Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38392e302f32342d3234203d3e20323731303130.roa
File:                     3139302e3130362e38392e302f32342d3234203d3e20323731303130.roa (raw, json)
Hash identifier:          3W/GLlPUSxjW4Sg7cTtbN19jRE90VANw0C0VnkwE7Mg=
Subject key identifier:   82:A9:6E:06:5E:08:9D:D7:57:0D:57:FE:F3:75:FE:0F:82:BA:EE:84
Certificate issuer:       /CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
Certificate serial:       2BF6008116B0B4BB37084A06B6610FDFB80ABC57
Authority key identifier: 70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38392e302f32342d3234203d3e20323731303130.roa
Signing time:             Wed 06 Sep 2023 17:16:39 +0000
ROA not before:           Wed 06 Sep 2023 17:11:39 +0000
ROA not after:            Wed 04 Sep 2024 17:16:39 +0000
asID:                     271010
IP address blocks:        190.106.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f6:00:81:16:b0:b4:bb:37:08:4a:06:b6:61:0f:df:b8:0a:bc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
        Validity
            Not Before: Sep  6 17:11:39 2023 GMT
            Not After : Sep  4 17:16:39 2024 GMT
        Subject: CN=82A96E065E089DD7570D57FEF375FE0F82BAEE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:89:24:69:27:aa:1d:0c:f3:ca:d3:05:ae:
                    7b:7d:c3:d1:b6:11:80:e4:a9:2e:e8:0f:dc:ad:6c:
                    6d:35:9a:fd:40:01:b0:28:4e:1f:c0:35:a6:a7:58:
                    36:61:d5:b0:af:7b:54:cd:3f:99:4d:84:fe:e8:2a:
                    a1:01:53:d0:a1:31:5c:7a:6a:1c:ca:8b:d2:03:2d:
                    9f:47:43:5e:05:88:d1:fe:95:9e:67:10:79:80:64:
                    90:dd:c9:b9:1d:09:0e:bb:d1:92:45:46:0a:f2:df:
                    c9:66:60:12:ad:5b:cd:d8:6c:3a:4c:07:c7:05:3b:
                    6b:78:40:e1:8b:b0:57:04:12:d7:35:f6:76:63:08:
                    8b:7c:87:66:ed:42:4d:48:87:78:ef:1f:30:85:a6:
                    20:a9:c9:81:db:52:8a:fd:cb:db:da:be:b2:ae:7f:
                    20:72:d8:63:72:e0:eb:7b:b4:f9:08:bf:7b:93:2b:
                    ed:50:67:1e:03:6b:a6:61:43:74:bb:5a:92:29:7e:
                    e3:00:58:57:1a:aa:c8:8b:c3:43:e0:4e:d6:57:35:
                    47:47:4e:d0:b4:27:af:04:99:d5:af:0e:2e:9c:4d:
                    77:9e:bc:ae:93:67:f8:19:29:9e:81:4e:d2:a6:19:
                    39:82:19:5c:1a:24:a2:d2:a1:1b:5a:1c:f7:68:e0:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:6E:06:5E:08:9D:D7:57:0D:57:FE:F3:75:FE:0F:82:BA:EE:84
            X509v3 Authority Key Identifier:
                keyid:70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e38392e302f32342d3234203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:be:2e:c7:85:dd:8f:6e:01:70:70:ec:35:1b:9a:06:6f:26:
         79:b4:5d:70:ff:19:42:6c:da:c3:11:f6:75:44:df:9c:bd:10:
         06:c7:c9:44:ea:86:7e:59:30:6f:d2:cb:19:7e:4f:19:be:bf:
         13:a8:2d:ec:09:ab:1c:1f:52:1c:42:f7:67:fa:d8:b5:30:69:
         9a:82:65:6c:5b:f2:e4:13:cf:df:55:6c:60:f1:39:2b:05:ec:
         b8:52:64:02:2e:93:10:b8:39:57:81:a5:1b:de:46:12:91:4c:
         44:24:0e:e5:ed:72:ba:6c:e9:49:30:9f:7a:f9:ee:a8:16:1a:
         45:2c:de:29:30:b5:f6:88:41:89:7f:d7:0d:f2:b1:ef:2a:c5:
         fe:d3:ca:81:32:6b:bc:6b:e0:3c:9c:a5:2b:d4:48:85:ba:5b:
         d7:32:93:04:cd:1a:aa:27:33:82:da:28:bb:cd:92:fa:f6:cb:
         ab:0f:a6:74:4b:a9:6a:d8:48:d6:0d:40:bf:88:32:7e:f0:67:
         93:94:3e:02:6e:a0:b9:f8:0f:5e:96:a7:ea:7f:d3:95:7f:4e:
         ca:df:30:20:1b:b5:c0:d4:23:96:bb:3e:f5:5d:45:2c:53:74:
         a5:45:cf:3f:ab:91:a7:26:12:14:9d:43:f1:e8:15:30:cc:8d:
         2f:50:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:39 2025 by rpki-client