302e3131352e38362e302f32342d3234203d3e20323730343331.roa (raw, json)
Hash identifier:          217GVJAVaplkVyGeLZiVFR23uBfVJvcgJeC0h2r861Q=
Subject key identifier:   65:BD:36:EE:4C:CC:1A:58:EE:A0:BC:7B:33:2F:89:AC:D3:4E:D8:9C
Certificate issuer:       /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial:       300D2D6E648E644D035C3384DE474EF0AC077062
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38362e302f32342d3234203d3e20323730343331.roa
Signing time:             Wed 29 Jan 2025 22:29:34 +0000
ROA not before:           Wed 29 Jan 2025 22:24:34 +0000
ROA not after:            Wed 28 Jan 2026 22:29:34 +0000
asID:                     270431
IP address blocks:        190.115.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:2d:6e:64:8e:64:4d:03:5c:33:84:de:47:4e:f0:ac:07:70:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
        Validity
            Not Before: Jan 29 22:24:34 2025 GMT
            Not After : Jan 28 22:29:34 2026 GMT
        Subject: CN=65BD36EE4CCC1A58EEA0BC7B332F89ACD34ED89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:59:bd:b1:f8:41:1a:4b:41:63:ee:3a:99:
                    3a:0f:04:66:39:ae:72:93:4a:18:09:40:be:b6:3a:
                    8e:f1:6b:22:43:f4:f0:2e:3e:64:2d:41:9b:da:2b:
                    d6:fe:59:99:c9:fe:c9:e5:0f:8f:2f:98:b7:1e:5e:
                    62:08:e5:93:7b:3f:58:cb:4d:bc:cf:1f:60:e0:02:
                    56:23:46:f7:5c:af:be:f7:d1:44:e3:8e:8b:1b:b6:
                    5f:5e:8b:d0:fb:17:d3:e8:a5:c1:62:27:d4:f4:54:
                    fa:b3:64:46:a3:5d:42:2d:57:19:58:2b:7e:f6:e1:
                    fb:d6:7a:a5:4c:98:87:40:0f:51:16:94:02:19:95:
                    48:26:3d:fe:3a:4e:dc:0e:3a:07:c8:c6:75:a7:51:
                    6c:0c:1e:9a:2c:47:52:7d:dd:b1:13:15:bb:aa:8e:
                    f2:8d:f1:a0:be:05:13:cb:17:31:70:07:4f:c0:fa:
                    80:4d:13:f6:07:60:37:21:77:49:ce:b3:46:d3:b9:
                    bd:6c:5b:fe:4b:09:82:7d:51:bb:f4:58:b4:b4:e8:
                    4c:d5:60:54:c4:e6:ae:3d:64:85:c6:54:78:a3:62:
                    2d:b2:b6:a5:e9:90:e4:2c:a1:20:97:17:11:5e:f6:
                    0a:b6:f2:6b:22:9e:04:77:d7:ab:6a:43:09:02:77:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:36:EE:4C:CC:1A:58:EE:A0:BC:7B:33:2F:89:AC:D3:4E:D8:9C
            X509v3 Authority Key Identifier:
                keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38362e302f32342d3234203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:e0:ff:c6:21:0b:ac:12:be:c2:f6:b3:48:53:84:b9:ee:
         2c:a8:ce:f0:aa:d7:03:18:f5:16:24:df:27:e4:0d:b1:e1:4a:
         e8:34:54:f8:7b:76:19:cd:4d:48:52:b6:4c:ef:40:8a:17:0d:
         65:ef:ae:98:e6:08:ec:8b:52:f0:1e:3a:62:8f:f6:33:4e:0e:
         77:e5:4e:51:c3:20:37:f9:51:a1:27:99:45:d7:56:d2:6d:08:
         57:fd:46:f0:ed:7f:31:bd:cf:ea:79:cf:e2:a7:58:7d:e5:ba:
         aa:4b:02:9d:f3:27:09:ea:9b:0a:ca:a7:e2:02:4d:fe:1e:03:
         c5:26:8c:37:06:42:18:22:37:87:11:eb:c9:bb:a7:f5:5a:3d:
         d3:8f:8c:c4:d8:a2:c6:51:ed:b3:7b:bb:cd:34:9e:ff:3b:2a:
         e7:09:bf:f2:c0:1e:72:e5:99:15:9a:11:7c:f4:b3:df:bd:ec:
         eb:51:ce:27:f1:c6:80:04:13:c2:eb:2a:e7:56:66:01:b3:2a:
         6a:84:3b:68:f9:f7:ef:de:d4:2b:26:d9:55:15:7d:13:8e:24:
         b5:8b:11:dd:f3:b2:90:31:3f:3f:ef:9e:90:db:e3:5d:3b:38:
         15:ac:f3:8b:0f:8d:41:dc:18:40:1e:28:36:21:32:bb:53:8e:
         2f:6c:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:28 2025 by rpki-client