Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32342d3234203d3e20323632353032.roa
File:                     3139302e372e3137362e302f32342d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          dZJCkj8upjuon0AJc6IawMi4gVhFhOEp/3BfpaQ/ngk=
Subject key identifier:   17:3A:3E:2B:E2:91:6D:8A:39:EC:61:8B:EC:0F:52:BB:AD:1C:D1:79
Certificate issuer:       /CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
Certificate serial:       3EA3CBB781C3A986278519EA26BA1CAE11077153
Authority key identifier: 3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32342d3234203d3e20323632353032.roa
Signing time:             Tue 19 Jul 2022 18:34:53 +0000
ROA not before:           Tue 19 Jul 2022 18:29:53 +0000
ROA not after:            Tue 18 Jul 2023 18:34:53 +0000
asID:                     262502
IP address blocks:        190.7.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a3:cb:b7:81:c3:a9:86:27:85:19:ea:26:ba:1c:ae:11:07:71:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
        Validity
            Not Before: Jul 19 18:29:53 2022 GMT
            Not After : Jul 18 18:34:53 2023 GMT
        Subject: CN=173A3E2BE2916D8A39EC618BEC0F52BBAD1CD179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:af:f8:11:de:9d:6d:7c:43:23:c0:71:10:
                    6e:ba:74:15:f4:ec:11:c0:57:7b:fb:29:b8:99:ec:
                    43:83:3f:31:54:30:fb:09:b4:50:6a:f9:3f:05:cd:
                    32:eb:08:97:48:5c:d4:b9:eb:4d:35:78:8c:de:6a:
                    70:da:b6:44:0a:3a:65:a5:f4:50:a3:fa:f2:5b:a5:
                    03:a7:ce:76:cc:cf:da:a0:a7:d7:9b:7f:7d:7e:8d:
                    26:e3:06:17:b9:68:d6:2b:6e:cf:b9:01:c9:13:23:
                    30:b8:9d:cc:31:da:e6:a4:53:52:27:4b:ef:0e:82:
                    9d:df:8a:50:f2:af:85:fc:b8:08:f1:aa:b5:8c:ad:
                    ec:43:6e:b6:aa:37:26:62:4e:13:1f:30:eb:99:fd:
                    75:ba:a8:a1:65:f7:bd:64:80:cc:7b:b0:8e:13:46:
                    cc:09:a5:fb:b0:26:d0:69:18:5c:4f:3c:c0:47:5f:
                    ac:98:e2:95:2f:48:ce:da:7d:71:40:70:8a:6a:3a:
                    de:f6:a6:23:37:6e:dc:ae:b7:64:5c:b0:2b:fa:df:
                    09:1a:51:0e:d7:75:50:fc:32:38:19:cb:c2:25:5d:
                    26:f9:60:16:95:65:99:1c:67:45:7f:19:4a:a5:44:
                    e8:84:f5:4b:88:37:57:3d:f6:2e:94:e8:bf:78:14:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3A:3E:2B:E2:91:6D:8A:39:EC:61:8B:EC:0F:52:BB:AD:1C:D1:79
            X509v3 Authority Key Identifier:
                keyid:3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3139302e372e3137362e302f32342d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:c2:9a:79:1f:14:f4:cb:17:ee:2e:71:e0:88:1c:45:8a:
         40:c0:81:c7:f3:66:bc:54:67:12:4c:20:55:8f:27:d6:c6:1e:
         01:22:6f:e3:42:dc:42:98:42:fe:0a:67:ea:c5:1a:06:c0:ce:
         c3:d8:88:e1:1d:a0:61:cc:69:c5:bc:4a:7b:5c:d2:c2:ba:1d:
         dc:8e:4f:f3:ba:dc:ed:24:58:63:50:75:76:49:50:f3:38:0b:
         e0:5d:0f:32:9e:cc:0b:ce:ba:9b:b9:74:97:5e:6e:bb:14:e3:
         10:b7:b3:4c:5e:5a:89:90:2f:75:9c:05:e7:37:3f:5b:cd:3e:
         39:d0:e7:97:24:86:50:d6:32:11:51:84:93:9e:ac:0a:27:71:
         c2:92:de:07:e3:a2:ff:2c:af:f2:ee:61:f7:fd:48:e4:a9:32:
         4f:89:ca:7f:08:d1:a6:d4:9c:8d:b6:77:de:25:10:f6:ef:83:
         fb:8e:a4:2e:c9:fd:c2:0b:dc:8e:ab:97:23:74:e2:10:82:b8:
         cb:10:27:7e:7d:80:53:34:ff:f0:da:86:0a:df:96:bc:0c:20:
         9b:b2:ca:45:06:7b:a5:47:6d:9e:c0:15:46:2e:42:8e:af:3f:
         2b:10:5d:54:64:a1:20:02:2e:2b:90:8a:fb:6d:6a:c3:24:e3:
         cd:48:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:49 2025 by rpki-client