Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38382e302f32332d3233203d3e20323731303130.roa
File:                     3139302e3130362e38382e302f32332d3233203d3e20323731303130.roa (raw, json)
Hash identifier:          shpgHBQEou11AlyeF5fk5kGBEgj7kJDcQFSHW39cKF0=
Subject key identifier:   C1:CD:76:19:B2:D1:41:DF:B0:87:36:47:F8:CA:AB:C2:40:1A:6B:6F
Certificate issuer:       /CN=D21871058E5582F1E44D0679F65ED798674EBFCF
Certificate serial:       42FA0D9565C1CED199305B093C36A7900846ABBE
Authority key identifier: D2:18:71:05:8E:55:82:F1:E4:4D:06:79:F6:5E:D7:98:67:4E:BF:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D21871058E5582F1E44D0679F65ED798674EBFCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38382e302f32332d3233203d3e20323731303130.roa
Signing time:             Fri 23 Dec 2022 21:26:41 +0000
ROA not before:           Fri 23 Dec 2022 21:21:41 +0000
ROA not after:            Fri 22 Dec 2023 21:26:41 +0000
asID:                     271010
IP address blocks:        190.106.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fa:0d:95:65:c1:ce:d1:99:30:5b:09:3c:36:a7:90:08:46:ab:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21871058E5582F1E44D0679F65ED798674EBFCF
        Validity
            Not Before: Dec 23 21:21:41 2022 GMT
            Not After : Dec 22 21:26:41 2023 GMT
        Subject: CN=C1CD7619B2D141DFB0873647F8CAABC2401A6B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:b7:d3:a4:05:55:66:7c:df:ec:06:28:13:
                    a1:5d:38:98:6a:88:4a:12:e4:75:fe:90:a1:fa:a6:
                    71:91:fb:7d:6c:7c:cf:0f:c9:33:f2:ef:2c:db:51:
                    49:57:a3:38:fb:d0:66:25:fe:ac:d9:0a:64:82:aa:
                    2a:64:96:84:13:ce:1a:2f:28:8a:ca:ea:7b:2b:fd:
                    1c:d8:0a:7b:a8:c2:81:37:9d:9b:79:5c:9e:a1:23:
                    19:6c:c2:aa:19:bf:33:25:dc:9b:7e:f3:fb:ef:26:
                    0e:35:a6:65:e3:f0:9f:46:30:ce:9f:43:30:fb:18:
                    28:f7:18:e4:70:f1:f8:24:d4:f4:96:5d:e0:f8:19:
                    32:e3:bc:ab:18:ec:36:5c:6c:f3:4e:e7:d8:9d:b4:
                    1b:d6:07:ef:ff:bf:46:5c:a1:4c:5d:b9:39:65:05:
                    95:3b:fe:de:f3:3d:04:c9:7d:58:66:fb:cb:be:bf:
                    30:1d:3a:68:03:c9:a2:e2:31:d3:2b:a2:57:a8:c1:
                    e0:74:75:c9:8d:16:7f:82:1a:5f:bc:5d:1f:f4:a0:
                    7b:da:28:4b:4c:fd:be:a4:42:78:b9:e5:73:e8:f6:
                    2b:54:3a:79:a5:bd:8e:1c:d7:42:0b:bf:a5:21:93:
                    8d:b1:cf:67:8a:69:51:89:29:f3:a2:8a:d9:dd:13:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CD:76:19:B2:D1:41:DF:B0:87:36:47:F8:CA:AB:C2:40:1A:6B:6F
            X509v3 Authority Key Identifier:
                keyid:D2:18:71:05:8E:55:82:F1:E4:4D:06:79:F6:5E:D7:98:67:4E:BF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/D21871058E5582F1E44D0679F65ED798674EBFCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D21871058E5582F1E44D0679F65ED798674EBFCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38382e302f32332d3233203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:c2:b4:d0:00:70:12:0e:3d:42:49:02:cc:c8:bf:5a:4d:
         e2:06:5c:9c:3f:1a:36:60:4e:34:3d:fb:e2:1f:fa:65:35:72:
         f7:ab:06:d5:91:40:cb:b4:54:e3:ca:7d:58:fe:36:87:fc:34:
         09:9a:fc:09:7f:08:1c:16:ed:3b:82:d8:2e:0d:c3:fc:02:cb:
         8f:53:72:ea:49:4c:70:e8:b9:ef:15:f1:4f:70:bf:1a:12:01:
         e6:9b:d4:62:01:cd:3f:b0:9c:e3:1c:1b:9e:f1:2e:1a:68:79:
         91:f6:dc:94:13:e3:b1:2b:ef:84:75:15:5d:1c:5a:90:35:2b:
         36:18:26:42:4d:c7:f4:01:74:a8:d5:f5:c8:9c:3e:91:00:0e:
         af:1e:92:fc:f5:a6:f5:9b:ce:6e:c3:e0:f3:bf:c4:c1:b7:2c:
         58:d4:57:98:d5:71:c9:32:5d:9c:74:77:72:85:a3:5b:ce:18:
         b3:55:da:c1:4a:e2:69:84:56:eb:e0:2c:5b:6d:43:ef:89:20:
         94:77:47:0d:3d:38:51:d6:2d:4f:65:df:a5:7f:bc:a4:ca:98:
         1d:1b:55:07:56:c6:93:94:76:2b:19:28:7c:89:1d:07:85:63:
         b4:bb:3d:77:48:a9:90:e9:2f:80:65:1b:c1:83:f3:78:6f:33:
         c9:6d:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:46:12 2025 by rpki-client