Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          O8Qhu0ZyGVmwHNuhMHZjcuDQuzaZtt04pvNa7Iz2Qe8=
Subject key identifier:   B9:DD:FF:A2:E6:A2:94:AA:15:8E:44:D8:DA:DC:69:EE:7A:70:42:7C
Certificate issuer:       /CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
Certificate serial:       08EA464A52A4AECF7E71D965FE3F31DFA94A0140
Authority key identifier: 85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
Signing time:             Tue 26 Mar 2024 06:18:12 +0000
ROA not before:           Tue 26 Mar 2024 06:13:12 +0000
ROA not after:            Tue 25 Mar 2025 06:18:12 +0000
asID:                     271326
IP address blocks:        190.123.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:46:4a:52:a4:ae:cf:7e:71:d9:65:fe:3f:31:df:a9:4a:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
        Validity
            Not Before: Mar 26 06:13:12 2024 GMT
            Not After : Mar 25 06:18:12 2025 GMT
        Subject: CN=B9DDFFA2E6A294AA158E44D8DADC69EE7A70427C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:6b:4b:87:84:af:a9:62:d4:cd:62:c9:50:
                    71:34:12:8b:a1:53:2e:c9:d0:9c:89:bf:c0:4f:3d:
                    3a:c7:ea:f8:cc:fb:56:72:68:24:f8:97:48:de:a5:
                    eb:37:ca:f4:4f:62:b2:1c:b7:4c:24:1b:45:63:02:
                    73:52:dc:ee:00:d0:22:7e:b1:83:83:a4:d5:73:5a:
                    87:79:95:fc:d1:0e:43:9f:99:84:26:f2:1c:9c:68:
                    11:cb:fc:e6:66:e3:9f:e8:fe:50:91:b9:00:72:e0:
                    4d:a2:cc:5b:8c:c0:8a:17:51:d5:c5:47:29:29:25:
                    90:96:64:c4:24:92:35:f5:61:8a:5d:7a:d1:b8:db:
                    6d:50:73:ab:ca:09:fb:66:9d:d5:e7:2a:99:d0:3a:
                    fe:2e:9f:14:99:e8:43:07:0b:ed:4a:94:cd:6e:0e:
                    e4:96:0e:66:1e:2a:f9:6a:24:f6:5c:55:89:4d:d8:
                    37:cf:15:b8:46:65:85:85:35:9d:43:01:0b:e5:d5:
                    52:83:68:d6:f6:3f:ab:c9:b3:d1:0a:01:0e:7f:28:
                    f2:ba:25:2c:d1:6d:2b:8d:24:e8:fd:49:7d:0b:34:
                    76:73:12:f8:cc:71:5e:ae:45:99:26:19:40:f4:55:
                    80:36:77:92:5e:70:4a:e8:5e:a9:3f:2d:6f:ca:52:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DD:FF:A2:E6:A2:94:AA:15:8E:44:D8:DA:DC:69:EE:7A:70:42:7C
            X509v3 Authority Key Identifier:
                keyid:85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:7b:1f:e8:8b:6e:09:e7:8c:7c:ab:12:07:74:45:9f:d9:82:
         38:35:2a:7f:a8:45:5d:20:10:73:59:60:22:18:23:9a:db:bf:
         da:0b:e4:9f:eb:1a:bf:a7:8d:d6:8d:34:0e:be:62:fb:43:16:
         7d:e4:b6:3f:8e:5d:99:49:b0:c6:ec:d5:c8:be:88:fb:1a:09:
         44:73:e1:6c:5a:98:e5:c2:af:7b:c2:bf:b0:d9:5c:c8:46:17:
         c7:e2:99:84:e9:dc:b7:a8:b8:8a:bc:63:e3:21:87:79:4f:69:
         0d:7a:0f:26:80:db:76:f4:e0:f5:ba:94:b8:cd:7e:fe:11:63:
         1a:b1:33:49:55:9b:76:91:b5:e7:ef:b7:64:9b:9e:d8:69:7a:
         4e:f4:0b:45:24:e0:17:f9:92:e0:89:94:ad:fb:4f:06:e1:d6:
         1e:f1:fb:45:c4:db:04:80:60:4a:49:24:51:79:33:67:f6:3e:
         be:77:6d:98:f7:72:81:59:f8:81:1f:d1:ca:10:d9:24:69:8e:
         66:89:40:25:4a:1a:18:18:81:8a:a0:8c:fb:2a:ee:86:2b:a3:
         31:08:27:94:3d:f4:4d:61:24:99:4a:6f:19:a9:70:dc:be:42:
         10:63:7e:63:aa:7f:48:54:e6:d8:02:ec:0e:5c:a0:d3:36:50:
         7c:31:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:21:29 2025 by rpki-client