Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          BmtgFOdBLPBquuUWRKGzkW7Qm+ELv88BCjIfbP3+w1o=
Subject key identifier:   D5:75:89:F0:DB:3A:13:69:AF:67:70:FA:56:13:3A:AE:DD:77:84:0A
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       37F7D2F78F6B7DA88C1C5D58C3DDF7C3650F4659
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa
Signing time:             Wed 05 Mar 2025 23:11:39 +0000
ROA not before:           Wed 05 Mar 2025 23:06:39 +0000
ROA not after:            Wed 04 Mar 2026 23:11:39 +0000
asID:                     270652
IP address blocks:        190.11.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f7:d2:f7:8f:6b:7d:a8:8c:1c:5d:58:c3:dd:f7:c3:65:0f:46:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Mar  5 23:06:39 2025 GMT
            Not After : Mar  4 23:11:39 2026 GMT
        Subject: CN=D57589F0DB3A1369AF6770FA56133AAEDD77840A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:26:d2:b3:26:e6:66:d5:68:2a:c6:cd:4e:
                    ad:76:8a:84:29:80:f2:3f:65:70:1b:07:5d:c4:81:
                    af:02:d0:de:fa:11:17:c6:99:d1:8e:18:d9:d9:ea:
                    12:e3:d3:cb:d9:d3:5b:0e:59:5d:6f:93:32:c4:ed:
                    61:94:0a:34:48:1d:58:0f:2c:83:57:86:10:5f:d7:
                    b5:13:8a:20:08:56:9f:e8:ed:17:5e:eb:27:1e:81:
                    1a:c5:fc:20:c0:b4:7a:e0:af:03:ae:bf:2a:a4:0b:
                    5d:b5:bd:3b:5e:5e:27:50:d6:2c:2c:6c:2d:42:ef:
                    54:25:eb:4e:2e:b4:94:6b:4c:26:85:f1:d2:bb:44:
                    13:e3:8d:47:8d:8d:87:25:d1:66:bd:d7:80:b2:f7:
                    2b:72:b5:00:c8:ca:58:4c:ca:71:11:92:39:2e:43:
                    2c:da:3e:37:5e:83:24:0b:22:fd:aa:16:f2:8f:9a:
                    0a:67:f5:1a:ec:36:94:0e:3a:29:28:07:66:f3:36:
                    51:5b:2d:11:72:2e:37:30:fb:78:04:62:e1:eb:26:
                    93:aa:1d:7f:5c:fc:4c:3c:2f:ca:7f:9f:b1:0d:54:
                    bf:01:ec:fb:af:f0:8b:2a:74:08:57:f1:95:95:ba:
                    ca:50:64:bc:c8:90:51:bd:a5:c1:e7:05:5f:55:a5:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:89:F0:DB:3A:13:69:AF:67:70:FA:56:13:3A:AE:DD:77:84:0A
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:dd:02:3f:44:5a:ad:ae:51:9d:10:1a:52:10:a7:46:d0:
         50:2b:ae:a4:9d:1d:df:e3:52:56:2d:82:ea:a6:ab:df:70:71:
         79:b9:91:d9:97:2d:93:f4:2c:b2:47:5e:cc:9c:03:73:75:be:
         b1:7c:0b:4f:10:8d:05:9b:1a:4f:fb:32:df:e7:51:c0:79:2a:
         94:fc:b4:9f:b3:ef:2c:8e:71:46:36:0d:e9:d5:2a:dc:f5:d6:
         d9:9d:15:44:d5:eb:5b:b8:45:b9:bd:a3:0f:90:36:03:51:c9:
         df:ad:63:62:97:7d:5d:af:76:c5:9b:b8:48:bc:a0:63:6a:4d:
         52:6a:d4:8e:68:0c:f7:1e:a7:8f:1c:1a:4c:f0:9f:d0:d8:93:
         39:09:32:34:40:44:c5:16:c3:ee:05:a3:52:ff:34:ba:57:11:
         5c:8a:87:07:0e:25:73:8f:c6:41:9e:4f:f3:8c:6a:a6:43:25:
         78:e9:40:9c:9f:bc:54:1c:e6:09:a2:e1:90:04:93:0f:1a:68:
         fb:7f:db:2e:f4:a4:4d:6f:41:d0:4e:9d:52:df:d4:a2:66:9e:
         66:29:7a:bd:7d:54:cb:c3:b3:35:dd:60:a1:f2:33:0e:bd:4d:
         08:a6:61:df:88:ff:71:46:4d:fb:82:ef:e3:44:f2:df:f6:aa:
         94:8e:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:45:36 2025 by rpki-client