Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e39312e302f32342d3234203d3e20323731303130.roa
File:                     3139302e3130362e39312e302f32342d3234203d3e20323731303130.roa (raw, json)
Hash identifier:          dOp6godhsJcZAcnNxaMufxjQVx7/pHwgItEfsf5zkPE=
Subject key identifier:   95:BB:44:4F:3A:F8:FA:7C:B4:D9:48:ED:FE:E5:5C:C5:03:47:56:20
Certificate issuer:       /CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
Certificate serial:       45687527716C8D4AB96A93B36AFF220238EFB3CD
Authority key identifier: 70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e39312e302f32342d3234203d3e20323731303130.roa
Signing time:             Wed 06 Sep 2023 17:16:38 +0000
ROA not before:           Wed 06 Sep 2023 17:11:38 +0000
ROA not after:            Wed 04 Sep 2024 17:16:38 +0000
asID:                     271010
IP address blocks:        190.106.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:68:75:27:71:6c:8d:4a:b9:6a:93:b3:6a:ff:22:02:38:ef:b3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
        Validity
            Not Before: Sep  6 17:11:38 2023 GMT
            Not After : Sep  4 17:16:38 2024 GMT
        Subject: CN=95BB444F3AF8FA7CB4D948EDFEE55CC503475620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:58:3b:3a:a9:fd:35:d8:cb:9f:9d:8e:d9:
                    f3:af:b6:38:69:36:70:fb:9a:03:0d:41:de:f3:23:
                    aa:0b:38:f3:d3:6d:da:cf:dd:05:4a:cb:c3:a7:ce:
                    c9:0c:db:39:8c:2e:0f:05:17:b5:74:85:2a:6a:ab:
                    06:38:29:f7:b1:84:9b:50:7c:d2:13:da:4d:8b:7b:
                    16:99:8c:72:ab:d1:77:38:ad:6b:50:38:57:a5:79:
                    c4:7b:44:0c:fc:73:01:4b:46:7a:f5:af:43:f5:b1:
                    dd:5c:1b:6d:75:17:74:93:a8:ce:ff:97:b2:be:c2:
                    e3:9e:0f:4f:18:74:61:0c:fb:13:1b:d2:24:55:b9:
                    d2:11:f6:05:49:5c:b3:a7:80:2e:ef:b2:a4:93:14:
                    8e:77:74:bb:c5:f8:1a:fe:ed:1e:47:14:79:38:d0:
                    4f:18:60:5c:2b:dd:a1:c2:a8:51:9c:16:f9:70:35:
                    7c:18:30:b5:43:54:aa:36:64:66:29:73:8d:c9:9a:
                    48:e3:cc:f2:49:71:a7:6a:59:42:8a:97:7c:4c:ef:
                    2e:e2:d9:52:ff:55:bd:c2:98:66:bd:4d:0f:81:8b:
                    08:d7:c9:90:d8:1f:a4:88:d7:53:4a:70:7d:e2:59:
                    db:94:f5:8a:0f:b2:1d:b0:e4:8f:a9:9b:40:cb:2d:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:44:4F:3A:F8:FA:7C:B4:D9:48:ED:FE:E5:5C:C5:03:47:56:20
            X509v3 Authority Key Identifier:
                keyid:70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/3139302e3130362e39312e302f32342d3234203d3e20323731303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:18:94:d3:e5:e7:44:c6:d4:4f:46:52:71:c3:93:37:8e:c9:
         11:16:c6:0d:00:7e:f1:f5:35:88:28:6d:e6:1a:aa:3e:07:d9:
         c2:18:bb:f9:57:b0:32:a9:aa:0a:f7:88:a2:ce:78:6c:9a:df:
         0b:7a:15:da:5f:f4:62:a2:08:68:dd:92:46:1c:6f:21:a8:91:
         b0:4d:9c:af:2d:ad:45:f7:9f:f4:58:4c:cc:9f:e0:d0:ff:a9:
         c1:4d:fa:7e:8e:f8:a5:fe:93:32:d6:8f:d5:90:38:14:27:c4:
         3b:87:20:e3:87:71:fc:90:04:f8:1e:8f:60:8b:98:9b:51:9b:
         bb:94:28:53:e8:4f:a8:d3:8f:51:a6:71:4a:31:95:16:95:50:
         f2:f9:fb:66:54:c6:ff:49:f2:ea:69:44:07:73:e0:38:6c:b6:
         05:e6:e0:07:7c:0b:ce:0f:08:86:84:ce:c5:da:7a:89:a3:a6:
         2d:ce:bc:30:55:f2:6e:71:ed:3e:08:b7:00:3b:44:3c:72:1f:
         cc:fc:e3:f1:db:2e:27:af:08:9e:af:fd:1f:a0:50:2b:d0:da:
         22:47:0a:ed:9e:03:0c:71:f8:fc:c5:58:88:a6:e9:1e:88:aa:
         36:36:28:d8:9f:bf:fc:7a:d7:1f:c7:8b:40:8f:33:77:cf:09:
         b0:93:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:49 2025 by rpki-client