Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa
File:                     3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa (raw, json)
Hash identifier:          V7KjljiE0NyGKsRxkI+O2Z2EI7hVZOBo/8nJ6OzFYvs=
Subject key identifier:   8C:E9:B9:11:39:7C:8E:C6:0C:89:5E:86:B5:E2:11:57:7F:19:C7:F9
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       740C44C58EF68628103F476D4345DBE1631FC26C
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa
Signing time:             Thu 06 Mar 2025 07:52:46 +0000
ROA not before:           Thu 06 Mar 2025 07:47:46 +0000
ROA not after:            Thu 05 Mar 2026 07:52:46 +0000
asID:                     270397
IP address blocks:        190.89.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0c:44:c5:8e:f6:86:28:10:3f:47:6d:43:45:db:e1:63:1f:c2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Mar  6 07:47:46 2025 GMT
            Not After : Mar  5 07:52:46 2026 GMT
        Subject: CN=8CE9B911397C8EC60C895E86B5E211577F19C7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:03:a1:f6:a5:27:8d:22:b3:59:69:a0:a4:
                    36:99:4e:8e:67:c8:36:b6:4f:e2:5f:67:cd:76:ce:
                    78:e4:d8:9b:9c:69:cc:85:be:5b:dd:93:8f:37:df:
                    fe:25:dd:21:34:c5:9f:31:68:1d:b7:47:aa:cb:00:
                    2c:f7:1b:66:53:01:3f:28:8c:ef:15:e1:ac:f2:c7:
                    56:db:fa:5c:38:d4:9d:53:10:80:d4:5d:d0:61:23:
                    1c:96:3d:b2:0d:d6:0f:1b:39:4e:d0:46:8a:ad:73:
                    2f:13:78:57:37:43:44:2f:08:d8:d2:76:8a:c7:41:
                    aa:24:a4:03:5f:c2:c5:79:b0:40:62:2b:02:a4:d4:
                    89:4e:c5:b7:51:8c:bc:20:43:d7:be:bd:3c:91:dd:
                    b3:34:6c:6e:64:65:6d:3c:6e:89:9f:dc:95:11:39:
                    c1:bb:3a:b7:c5:83:40:6c:2d:2a:1c:3d:5d:6b:6b:
                    ce:58:2c:18:8d:5c:c0:dc:fa:05:aa:4f:ba:17:74:
                    4c:dc:b9:d6:b7:6b:ab:45:77:5d:ae:57:2f:db:ab:
                    8b:e3:6d:3f:9c:5e:4e:72:8e:f6:b0:ef:f2:c5:4e:
                    bc:18:cc:72:da:3a:a4:52:85:d6:1d:3a:77:0d:86:
                    35:1b:a5:be:dd:5c:c0:b6:f7:cf:55:36:c1:31:bc:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E9:B9:11:39:7C:8E:C6:0C:89:5E:86:B5:E2:11:57:7F:19:C7:F9
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:6f:2f:b6:e5:99:41:a9:d2:d5:3a:3a:d7:5c:ce:a2:a1:
         e2:9f:a3:d2:4e:1f:7f:ba:1b:e5:02:40:f1:26:0e:45:f0:b2:
         6f:f6:41:14:d5:4b:17:3e:62:18:80:df:0e:7b:2d:76:72:d0:
         83:d7:f9:81:87:bc:bb:fd:b9:dc:f1:25:46:da:81:fd:44:4e:
         d1:17:b6:cd:77:29:c2:55:ce:e0:d8:31:fb:92:ad:d7:23:fe:
         45:40:ea:22:12:0e:8d:cb:40:44:e0:4c:5e:98:ba:0d:13:cf:
         22:0c:bc:62:3a:16:30:4c:d9:16:4e:59:de:c8:2e:60:81:3d:
         48:39:3c:7e:94:ab:e9:ae:50:56:1b:ba:60:05:ff:39:b0:6b:
         18:6d:93:7b:76:2b:8e:b5:5f:00:d8:b3:17:27:0d:10:21:6f:
         66:ae:e0:90:bc:15:98:c2:5c:e8:db:74:b0:0b:d9:45:93:78:
         dd:6d:5d:92:8e:c1:d1:89:d9:f5:f2:6f:04:ab:11:1d:03:79:
         6c:f8:15:26:fc:64:a0:fd:ad:48:8b:ef:50:fe:61:3f:bd:6c:
         48:8c:ba:6d:55:67:7d:bb:ea:b4:48:b3:e6:be:52:1a:c8:67:
         63:22:18:98:30:2d:4f:3a:24:0a:50:2c:dd:1b:77:d1:d2:e1:
         00:87:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:32:32 2025 by rpki-client