Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34332e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34332e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          ckIlUL7h9kmFifMdZJNvZu+lZAWJ78JMZoON7oqTHCg=
Subject key identifier:   05:11:78:07:6E:84:14:E3:E7:77:59:5A:73:12:EC:AF:06:47:51:B3
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       0B512E18C4BEC9850294A8B4FD0EC29EAA4F7712
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34332e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:35 +0000
ROA not before:           Wed 17 Apr 2024 11:37:35 +0000
ROA not after:            Wed 16 Apr 2025 11:42:35 +0000
asID:                     28191
IP address blocks:        189.90.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:51:2e:18:c4:be:c9:85:02:94:a8:b4:fd:0e:c2:9e:aa:4f:77:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:35 2024 GMT
            Not After : Apr 16 11:42:35 2025 GMT
        Subject: CN=051178076E8414E3E777595A7312ECAF064751B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:2f:41:05:1e:ab:94:92:1d:d6:17:b9:f7:
                    d7:dc:b2:a7:fa:64:d3:47:b3:0b:12:b6:8d:cf:d1:
                    f6:2b:6d:a4:cb:e8:2d:f0:49:8f:6c:50:96:dc:b5:
                    b5:fc:b5:3f:18:64:1b:a6:c9:24:1f:5e:c0:a0:37:
                    b7:1c:2c:02:2f:54:ed:fd:06:04:5d:c6:5b:d5:dd:
                    54:68:da:84:01:f9:d1:8f:3b:66:56:8d:9c:b3:ec:
                    9c:12:7d:81:03:12:69:f6:e2:cf:b3:0c:17:91:c8:
                    c0:41:f6:e9:ef:1b:74:66:a2:38:3a:00:92:4b:08:
                    70:d3:5e:c6:24:16:32:49:5e:96:bb:64:cb:7b:e9:
                    b2:e6:54:04:d0:7e:d9:42:76:d2:67:12:59:51:24:
                    89:a5:b1:94:8d:52:a1:2c:76:ec:8a:cd:cd:80:41:
                    c5:d1:c4:5b:7b:79:5f:a1:20:5c:a0:c6:a3:e6:39:
                    b9:7d:dc:39:3d:c2:81:b9:15:64:b4:44:6c:92:56:
                    20:41:62:cb:f1:fe:96:3c:d8:31:f9:b4:2c:d5:59:
                    51:2c:23:ee:96:7f:9e:d5:b1:07:a6:2b:d6:ca:fd:
                    b0:37:d5:ca:f3:51:61:b2:11:c9:f8:13:81:74:cc:
                    55:41:85:fc:d6:76:a6:7a:78:7d:d6:b0:cb:61:0f:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:78:07:6E:84:14:E3:E7:77:59:5A:73:12:EC:AF:06:47:51:B3
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34332e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:df:10:8e:85:4b:db:84:87:1c:35:fb:7c:54:54:73:64:
         45:00:ee:56:e9:8a:65:7b:e2:e2:a1:5f:2d:63:bd:08:33:75:
         61:78:59:99:59:73:30:08:bb:bb:bc:1c:a5:6b:7a:09:f1:86:
         47:ff:88:ae:6a:4b:2b:51:1f:a1:3d:8b:98:74:d1:9d:50:e8:
         ae:db:10:0d:ae:80:7d:01:f7:31:d0:58:51:cf:73:b1:f6:fb:
         cf:15:4b:c9:9d:d8:47:cd:fc:e0:e1:47:43:31:b3:4e:fe:96:
         b7:b8:5a:92:b9:1d:bf:3c:59:34:f0:27:f4:57:17:cd:82:11:
         5a:b6:75:1c:ec:72:bd:e6:e8:2c:d9:b9:60:30:43:87:fa:b0:
         b4:b7:5e:d3:d4:e3:f2:90:82:7d:b2:0a:f1:20:4d:f6:fc:a8:
         29:0e:c2:81:b4:68:c4:e8:0c:c1:2f:5d:80:42:1a:80:fa:61:
         7e:a9:ed:c9:75:83:97:2e:85:1e:51:00:63:37:af:87:cd:3b:
         30:8e:78:ad:1b:ef:c4:69:cd:35:62:ba:94:04:de:f6:cf:9e:
         aa:04:5b:07:59:25:e0:eb:e4:fd:68:c0:2c:81:15:dd:c3:76:
         ff:53:21:75:f9:03:f1:fd:4d:37:33:a0:0e:8a:0e:cb:25:7d:
         92:f8:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:16:19 2025 by rpki-client