Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/3139302e3132302e3233362e302f32322d3232203d3e20323730383233.roa
File:                     3139302e3132302e3233362e302f32322d3232203d3e20323730383233.roa (raw, json)
Hash identifier:          vBdqH9H0PKP4G5u0HiGolZHgTn4fwtMyF0lsvc3d1HM=
Subject key identifier:   C9:FE:78:3D:6C:18:F2:44:3F:01:40:60:FD:0E:14:9F:0D:F4:D2:B5
Certificate issuer:       /CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
Certificate serial:       63EA011C7EBC428182E4DD70A9BA77811C78D007
Authority key identifier: 4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/3139302e3132302e3233362e302f32322d3232203d3e20323730383233.roa
Signing time:             Sat 03 Feb 2024 17:44:54 +0000
ROA not before:           Sat 03 Feb 2024 17:39:54 +0000
ROA not after:            Sat 01 Feb 2025 17:44:54 +0000
asID:                     270823
IP address blocks:        190.120.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ea:01:1c:7e:bc:42:81:82:e4:dd:70:a9:ba:77:81:1c:78:d0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266
        Validity
            Not Before: Feb  3 17:39:54 2024 GMT
            Not After : Feb  1 17:44:54 2025 GMT
        Subject: CN=C9FE783D6C18F2443F014060FD0E149F0DF4D2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:ab:6a:e4:46:17:34:38:76:80:13:5d:3d:
                    ed:ec:c4:e0:b5:ce:01:0b:2a:1c:13:60:e4:59:d7:
                    70:2d:f7:02:92:32:64:bc:99:30:1b:31:d2:85:7f:
                    6d:50:06:c9:22:52:2b:3e:b5:c5:04:d3:64:15:40:
                    52:11:5f:a9:da:1e:35:c9:40:6d:a7:74:50:29:f4:
                    08:a0:7d:76:ae:a2:7d:9b:04:ea:14:16:1d:ef:27:
                    e1:a0:4c:ab:3f:4b:53:3d:29:d1:d7:3e:94:dc:bb:
                    f0:b3:db:be:58:e0:fe:13:9a:72:a4:8e:c8:d5:9b:
                    7d:89:1e:7c:98:c8:7e:9f:80:ae:97:2e:2c:95:f2:
                    fb:72:41:4d:33:cb:65:55:ee:05:11:75:02:3b:96:
                    ff:a0:44:80:31:55:87:72:63:3e:1c:49:ea:29:d1:
                    84:f9:4a:f5:69:ec:ed:f1:37:00:74:94:30:8e:b8:
                    43:bd:31:50:fa:2e:e5:d4:28:50:e3:af:8b:e2:c0:
                    03:62:51:0c:0f:c4:e2:76:13:9d:88:80:77:8b:d7:
                    a5:82:5b:44:58:bd:21:c7:b2:80:f4:01:33:cf:96:
                    ed:f3:69:73:d0:cd:2f:ee:af:7d:ab:41:8d:60:65:
                    80:3b:a8:26:b0:d5:35:dd:fa:2b:89:58:0f:d4:fe:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:78:3D:6C:18:F2:44:3F:01:40:60:FD:0E:14:9F:0D:F4:D2:B5
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:9A:D1:F3:7F:C1:61:6D:0A:23:A4:75:B0:8D:AA:2F:F2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E26DB9AD1F37FC1616D0A23A475B08DAA2FF266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZLbuk9qii8ZWiRGTcVn3damHeuhpCnex3Vk6YW9fSbm/0/3139302e3132302e3233362e302f32322d3232203d3e20323730383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:b1:d5:89:a3:39:b5:b7:60:69:df:26:ef:1a:3a:b6:22:
         83:aa:95:8c:22:b6:78:2a:4a:db:c3:f0:80:f1:70:b2:ce:f4:
         a4:15:8c:cc:0c:aa:3c:b1:cc:9a:59:e5:8d:e9:45:cc:24:9f:
         7e:fd:e3:6d:09:94:6b:f8:3b:fb:24:1b:1d:76:4b:27:7a:a7:
         af:e0:1d:a5:cd:28:7d:b7:3e:e6:1e:f4:51:cc:57:b5:ec:0a:
         37:70:16:b2:ca:8d:4d:7e:1c:2d:fe:3b:59:8b:1b:72:d5:a0:
         a9:42:e4:16:7c:bd:6b:41:f4:b8:6f:e3:73:92:c1:e8:e8:a2:
         eb:65:88:d0:e3:58:1d:55:29:3e:c5:f8:76:c7:bf:43:e1:d2:
         a4:d5:3a:ad:7b:48:4c:8d:10:b3:94:84:8c:0f:46:ac:8d:11:
         98:3a:39:45:41:d6:ca:a4:3e:b3:c0:f1:c4:85:bd:99:7a:ae:
         86:cf:a5:55:b5:c4:dc:38:f5:d9:57:63:09:5c:17:d8:1c:14:
         f8:c7:03:7b:66:7a:65:a0:46:2b:23:85:4e:02:16:99:7a:6a:
         54:ac:4c:b4:eb:2f:6b:9d:a4:53:ca:8b:18:27:3f:d0:eb:21:
         a9:1f:cf:25:07:f9:6e:d3:5f:10:5b:d4:fb:9a:c1:1e:fc:cf:
         67:35:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:10 2025 by rpki-client